Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/x-Lpqef-UTyO4reRTq0Tecj2gpA.roa
File: x-Lpqef-UTyO4reRTq0Tecj2gpA.roa (raw, json)
Hash identifier: 0reQfIewt2+TH1bzrQPcKvINSKDy1BzkptER9esuD54=
Subject key identifier: C7:E2:E9:A9:E7:FE:51:3C:8E:E2:B7:91:4E:AD:13:79:C8:F6:82:90
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 018F388F763924D9008DAE9643C5CB14B3B0
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/x-Lpqef-UTyO4reRTq0Tecj2gpA.roa
Signing time: Thu 02 May 2024 09:07:57 +0000
ROA not before: Thu 02 May 2024 09:07:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 91.200.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 09:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:8f:76:39:24:d9:00:8d:ae:96:43:c5:cb:14:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: May 2 09:07:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7e2e9a9e7fe513c8ee2b7914ead1379c8f68290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8a:09:ce:92:2a:67:a9:d2:20:d7:57:01:56:
9c:c2:20:be:89:68:c9:e0:bf:48:fa:c0:d3:8f:14:
19:52:a4:ce:f9:02:43:c2:b7:cf:46:80:31:59:b5:
7c:40:2a:9e:a6:19:6f:06:65:ce:6f:4e:53:12:40:
7a:cf:8c:e2:14:04:db:f5:66:1e:1b:2f:c6:2b:93:
fe:97:c9:95:71:00:7b:61:ea:c3:6e:b8:4b:d2:bf:
d2:f1:9e:3d:d0:76:61:2e:6a:d9:87:5f:a0:8d:78:
8e:f0:ec:ab:36:70:31:b8:1c:90:09:51:3f:08:df:
55:cb:33:9a:b6:31:dc:40:ce:92:d4:c7:ea:5c:fe:
c5:c7:ce:ec:5e:39:c6:4d:29:55:a4:0a:d6:1c:b6:
7c:3a:e0:c2:f6:ac:1c:21:f2:f9:ab:d0:0e:35:c9:
b4:c9:5c:68:4e:2d:14:57:02:8a:05:bd:20:5a:04:
57:da:46:91:b5:9a:72:6a:f3:57:b1:3f:44:4d:60:
14:c4:22:80:98:f2:08:d9:a9:81:f8:cf:0a:6b:2f:
12:d2:57:b5:4a:3f:55:09:c8:ff:46:ea:8f:a0:6e:
59:1d:c4:93:ff:86:0e:d6:16:33:3f:d3:c7:4c:ba:
48:d6:1f:c3:37:57:4b:af:49:81:35:7e:99:de:d8:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E2:E9:A9:E7:FE:51:3C:8E:E2:B7:91:4E:AD:13:79:C8:F6:82:90
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/x-Lpqef-UTyO4reRTq0Tecj2gpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.57.0/24
Signature Algorithm: sha256WithRSAEncryption
46:46:b5:bf:98:48:d7:90:b9:7a:8a:e4:58:fd:6a:82:71:2c:
04:47:5f:af:8c:f3:ca:7f:db:d7:4b:a1:71:a5:5e:b5:8f:78:
7d:05:88:9f:51:92:e6:ac:ba:7e:0a:80:0f:8c:46:cf:16:97:
89:dc:5b:6d:3a:6c:9d:8b:16:4b:6a:ae:8f:21:7d:83:04:d9:
69:d0:0c:2b:0c:c8:03:f9:8f:f6:69:62:ae:09:b3:7a:3e:54:
65:f5:f9:3e:a5:88:5e:02:5d:b2:c9:db:0a:cd:51:e8:aa:2a:
64:14:69:d1:0b:64:81:c7:e0:8d:58:43:d0:e8:19:2c:10:db:
8a:57:07:ed:4e:be:d2:a0:13:c3:47:0f:e5:74:d6:9c:86:d7:
13:95:fe:7d:42:aa:27:11:5e:d9:50:a7:66:3d:2a:3e:d9:f0:
44:04:1c:c6:ff:ad:6a:1e:67:38:21:c6:23:46:81:f9:62:9c:
c0:a0:46:d8:25:1f:e8:3f:8c:11:2e:6a:82:c3:86:df:4a:c7:
ac:86:fe:9a:de:02:58:b4:53:99:95:34:a8:27:44:4f:41:ca:
fd:17:93:ec:66:92:9b:39:ea:b6:14:4e:1c:9c:28:4e:ca:4d:
66:fb:f1:dd:57:45:9f:ed:28:be:81:90:0f:ee:bf:42:1e:5f:
ec:1b:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:11 2025 by rpki-client