Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/c126Ibk-Wzf6JcQeIwdcdFBkYJM.roa
File: c126Ibk-Wzf6JcQeIwdcdFBkYJM.roa (raw, json)
Hash identifier: MVlWGl7YwtJX4Tidb0pcGcHxRkW9yr07+Fk4iT2ZJh8=
Subject key identifier: 73:5D:BA:21:B9:3E:5B:37:FA:25:C4:1E:23:07:5C:74:50:64:60:93
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 01957557723BB1ABDEB249894DB87B99A2E6
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/c126Ibk-Wzf6JcQeIwdcdFBkYJM.roa
Signing time: Sat 08 Mar 2025 10:40:19 +0000
ROA not before: Sat 08 Mar 2025 10:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.239.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 10:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:75:57:72:3b:b1:ab:de:b2:49:89:4d:b8:7b:99:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Mar 8 10:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=735dba21b93e5b37fa25c41e23075c7450646093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:cd:93:29:f6:ec:1f:c9:4a:0a:fc:37:11:
b9:d7:f4:5a:eb:3d:8c:8a:50:91:7b:f4:b4:4d:48:
87:05:e3:fd:74:01:f7:53:64:60:74:b2:59:c8:14:
b1:9f:f0:d8:91:0b:35:10:57:a8:13:b5:f5:bf:b6:
b3:68:8f:7c:77:df:16:3e:aa:af:30:d2:bb:91:b9:
16:aa:35:35:4a:78:00:b2:e4:ac:b8:da:1e:d3:95:
68:fe:e8:ee:a6:65:11:bd:1f:f0:ef:25:9a:fc:10:
6c:57:16:7a:59:66:fb:27:6e:47:3d:e7:79:78:b5:
f8:65:82:f9:64:b1:ba:2f:4b:16:2f:24:4a:3c:ea:
1f:44:ac:02:94:7e:81:2b:df:f9:d1:2c:06:65:e2:
22:9b:4b:6d:2a:74:3d:30:bd:47:9d:c6:ac:9d:00:
82:5a:44:83:76:64:3f:81:32:52:ae:d2:9d:b2:c1:
0e:a3:98:60:60:59:08:9c:11:42:29:17:5f:89:38:
76:28:5f:46:ce:7a:05:80:e4:4f:06:36:06:df:12:
24:87:a5:5f:21:99:9b:88:ef:bd:f9:dd:7f:72:07:
f4:fd:c9:97:b5:bd:41:c0:ae:14:c6:bf:c7:49:01:
d4:5f:9a:6f:49:de:fa:c9:cd:93:cf:a6:2f:1e:dc:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:BA:21:B9:3E:5B:37:FA:25:C4:1E:23:07:5C:74:50:64:60:93
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/c126Ibk-Wzf6JcQeIwdcdFBkYJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b1:cb:2a:fa:52:6e:8f:ed:24:12:c2:fa:4f:46:28:24:44:
06:8e:5b:bf:c0:72:99:94:37:c1:b6:3f:3d:3b:1d:0f:87:f4:
ee:2d:6e:28:93:28:17:cf:c6:07:ff:d2:19:a9:5e:19:8b:f3:
7e:9e:5b:e4:7c:85:fc:25:84:33:e8:1f:6c:66:cb:e4:00:d7:
cc:bd:43:cb:9c:d5:e0:c4:4c:67:3f:c7:bf:ad:50:91:00:53:
f0:1e:1e:af:61:87:9c:16:29:36:d6:ce:b3:d8:72:17:22:ef:
89:a0:45:2a:5d:da:05:ef:75:32:c0:5d:e2:19:ec:57:ff:8e:
a0:10:35:f6:97:23:26:66:af:6c:ab:cb:e7:3a:c5:77:31:72:
7f:32:78:c4:30:63:da:a4:81:8d:0c:3c:d9:73:38:7b:21:81:
af:6e:ca:c3:55:be:94:8a:4d:8b:d8:ce:2b:53:5a:4d:63:6f:
d0:34:c3:2c:56:a1:3f:35:55:31:4c:1e:46:82:92:e0:da:5e:
98:59:61:67:21:bb:d9:0b:03:c8:f7:4d:30:87:25:2d:d2:44:
4c:e3:55:e5:f9:31:ae:b8:21:f9:8a:35:b3:85:a3:11:ea:18:
57:e9:f4:13:1a:de:b1:c9:cb:b3:9a:5c:1a:ab:8b:58:4b:71:
b6:1b:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:18 2025 by rpki-client