Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6E1tcdQV2GwxFepQsNhU2fasF-8.roa
File: 6E1tcdQV2GwxFepQsNhU2fasF-8.roa (raw, json)
Hash identifier: bRzjr3caQzsD0t+sc53rQbQblrfAo2m/j11NcnMQIJ4=
Subject key identifier: E8:4D:6D:71:D4:15:D8:6C:31:15:EA:50:B0:D8:54:D9:F6:AC:17:EF
Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial: 019362BA80C46988ABCD2880E33F24AE342E
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6E1tcdQV2GwxFepQsNhU2fasF-8.roa
Signing time: Mon 25 Nov 2024 09:50:09 +0000
ROA not before: Mon 25 Nov 2024 09:50:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214379
IP address blocks: 91.231.182.0/24 maxlen: 24
2a01:f500::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:ba:80:c4:69:88:ab:cd:28:80:e3:3f:24:ae:34:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e847e88749704294552fef54886111ed0586ec24
Validity
Not Before: Nov 25 09:50:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e84d6d71d415d86c3115ea50b0d854d9f6ac17ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:d2:79:e6:56:ea:27:09:6c:1a:e4:39:a4:
43:20:3d:26:89:17:a8:eb:38:84:61:bd:7e:bc:53:
ea:50:32:8a:d9:37:83:4b:94:44:3c:38:03:2d:cd:
b8:4f:66:6a:ff:9f:0c:09:12:35:6a:8a:dc:38:fc:
17:76:e1:41:e1:85:65:8a:06:27:88:d1:38:a2:c4:
e7:a4:96:ed:53:f6:e0:53:f7:d5:8c:5b:99:79:51:
e4:95:1d:37:c4:da:c9:ca:b6:cb:c8:31:2f:63:08:
f9:68:ea:5a:45:a1:47:cd:23:28:e5:66:d9:60:f8:
80:ac:90:c6:73:c0:78:72:2d:30:3e:92:b3:af:2a:
4c:7f:6e:bf:80:ce:5a:03:06:44:ff:c0:51:d3:4f:
0d:ff:4a:b7:cd:80:88:12:11:3d:db:09:66:a5:e3:
cf:a2:d2:ee:bc:d2:9a:6c:cb:c5:d2:86:1f:1b:37:
35:95:a5:00:ca:92:db:91:7e:b2:a2:b7:39:1d:02:
cb:24:08:8e:59:f9:15:66:7e:c8:5c:5e:a4:7d:9e:
29:a4:56:b7:31:c0:6c:0e:68:e5:63:3a:e9:ee:5c:
cb:9f:3d:56:fb:53:4d:80:1e:5b:6d:6b:4f:54:db:
5d:c9:92:2f:28:e5:3b:0a:7b:21:6a:a4:95:88:0c:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:6D:71:D4:15:D8:6C:31:15:EA:50:B0:D8:54:D9:F6:AC:17:EF
X509v3 Authority Key Identifier:
keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6E1tcdQV2GwxFepQsNhU2fasF-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.182.0/24
IPv6:
2a01:f500::/29
Signature Algorithm: sha256WithRSAEncryption
5e:b3:11:17:e0:3e:d1:3d:8b:98:9c:28:0a:07:cb:96:b7:f8:
44:4c:67:d4:29:2b:ac:40:d8:88:54:f7:96:1f:6a:ff:35:e9:
d9:78:b2:f4:50:d8:0c:42:ba:89:49:8a:64:61:ad:98:2a:73:
f8:8d:db:10:98:a1:32:65:53:71:81:9f:15:df:bd:fa:c6:5b:
95:0f:59:c9:7b:a3:5c:49:f3:2d:33:63:b2:48:a4:34:98:a8:
12:97:4c:70:8c:c0:7e:5f:a3:87:ec:59:e4:1b:0d:66:82:7a:
e4:f8:13:80:13:9d:28:b3:6e:59:06:1c:b6:b6:b8:ae:e4:19:
f7:6f:24:61:21:7a:cb:c1:42:45:85:ca:0e:91:91:b9:b6:cf:
22:54:4d:33:18:99:ef:eb:50:79:31:af:b3:e6:3e:5a:b3:dc:
f5:c5:58:2b:91:86:9a:c1:7f:e7:06:31:fb:1f:23:7b:32:ba:
c5:6c:df:0b:2c:b3:d8:c0:f8:25:11:c8:fd:a2:6c:d6:29:84:
c0:4b:5a:ee:b4:ec:d8:5b:b1:a2:10:85:0a:ca:8c:f3:15:7e:
93:f0:82:26:8d:be:a3:c3:3b:97:e9:e1:4d:87:0b:c0:a6:5e:
ff:e3:75:c2:ec:da:7a:57:75:05:32:f5:bb:1e:e6:cd:3f:07:
8f:86:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:39 2025 by rpki-client