Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/dLbzEcJJ0z45o_R-kNCrkE_uuaU.roa
File: dLbzEcJJ0z45o_R-kNCrkE_uuaU.roa (raw, json)
Hash identifier: d1qjxd2RKDEGSKsD4aOIRv5AAJMKtYSr5cpY/ulKna4=
Subject key identifier: 74:B6:F3:11:C2:49:D3:3E:39:A3:F4:7E:90:D0:AB:90:4F:EE:B9:A5
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 0196343C285A2FA54199A77D5B4598D0C17B
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/dLbzEcJJ0z45o_R-kNCrkE_uuaU.roa
Signing time: Mon 14 Apr 2025 12:17:59 +0000
ROA not before: Mon 14 Apr 2025 12:17:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196776
IP address blocks: 91.215.236.0/23 maxlen: 24
91.215.238.0/24 maxlen: 24
91.215.239.0/24 maxlen: 24
91.229.250.0/23 maxlen: 24
195.88.90.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:3c:28:5a:2f:a5:41:99:a7:7d:5b:45:98:d0:c1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Apr 14 12:17:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74b6f311c249d33e39a3f47e90d0ab904feeb9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:0a:cc:eb:ee:5a:61:fa:0c:74:88:6c:a8:
1a:02:d1:bd:37:9b:fc:b8:03:37:a3:94:a7:7a:97:
93:d9:e5:f2:00:e6:47:6c:fe:f7:ca:1f:bc:7e:d7:
93:f5:17:82:b1:f8:01:76:21:60:e6:e9:27:30:7e:
f0:bd:29:e6:db:68:f2:c7:57:59:1b:59:f4:f5:98:
94:89:0f:7b:7f:f1:3c:a9:67:18:3d:41:b6:94:e2:
e9:d4:7d:48:aa:af:a7:11:bd:ac:e1:27:fc:15:9b:
94:55:63:16:db:34:44:75:9e:f9:04:3b:e7:e9:21:
04:66:0d:6f:e7:03:a7:4b:0e:d5:c8:5f:2c:ca:9f:
5b:4b:6f:8b:26:62:69:d8:17:5e:32:3d:5f:82:71:
ea:53:ef:e0:9c:48:52:27:ff:bd:4d:06:fa:43:42:
a4:10:85:6f:24:28:db:e4:0e:ee:e0:dc:6c:a1:05:
dc:5b:f2:74:a0:65:02:09:37:56:c5:7c:01:12:59:
d4:07:a8:c0:5c:cb:28:3b:60:71:fc:16:e7:72:a1:
22:40:a8:40:9f:b9:0e:7e:5d:af:b5:a6:26:cd:2c:
5d:ea:dc:33:35:7f:4a:8e:bc:90:93:e3:67:09:39:
ab:94:13:cd:45:94:0a:ad:a1:e3:f5:bf:a8:e7:f8:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B6:F3:11:C2:49:D3:3E:39:A3:F4:7E:90:D0:AB:90:4F:EE:B9:A5
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/dLbzEcJJ0z45o_R-kNCrkE_uuaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.236.0/22
91.229.250.0/23
195.88.90.0/23
Signature Algorithm: sha256WithRSAEncryption
17:5a:6f:03:1f:b2:0a:72:5d:63:fa:41:f7:22:98:4d:8c:df:
93:b8:49:35:e6:a7:b1:a5:fe:b7:c5:e4:a2:38:45:f6:23:88:
14:a5:1f:ca:4b:63:38:82:cf:9d:0d:a8:62:35:15:c5:61:e9:
d5:1e:40:7c:51:9b:ec:c8:8d:dc:56:01:2d:5f:8a:89:df:28:
9d:bd:dd:ee:85:39:1c:28:35:3e:f8:1b:76:41:d3:1a:3e:cd:
e9:96:49:08:3f:9e:03:2c:bb:e2:12:8a:55:e7:f5:24:6f:7b:
8b:c0:4d:8f:f6:e5:de:59:ef:dd:72:46:44:37:d2:44:97:37:
3f:cc:e0:8b:c1:c6:56:25:de:a3:0f:75:7e:64:e0:2a:b0:2d:
dc:fa:37:1c:bf:20:dd:8c:1c:bd:b5:47:ea:3f:37:40:4e:53:
95:29:44:b6:09:14:0d:d6:95:58:f6:b5:32:3c:2e:0b:ee:4e:
2c:f7:83:26:cb:e9:29:b4:52:94:14:ef:12:2d:1b:b1:6f:bb:
20:24:a2:d0:9a:20:d4:73:0c:30:b8:16:c1:a3:09:bd:17:35:
6c:c2:8b:93:69:7d:fe:49:e8:5a:d4:53:59:82:de:8a:27:47:
c5:00:50:b9:c3:5d:36:5c:bc:8c:25:74:40:52:71:79:bb:a0:
a2:ad:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:57 2025 by rpki-client