Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/RhAOam093MOVCDwC8UqF84QqGb0.roa
File: RhAOam093MOVCDwC8UqF84QqGb0.roa (raw, json)
Hash identifier: /ETJczrVjYx5BuOZtXP7jTmVS3oQnR4Nm+GUG4AP6qg=
Subject key identifier: 46:10:0E:6A:6D:3D:DC:C3:95:08:3C:02:F1:4A:85:F3:84:2A:19:BD
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 018CC424825BD53F12F591DE384D29A14845
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/RhAOam093MOVCDwC8UqF84QqGb0.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49788
IP address blocks: 91.232.32.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:82:5b:d5:3f:12:f5:91:de:38:4d:29:a1:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46100e6a6d3ddcc395083c02f14a85f3842a19bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:71:55:80:04:a2:2e:08:20:c3:f0:71:04:
78:ef:cd:06:56:d1:c5:da:7f:f7:f0:91:6d:6e:4a:
da:ff:b0:0b:60:19:3c:28:97:e7:c4:ab:09:1c:67:
06:0d:2b:c5:8d:91:93:bc:43:01:60:78:3c:c4:45:
61:08:e4:66:7f:4d:f9:c9:6e:2b:d8:e3:24:b3:62:
fb:61:33:a6:a5:a8:4e:c5:d2:d8:8b:3a:be:7c:1b:
ab:70:6b:b3:1c:bf:9f:08:6d:24:43:cd:62:c6:dc:
70:77:7f:81:63:86:8f:72:1e:f2:88:57:62:c0:c5:
08:94:f4:52:c7:78:66:44:ec:37:71:af:39:f1:6e:
cc:37:5a:e6:c0:6d:92:8d:f4:68:ad:64:4a:04:7d:
52:18:3b:06:d1:82:4d:e9:39:ad:2b:3c:72:57:85:
da:88:1c:69:26:fd:6c:33:8c:56:73:76:dd:81:b0:
dd:f2:aa:7d:dd:53:1a:05:39:0b:64:72:f4:7f:0c:
f3:94:12:b4:10:62:4e:8f:8a:5a:10:e4:1d:3b:fe:
1d:85:6f:53:4a:23:79:db:a3:b8:c7:04:eb:b8:ef:
04:23:67:d1:cd:f7:c9:6d:86:64:ab:ce:fa:25:23:
30:3f:2e:52:d1:1a:9d:ae:78:10:8b:b8:17:b2:7b:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:10:0E:6A:6D:3D:DC:C3:95:08:3C:02:F1:4A:85:F3:84:2A:19:BD
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/RhAOam093MOVCDwC8UqF84QqGb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.32.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:48:5b:0d:47:01:a2:ee:26:ba:b0:9e:ee:c0:29:eb:82:08:
63:63:7f:2e:df:fb:bc:5e:ce:ce:f8:c8:23:07:69:19:1d:0c:
f2:e2:51:6e:47:3f:c6:08:49:85:05:06:13:5d:f9:58:8f:ed:
63:46:6b:87:85:4f:c4:00:c0:73:a0:3c:22:f7:c6:31:52:32:
ed:7c:36:8b:d3:ce:4a:4e:f5:86:c3:ea:53:77:20:b9:11:24:
b3:51:e4:73:8d:ab:0d:44:62:be:6f:e3:4d:41:f9:ef:c7:5f:
83:31:27:ad:25:d2:80:04:f1:c3:97:bd:80:48:94:dd:76:df:
67:39:4b:8f:cd:10:af:37:2d:8c:20:88:88:16:b9:15:59:6f:
8b:df:92:fc:08:6e:81:81:ab:0c:01:a7:b5:65:b1:0f:b9:f5:
3f:25:2a:ab:1b:43:1e:59:f6:dd:42:a8:41:44:16:54:12:66:
2c:8c:ad:4d:53:b7:93:30:9d:61:d7:20:a9:ab:46:59:bd:fe:
2e:b1:14:08:de:c3:f5:7e:d0:70:be:f3:40:03:92:0e:c9:1b:
db:47:3b:4a:cc:1c:5e:a7:57:87:0d:07:38:7b:85:45:43:e5:
74:26:27:0f:ce:8a:4f:e9:b8:dc:36:58:df:a7:3c:b8:1c:21:
77:dc:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:52 2025 by rpki-client