Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/jYym-k4NqAkdCLi9noIdqKyroBc.roa
File: jYym-k4NqAkdCLi9noIdqKyroBc.roa (raw, json)
Hash identifier: XxaJmK76RmlHvpVsBW7XHZTjAXqiFMyOJKAPFwuW3V0=
Subject key identifier: 8D:8C:A6:FA:4E:0D:A8:09:1D:08:B8:BD:9E:82:1D:A8:AC:AB:A0:17
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0196464BBBE6C176A1FC14244BD04C64F7CD
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/jYym-k4NqAkdCLi9noIdqKyroBc.roa
Signing time: Fri 18 Apr 2025 00:28:10 +0000
ROA not before: Fri 18 Apr 2025 00:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.153.0/24 maxlen: 24
89.150.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 05:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:4b:bb:e6:c1:76:a1:fc:14:24:4b:d0:4c:64:f7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Apr 18 00:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d8ca6fa4e0da8091d08b8bd9e821da8acaba017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:66:71:b4:12:cb:1f:35:9a:95:c6:03:22:
45:2a:0e:6b:86:80:6a:76:0d:38:be:e4:5d:57:a8:
50:72:0a:32:cb:df:cb:3e:c3:bf:54:17:1c:ee:cc:
98:82:c8:e3:ac:d9:0a:b0:fd:fa:c3:0b:e9:c2:9d:
28:1d:6e:d3:47:8e:d6:6f:cf:b7:cd:7a:6c:67:51:
00:e7:90:9f:c0:17:a2:dd:95:cb:41:5c:21:af:05:
56:8b:a1:23:cb:61:1e:24:67:d0:42:4c:fe:2e:be:
ed:49:18:a4:28:25:24:c0:84:93:33:1b:a7:46:6b:
05:54:d5:59:09:ae:0c:51:ce:f6:01:12:1f:4a:96:
b2:90:ea:d7:18:58:3d:3c:9b:21:ec:e4:6e:cd:06:
ba:ad:ad:58:f0:e2:59:f8:a8:34:94:b8:6b:8d:80:
d1:81:56:0c:f7:8e:41:d5:9f:5c:74:af:88:fd:4a:
21:88:a7:fe:34:21:e1:b6:b2:da:17:8f:bb:8d:d8:
f6:75:22:82:4c:ba:84:d5:1c:a5:b2:13:73:74:e3:
c8:6f:85:ae:5f:9b:5d:c8:5e:7e:90:d8:8a:d4:9f:
ac:cd:48:aa:a8:45:08:cd:fc:86:3e:41:9c:a5:b9:
ad:d0:53:99:e2:27:7a:f3:d3:0d:6d:43:24:62:3d:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:A6:FA:4E:0D:A8:09:1D:08:B8:BD:9E:82:1D:A8:AC:AB:A0:17
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/jYym-k4NqAkdCLi9noIdqKyroBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
89.150.49.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e5:91:df:c6:fa:e9:5b:d0:3e:8d:cd:ea:d6:c4:b3:0a:9f:
3b:32:53:95:a9:c2:2b:27:6e:4c:32:6d:74:ef:9d:62:00:81:
fa:d9:ba:23:69:1e:16:86:41:40:1d:56:fc:9a:27:47:b8:e3:
ce:ca:a8:16:29:7f:34:aa:c2:83:7e:40:4d:7a:df:8a:f2:90:
1e:9a:3b:68:5a:a8:72:20:d1:af:a8:41:f7:dd:19:cb:d6:89:
ac:50:0e:5a:f7:1b:89:6f:0f:c1:bd:0c:0d:0b:b2:34:06:51:
94:70:f6:71:45:57:a7:ef:2b:d9:85:b1:2b:03:8d:a5:44:99:
bf:cf:e1:5f:af:40:5b:dd:30:ba:4f:af:03:8a:1d:c4:9e:65:
08:a3:27:56:29:3e:7a:c8:ae:f7:63:53:1e:b3:3c:51:eb:ab:
0c:90:c7:5e:3f:d3:3b:a3:b0:d5:0f:70:cc:11:f0:b5:95:85:
03:4a:96:21:77:97:f3:8e:c7:76:16:ee:17:54:ed:a8:8b:fc:
b4:55:e2:de:ce:6c:e0:9f:fb:9b:ae:0b:ea:ef:8c:00:66:9b:
a9:79:8a:c2:2c:50:75:5f:f9:f1:ee:07:45:0a:70:0f:d7:88:
eb:88:77:66:9b:55:b0:6a:20:d7:56:23:d9:f1:1e:59:ab:90:
6d:fb:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:00:39 2025 by rpki-client