Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/6VWS3n4RTMZt4qfwQYtPtcl8wvQ.roa
File: 6VWS3n4RTMZt4qfwQYtPtcl8wvQ.roa (raw, json)
Hash identifier: RPjYIX2A8yzZM6wOJ08qMOe4higCfakhv6DT1FMUwcY=
Subject key identifier: E9:55:92:DE:7E:11:4C:C6:6D:E2:A7:F0:41:8B:4F:B5:C9:7C:C2:F4
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0194735CC2896F52B14FBE2E0CF93572AC99
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/6VWS3n4RTMZt4qfwQYtPtcl8wvQ.roa
Signing time: Fri 17 Jan 2025 08:24:06 +0000
ROA not before: Fri 17 Jan 2025 08:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 05:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:5c:c2:89:6f:52:b1:4f:be:2e:0c:f9:35:72:ac:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 17 08:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e95592de7e114cc66de2a7f0418b4fb5c97cc2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:af:01:05:9e:bc:88:6d:c6:ec:2b:0b:cc:
e4:4b:41:7e:93:53:3c:67:69:59:8c:3d:a4:16:9b:
3c:5b:2b:00:12:01:22:73:5c:2e:84:1b:c3:0b:9f:
a6:57:76:e0:3b:2f:e5:82:df:09:74:e9:ed:31:38:
27:fe:88:ee:fe:39:0a:71:ae:46:67:ac:aa:da:08:
bc:a5:62:c4:c1:ed:ae:10:ec:5f:ad:a8:db:71:13:
4f:4c:94:f2:18:99:d5:51:f7:3e:66:c6:b9:11:55:
8d:b6:80:f1:f8:69:12:55:19:74:5b:77:43:31:84:
17:27:8e:ae:34:68:63:7d:26:ae:7b:2d:eb:5c:52:
c5:a8:19:cd:a2:1b:04:14:0c:5b:cc:09:80:75:7e:
55:8b:80:d5:98:9a:94:35:cc:77:3a:fd:f9:a1:8b:
33:fa:91:07:83:a3:dd:2f:af:5b:94:e4:a6:5c:ec:
4e:68:ab:55:af:dd:0a:0d:71:d1:8d:64:2e:d0:e1:
a3:2e:dd:d9:5c:6d:9e:cc:25:75:77:0b:50:b7:1b:
0d:12:db:f5:7d:04:77:02:c1:44:97:53:d9:0e:1d:
89:bd:ea:1b:6c:38:90:c4:92:0e:13:6c:62:f9:2d:
13:09:5b:40:94:42:45:32:aa:cb:82:14:e9:00:9d:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:55:92:DE:7E:11:4C:C6:6D:E2:A7:F0:41:8B:4F:B5:C9:7C:C2:F4
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/6VWS3n4RTMZt4qfwQYtPtcl8wvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:54:a4:cb:c0:84:75:4a:16:99:0f:51:e5:c1:2d:02:0f:0a:
0f:61:4c:fd:32:5a:ed:19:b5:e1:ea:c3:d2:0e:6c:48:db:28:
74:0d:16:d1:92:24:50:af:49:92:3c:ed:61:38:d4:f3:96:6f:
0b:bd:ef:e4:88:fb:73:11:81:cc:87:6c:34:7c:67:c7:b3:5a:
fb:66:92:17:a3:0c:92:4c:c8:cc:6f:6c:55:cc:ff:9d:f1:ba:
84:41:8a:4d:00:62:52:4a:b1:ed:ac:59:c1:fd:98:fe:a5:ea:
48:75:56:1e:28:ba:cc:1b:12:aa:59:b4:2f:a8:5c:17:01:30:
cf:55:fd:45:0a:6f:09:d6:22:cd:8f:fb:f0:bd:94:82:b7:d0:
5c:d4:97:2e:98:67:6d:63:d1:f0:16:13:af:29:aa:c9:f2:aa:
ba:fb:6f:88:e1:ee:e4:bf:45:a9:41:f1:8a:2f:1a:b5:a1:9b:
9a:5e:eb:b7:fc:a2:bb:65:02:ff:3e:9c:b6:1f:7c:be:60:c4:
18:1a:2d:79:0d:a7:84:92:dd:fc:ab:52:fe:67:35:43:e4:c9:
e8:d3:f9:8d:a4:71:7a:bf:87:e5:31:73:09:47:5b:8b:7b:6d:
ab:b6:39:9d:aa:14:ab:6c:dc:95:1e:2e:92:9f:6d:ca:a6:c5:
40:36:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:49:43 2025 by rpki-client