Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/sYiUC5SvuL7hnLElqtPcNoI_Jro.roa
File: sYiUC5SvuL7hnLElqtPcNoI_Jro.roa (raw, json)
Hash identifier: oFk/H/ZmuruR+DU4q+hIyS8leFs2mBe8Y3WpZ3HEXWw=
Subject key identifier: B1:88:94:0B:94:AF:B8:BE:E1:9C:B1:25:AA:D3:DC:36:82:3F:26:BA
Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial: 0193D4CD44716466C2FE07C60F6EDD513B46
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/sYiUC5SvuL7hnLElqtPcNoI_Jro.roa
Signing time: Tue 17 Dec 2024 13:27:22 +0000
ROA not before: Tue 17 Dec 2024 13:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47884
IP address blocks: 91.206.244.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:cd:44:71:64:66:c2:fe:07:c6:0f:6e:dd:51:3b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Validity
Not Before: Dec 17 13:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b188940b94afb8bee19cb125aad3dc36823f26ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:44:67:bb:ba:36:67:72:c4:4e:49:90:7c:
cb:46:6f:b9:a7:ac:22:cb:2a:af:84:df:4e:1a:b1:
28:62:28:ff:93:83:2f:5b:1d:07:72:63:29:36:c0:
2a:68:23:ec:bc:b7:8c:7f:2f:49:3b:46:d6:6f:e0:
ab:b9:64:d9:63:9e:d6:52:b6:48:53:a3:59:ef:0f:
40:3f:7a:fa:40:1e:84:e1:59:b9:bd:86:e7:41:86:
58:4e:7b:98:ad:bd:96:eb:35:a7:15:65:fb:41:61:
ec:fc:fb:ee:84:76:fb:b4:f2:12:94:96:96:4d:83:
27:a6:64:b6:06:75:41:44:13:ab:9e:4e:ee:33:97:
ad:11:cd:9e:6c:6e:c8:ef:60:ae:aa:db:5e:ec:6d:
75:a6:48:a0:3b:af:a4:c7:b8:17:ce:c5:ae:9b:39:
d4:ac:12:9c:8a:9a:ca:02:2e:cd:99:7f:07:6e:55:
1a:aa:42:30:5c:e4:84:0d:a6:d9:1c:f4:3e:d0:59:
1d:d6:24:4b:80:06:ce:f2:18:41:bb:a6:c4:ac:60:
85:04:b3:ad:b5:34:2a:d9:1e:c9:e1:76:91:4d:fe:
13:1b:8a:c7:f2:b3:0d:57:32:dd:69:6b:85:92:fb:
00:04:9c:4f:ac:0a:28:0a:c1:3e:e5:9c:ec:60:c4:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:88:94:0B:94:AF:B8:BE:E1:9C:B1:25:AA:D3:DC:36:82:3F:26:BA
X509v3 Authority Key Identifier:
keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/sYiUC5SvuL7hnLElqtPcNoI_Jro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.244.0/23
Signature Algorithm: sha256WithRSAEncryption
f2:2a:14:d3:25:70:17:7f:46:34:53:b0:6a:9f:87:5e:2d:6c:
50:a8:e0:6d:22:18:b0:c1:96:73:d9:cf:09:d9:f3:eb:53:52:
83:57:bb:08:e0:65:9f:e8:aa:6c:28:29:90:93:b1:fe:b4:84:
f4:e8:02:94:a8:0d:de:1e:fb:24:27:d9:e1:2f:7c:1b:c5:12:
32:91:7f:b7:bb:52:07:31:0e:37:80:46:11:45:20:0a:0a:d2:
7a:ad:ed:7a:c2:a5:78:5e:70:42:17:07:9b:19:11:74:ed:a8:
c6:5d:96:a6:0d:e1:38:5f:78:cd:ff:74:ad:8a:e2:5a:34:3d:
a7:42:9a:b0:33:29:25:24:ac:e9:c2:1f:d7:bc:73:69:99:ab:
8e:c5:0a:0a:77:75:6d:f1:3a:1f:26:4e:d8:02:54:58:b8:04:
4a:fe:25:58:de:c0:c7:10:87:09:1b:4c:31:5d:f1:c5:5c:8d:
18:29:2d:38:82:45:61:ef:7a:2d:8b:31:31:f3:91:49:c5:21:
f7:51:bf:18:f2:c0:9f:d8:49:b7:0e:0f:5e:19:d0:8a:4e:c2:
73:d0:13:3e:ce:f6:5e:ed:38:ab:8f:8d:b0:94:ae:f9:32:bc:
81:bf:be:ae:41:07:82:72:57:d8:a4:0f:69:02:bb:30:e5:ec:
1e:50:01:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:10:24 2025 by rpki-client