Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/F7KvhP4smcWVx-yqp-IZjnV31Ck.roa
File: F7KvhP4smcWVx-yqp-IZjnV31Ck.roa (raw, json)
Hash identifier: ix0WRpSmfhIeC5Yt5BdET/DP99yDgxHFwLiNXpyt1GY=
Subject key identifier: 17:B2:AF:84:FE:2C:99:C5:95:C7:EC:AA:A7:E2:19:8E:75:77:D4:29
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 0193BFE62D0F0B2AFD0C999226A3FBB566B4
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/F7KvhP4smcWVx-yqp-IZjnV31Ck.roa
Signing time: Fri 13 Dec 2024 12:02:33 +0000
ROA not before: Fri 13 Dec 2024 12:02:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213713
IP address blocks: 91.199.184.0/23 maxlen: 23
2a0f:8f80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:e6:2d:0f:0b:2a:fd:0c:99:92:26:a3:fb:b5:66:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Dec 13 12:02:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17b2af84fe2c99c595c7ecaaa7e2198e7577d429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:a4:e3:91:08:8b:63:55:b2:73:cc:71:fa:
ce:4b:2a:21:cf:a9:0f:f9:08:21:b7:d1:f5:97:52:
f5:07:4c:37:9b:46:a5:08:7a:d0:b0:09:40:0b:69:
fc:79:8c:83:ec:e0:56:41:a5:67:b8:ba:20:2b:b3:
1a:fc:71:59:ec:92:87:84:52:79:52:e4:77:01:06:
59:ca:be:42:3b:d0:01:d8:be:a4:e8:de:e9:cb:31:
b0:58:2e:b9:ef:55:05:65:43:45:cf:cc:86:e9:29:
cd:44:a4:98:4f:6b:a2:6d:78:4f:b4:aa:90:ce:a3:
3c:48:7b:87:ed:33:18:43:ab:3d:93:cb:d4:a4:a5:
5f:97:c6:ab:90:a1:b7:8f:6e:32:c4:f3:9f:ab:45:
33:f3:f1:a8:e9:f4:af:c8:2c:83:88:dc:80:49:20:
3d:22:49:e7:c0:62:be:28:b8:50:7b:5e:53:af:16:
cd:e2:20:83:44:e7:15:99:d2:c9:dd:87:7f:cf:fa:
a1:8d:72:7b:e5:2a:8d:c6:28:fe:8a:35:ff:dc:10:
6f:0d:de:94:ab:52:1d:b3:5c:6e:a3:e5:65:6e:24:
9b:94:f2:fc:0b:8c:f3:bb:a7:97:78:19:03:0a:21:
60:a0:b4:a5:bf:1e:f2:4d:4d:19:ee:81:f0:13:90:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:AF:84:FE:2C:99:C5:95:C7:EC:AA:A7:E2:19:8E:75:77:D4:29
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/F7KvhP4smcWVx-yqp-IZjnV31Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.184.0/23
IPv6:
2a0f:8f80::/29
Signature Algorithm: sha256WithRSAEncryption
59:4d:55:26:a6:47:0c:78:e2:5a:c5:0c:43:09:3d:81:8c:90:
63:20:33:b6:c5:78:30:a8:6e:76:56:35:0b:76:65:a3:8e:cf:
ae:8a:22:2c:f8:ba:94:b9:a5:bb:94:c0:8f:b6:16:f3:f8:70:
2b:20:95:89:b5:fe:67:88:55:e5:4c:6c:5e:1d:87:78:90:81:
55:49:b1:f3:dd:e3:51:8c:ea:5f:7e:b8:a8:2e:2e:a2:c0:fa:
52:34:20:0c:73:65:83:b3:8c:a3:e2:bf:91:49:b0:c1:52:ce:
6a:72:fe:13:df:d4:08:0f:86:c2:e0:44:10:9b:fa:ca:e3:b6:
98:9b:4e:f2:6f:ab:12:59:c9:20:8a:6c:43:7f:30:27:a7:21:
12:be:7e:be:41:c3:2a:99:cf:67:a3:79:25:21:e9:24:d5:cb:
36:31:1f:3e:76:fe:75:75:fe:e0:cd:7d:21:45:e7:50:dd:b6:
fd:30:86:9a:1d:91:27:2e:72:dd:9b:5e:ef:d5:35:15:7b:af:
e7:52:f2:38:a4:92:28:6d:d2:87:fa:b9:7e:5f:00:0f:fc:1b:
19:8a:c1:42:71:a8:42:3e:bd:2f:54:ad:a2:06:ac:49:ca:5f:
b5:53:c6:83:fe:23:22:51:68:7d:c0:5b:ca:c0:ef:f7:d2:25:
d9:ca:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:48 2025 by rpki-client