Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/1-_aKXKAb95IPeBZWlRI0bwPNX6I.roa
File: 1-_aKXKAb95IPeBZWlRI0bwPNX6I.roa (raw, json)
Hash identifier: tnriAVwpL8RZEzKa2oxKFNehVM+dvL19kDXJxe9wLyc=
Subject key identifier: FB:F6:8A:5C:A0:1B:F7:92:0F:78:16:56:95:12:34:6F:03:CD:5F:A2
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01942823807F4DA3594EFB1E53AF4A5FBA67
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/1-_aKXKAb95IPeBZWlRI0bwPNX6I.roa
Signing time: Thu 02 Jan 2025 17:50:02 +0000
ROA not before: Thu 02 Jan 2025 17:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 91.149.193.0/24 maxlen: 24
91.149.215.0/24 maxlen: 24
91.149.228.0/24 maxlen: 24
91.149.244.0/22 maxlen: 22
91.149.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 16 Jan 2025 06:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:80:7f:4d:a3:59:4e:fb:1e:53:af:4a:5f:ba:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 2 17:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbf68a5ca01bf7920f7816569512346f03cd5fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:df:11:e6:2a:2b:85:f7:56:f7:e1:4f:06:
27:c4:c7:14:b1:5f:8b:b7:3f:6f:00:ea:4e:41:ed:
30:7e:59:cf:37:6c:89:ad:fd:bc:51:20:50:2d:59:
6b:82:10:97:e3:be:34:70:f6:26:a0:1c:5a:cd:59:
b5:5c:54:39:3b:c3:cd:55:e2:74:e7:55:e4:5c:66:
61:77:5d:2b:ec:6d:f5:5f:79:92:e0:66:0b:30:22:
d5:22:21:6c:0e:6f:cb:de:27:b5:85:f8:9a:9a:a3:
14:4b:23:6c:19:3e:18:4f:3c:c8:47:34:b5:da:5a:
52:a0:f1:97:3b:e9:04:c9:af:f2:87:22:52:ef:df:
6b:38:37:c6:c6:54:f7:af:19:b3:8f:6d:8e:f0:48:
da:61:3c:cb:6b:90:9d:d3:ff:4e:79:ff:e5:af:80:
ec:2b:0b:95:be:77:20:9c:cb:cb:ef:ec:36:3e:60:
58:ab:d1:c8:94:6a:e4:7c:33:58:f2:b2:2e:61:cd:
e7:e1:81:2b:08:e2:b1:9d:78:cd:7f:cf:fe:af:12:
86:52:b1:20:6e:2a:ea:f4:d7:8a:79:b6:a3:7b:0c:
02:a4:e6:5a:01:61:ef:5e:33:77:e3:86:68:c0:37:
47:5e:14:25:6a:b0:80:19:91:4e:d7:39:ed:40:33:
31:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F6:8A:5C:A0:1B:F7:92:0F:78:16:56:95:12:34:6F:03:CD:5F:A2
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/1-_aKXKAb95IPeBZWlRI0bwPNX6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.193.0/24
91.149.215.0/24
91.149.228.0/24
91.149.244.0-91.149.251.255
Signature Algorithm: sha256WithRSAEncryption
83:6a:3c:33:a1:69:4b:2b:7e:d7:be:da:9f:c4:2a:13:b3:cf:
85:df:75:19:8a:97:65:bb:7c:00:7e:15:e0:c8:18:12:0d:48:
92:03:99:6f:58:43:ef:b7:cf:c2:5f:6c:98:d8:43:e3:85:64:
12:b0:ea:56:2f:e4:e9:ad:f2:0c:7a:c0:4b:78:30:dc:59:bb:
50:44:aa:f7:a2:0d:53:5f:de:e2:77:1e:05:16:f3:3c:31:60:
af:66:85:e3:f9:74:6a:9d:5f:c7:34:b5:7a:90:12:2b:fa:6b:
8b:b2:7b:67:ad:cc:7c:8e:10:f4:eb:0d:28:7d:75:0e:44:40:
66:a5:b6:e4:b9:40:03:f7:ab:d3:90:73:15:26:49:d0:54:2b:
34:67:d0:e2:8c:f1:99:25:e4:88:18:50:b3:9e:48:5d:7a:03:
cb:b7:94:26:13:76:6e:27:f5:17:47:20:66:eb:75:37:71:e8:
55:f6:95:e5:cb:5b:f4:bd:45:58:d0:4d:48:c5:58:65:f4:ae:
f6:c6:01:00:6b:c3:41:6c:9e:87:d1:1c:dd:11:8f:1f:1a:7f:
77:2f:46:02:31:cc:16:f7:a1:87:d8:c9:40:3e:7c:0a:97:83:
1e:0d:85:20:b6:9b:8b:63:79:10:f4:86:7f:a3:67:80:86:ec:
72:d0:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:42:02 2025 by rpki-client