Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/_AmuzKviKCGNRKw6nGa-6PSDvJg.roa
File: _AmuzKviKCGNRKw6nGa-6PSDvJg.roa (raw, json)
Hash identifier: El5EjOVq/bvGk9Do33K3lcS/Wp+iK0VgEbA8lvQEM+c=
Subject key identifier: FC:09:AE:CC:AB:E2:28:21:8D:44:AC:3A:9C:66:BE:E8:F4:83:BC:98
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 019425FC2AC517E8AB523354207639440619
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/_AmuzKviKCGNRKw6nGa-6PSDvJg.roa
Signing time: Thu 02 Jan 2025 07:47:50 +0000
ROA not before: Thu 02 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 91.239.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 21:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2a:c5:17:e8:ab:52:33:54:20:76:39:44:06:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Jan 2 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc09aeccabe228218d44ac3a9c66bee8f483bc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:1d:16:d5:68:bb:9d:3b:3b:c6:97:12:32:
18:d8:61:56:3a:e6:54:dc:f9:78:16:b8:26:f2:ee:
d2:65:cd:44:3a:d1:17:7c:70:e4:70:d3:48:e2:ac:
03:30:1e:89:b2:a8:f8:f1:97:8e:25:72:eb:3e:ed:
3f:47:41:a8:70:72:a8:cd:d5:6c:ef:f5:d5:af:cf:
ff:7a:4d:53:d4:3e:94:a6:a4:ec:ad:64:76:01:cb:
f7:ad:20:06:76:28:e2:09:ee:ae:1a:e3:c8:37:26:
d6:dc:f2:0c:23:b6:bc:67:60:16:8e:47:23:7f:7f:
6c:e5:02:46:d1:6c:11:76:34:6e:e5:fc:42:af:ef:
75:98:20:aa:0d:ff:66:92:44:2c:8d:86:64:f9:f7:
ea:68:ca:33:d7:a2:72:0d:bd:13:8e:d1:c5:60:74:
b0:fb:d0:c2:2b:ae:f0:a6:d6:48:f7:88:ef:fa:1b:
78:06:fa:1c:81:31:a1:c5:84:83:cf:a1:5b:0b:b0:
8e:9f:53:05:25:e5:59:b7:27:25:86:08:05:44:92:
3a:7e:33:68:68:ac:8d:5d:b3:5f:26:1d:1d:19:89:
6d:68:bf:08:c2:6b:53:10:ce:70:b7:22:ae:e4:ae:
a2:1e:97:c6:fb:ca:16:26:57:d9:d8:4f:53:5f:f1:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:09:AE:CC:AB:E2:28:21:8D:44:AC:3A:9C:66:BE:E8:F4:83:BC:98
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/_AmuzKviKCGNRKw6nGa-6PSDvJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f3:84:f4:03:c8:83:15:30:16:0f:8c:47:13:ba:8a:99:b8:
83:fd:45:09:cb:b6:cb:c8:ea:d0:a5:72:28:46:20:e7:25:0e:
dc:9c:01:a5:eb:47:b0:be:de:a4:9c:00:51:ae:04:d8:db:bc:
05:10:3e:80:51:d6:1e:81:be:a1:2e:a7:48:84:1b:e0:96:52:
5c:7a:82:b9:5a:cd:9d:70:79:97:fb:39:15:8b:3e:f0:5e:6b:
2f:94:5c:77:41:32:67:fb:4a:c7:a0:bb:1d:c3:d2:31:9b:81:
d6:0b:9c:f7:52:d4:08:3a:90:bb:11:7c:75:19:8a:7a:1c:78:
4d:d2:23:ee:20:dc:53:30:35:9e:16:27:6e:11:bc:c6:5a:04:
bb:86:1c:d3:36:ae:7e:9f:fe:92:e4:43:32:ce:9c:71:55:60:
7a:d0:c4:ab:04:71:c3:67:b8:23:37:88:e8:0a:1d:89:2e:0a:
6d:96:22:b3:53:4d:32:ac:fe:29:57:58:55:19:bc:52:ae:18:
41:d0:38:72:ca:ff:a1:5d:cc:3b:c7:82:c0:6b:8a:cc:e7:6a:
d3:73:21:3c:ab:97:72:af:31:08:64:5c:24:9a:11:93:3e:ce:
af:e4:bf:04:fb:72:a4:f8:cf:b2:a0:f4:35:a1:38:1e:ff:cf:
d7:9b:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:37:26 2025 by rpki-client