Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/UukvNxiKfog7J1MEs96Mw4_j9-k.roa
File: UukvNxiKfog7J1MEs96Mw4_j9-k.roa (raw, json)
Hash identifier: /q6mc57WaVWGB6+00vnlRrwyq65MR+0IuoVqUon6MZc=
Subject key identifier: 52:E9:2F:37:18:8A:7E:88:3B:27:53:04:B3:DE:8C:C3:8F:E3:F7:E9
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 018CC8DF15846AE6775E8CA2621868847F17
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/UukvNxiKfog7J1MEs96Mw4_j9-k.roa
Signing time: Tue 02 Jan 2024 06:31:52 +0000
ROA not before: Tue 02 Jan 2024 06:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202013
IP address blocks: 91.103.81.0/24 maxlen: 24
91.103.82.0/24 maxlen: 29
91.103.83.0/24 maxlen: 24
91.103.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:15:84:6a:e6:77:5e:8c:a2:62:18:68:84:7f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52e92f37188a7e883b275304b3de8cc38fe3f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bf:0d:1c:4f:49:dc:ed:52:78:ef:2e:9e:d6:
60:93:f1:ed:c3:37:bb:dd:cf:ad:c9:d8:f7:7a:07:
cb:eb:ec:a2:1b:b3:b0:c4:7f:c2:8a:6a:9e:bd:b6:
e7:21:f4:ef:41:ae:91:7b:05:00:60:5e:6b:e9:b7:
62:04:c4:73:cb:e4:39:c4:81:1a:09:7c:ee:21:48:
39:fe:c1:1b:c2:4a:69:5b:c6:12:2b:25:19:ff:48:
77:d8:b1:66:58:47:25:a0:ba:cc:81:3f:28:43:96:
8e:e7:f8:2a:5b:c9:54:4b:93:5f:60:7a:ae:b4:8f:
b8:27:3e:30:b9:d0:d0:c1:75:c2:ec:7c:f4:a5:05:
78:f3:dc:f0:3b:ff:36:8a:03:75:20:16:8c:71:12:
37:96:ce:58:28:6d:4e:a4:db:22:91:8f:50:27:9a:
da:a8:d8:bd:aa:13:10:38:14:1e:fc:34:df:ec:e9:
a0:89:0d:a9:f8:c5:e0:5b:8b:04:e2:d3:d7:96:51:
8c:25:ba:fc:e5:98:a6:bd:47:f8:55:f1:ce:71:80:
17:2f:bd:21:e2:39:f3:04:17:7b:7a:47:f9:0e:08:
f3:2d:0c:9b:a5:a6:14:38:31:16:9f:c5:de:d1:0c:
76:7e:c0:57:1f:9c:a3:ac:5a:10:2f:13:e0:5f:ef:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E9:2F:37:18:8A:7E:88:3B:27:53:04:B3:DE:8C:C3:8F:E3:F7:E9
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/UukvNxiKfog7J1MEs96Mw4_j9-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:7e:41:ca:ac:68:ed:24:5f:a6:42:0a:de:2b:0e:59:2e:3a:
d8:7f:17:4d:d0:c9:ea:33:2f:bb:24:46:9c:9f:c4:22:12:13:
c3:d0:22:8b:3d:76:46:dc:d8:cf:7f:2c:1d:13:42:e1:b5:04:
49:e2:95:9b:49:66:8a:ad:c2:35:88:87:77:26:6c:7a:f4:ae:
5d:9a:d2:56:44:66:00:11:bc:44:79:1b:18:d6:f0:93:31:37:
02:56:a9:47:84:d2:39:87:ce:fc:2d:39:40:56:ef:0c:a0:54:
a7:9a:9b:2f:c7:03:dd:37:6e:03:f8:e8:80:bc:6c:72:64:7b:
ec:45:58:73:bf:5c:5e:b3:29:63:27:92:66:b1:e1:26:8b:09:
84:7a:ed:a2:2f:8c:3b:14:bf:be:30:5a:f9:8c:76:6e:84:6a:
60:eb:09:39:45:bd:ae:81:a1:6f:18:d5:d4:07:9e:6e:b7:fd:
93:82:4c:1a:f9:7c:9c:cb:dd:83:3e:77:e0:b4:8a:b3:94:05:
c8:ea:93:c0:16:6e:b8:f4:e6:bf:3d:26:ac:f1:8b:23:22:27:
2d:a8:16:31:36:c8:83:e5:55:67:65:a1:20:4c:d4:e0:e6:18:
2a:19:76:be:d3:c2:58:dd:dc:de:7c:19:19:c7:2a:c9:4e:a9:
b7:4c:a9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:01:30 2025 by rpki-client