Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/DdcTeKjv9bmmNZJdrZo3gyK6wKY.roa
File: DdcTeKjv9bmmNZJdrZo3gyK6wKY.roa (raw, json)
Hash identifier: duC3Rjy8KT1FZ6ZPzA3U7yEj6KGAUV6hxnE/zzlgKsg=
Subject key identifier: 0D:D7:13:78:A8:EF:F5:B9:A6:35:92:5D:AD:9A:37:83:22:BA:C0:A6
Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial: 018CCA29EC10A3806BFEC47077E634CAABBD
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/DdcTeKjv9bmmNZJdrZo3gyK6wKY.roa
Signing time: Tue 02 Jan 2024 12:33:14 +0000
ROA not before: Tue 02 Jan 2024 12:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25143
IP address blocks: 91.239.49.0/24 maxlen: 24
91.239.48.0/24 maxlen: 24
91.239.51.0/24 maxlen: 24
91.239.50.0/24 maxlen: 24
193.19.228.0/24 maxlen: 24
193.19.231.0/24 maxlen: 24
193.19.230.0/24 maxlen: 24
193.19.229.0/24 maxlen: 24
193.238.20.0/24 maxlen: 24
193.238.23.0/24 maxlen: 24
193.238.22.0/24 maxlen: 24
193.238.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ec:10:a3:80:6b:fe:c4:70:77:e6:34:ca:ab:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Validity
Not Before: Jan 2 12:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dd71378a8eff5b9a635925dad9a378322bac0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:4c:e7:77:69:de:4b:f4:d8:e2:23:ab:c3:
4d:51:db:25:d5:a8:c2:ed:26:f3:18:3d:ca:c9:a3:
dc:73:44:cc:32:f7:40:92:4d:bf:71:e7:79:06:fa:
04:00:de:37:d2:e7:52:81:82:87:0c:8f:74:6d:1b:
0d:58:c7:0d:cd:4c:95:dc:b5:d4:3e:69:1f:a4:d8:
da:d6:92:33:93:0b:96:3c:06:22:11:0b:11:6a:ee:
19:5f:db:22:c3:a0:1d:08:30:31:7d:95:5b:f7:2b:
81:e2:c1:05:4a:a4:9f:6e:42:1a:7f:49:9b:58:cb:
03:de:9b:bd:c7:b7:9d:a9:97:fe:76:0b:44:fb:a5:
86:1d:8f:1b:09:ef:18:93:3a:ee:2c:15:e2:6c:e8:
82:cf:4f:a1:93:e4:5e:24:d8:a8:8a:42:01:75:ac:
a4:c2:ee:ff:2e:a0:0e:fe:a0:3b:6a:dc:8e:ae:82:
92:0d:b1:e7:49:d6:59:7c:83:a4:93:ab:ee:87:f1:
51:39:8e:18:33:bd:5c:58:b5:32:a7:e1:dd:75:ff:
ae:71:1b:e8:d2:63:cb:df:07:a8:c2:d1:63:69:ea:
3f:8d:f3:9a:f9:a0:5a:39:6a:14:59:87:54:71:37:
b3:cc:eb:0c:ed:a2:8e:5f:12:25:0e:7c:a8:95:c5:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:13:78:A8:EF:F5:B9:A6:35:92:5D:AD:9A:37:83:22:BA:C0:A6
X509v3 Authority Key Identifier:
keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/DdcTeKjv9bmmNZJdrZo3gyK6wKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.48.0/22
193.19.228.0/22
193.238.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:14:e6:20:e7:9f:94:8b:57:de:3c:7d:b4:ff:0e:06:ac:9c:
ef:a2:9d:9b:77:42:15:d9:e7:96:c6:4e:f7:60:6b:aa:9d:43:
3b:a5:16:f9:fc:3a:51:f9:a0:74:17:3e:3b:c9:14:e0:12:3d:
58:cb:8f:00:fc:3d:71:eb:50:f8:fc:4a:92:af:15:7f:ff:17:
bc:00:1b:d4:0c:cc:ec:cd:42:31:b9:26:dc:cb:07:60:85:88:
bb:ef:9d:dc:64:6c:ee:f9:ed:72:52:c0:61:5e:b0:2f:57:e4:
e0:9c:77:8d:c5:2c:5e:d5:09:e1:29:20:20:9a:8d:b1:6e:60:
5c:ae:e5:0a:a8:15:cf:39:fd:9d:a9:6e:93:09:c1:e2:80:b7:
c3:d5:4f:05:d3:68:1c:23:48:37:45:bf:82:92:36:e0:bc:b5:
2c:63:cf:55:f8:82:22:69:cb:f8:ca:96:88:fa:8c:12:b6:6a:
01:16:30:a7:11:05:ea:24:ec:4b:72:bd:b1:75:c7:56:ff:33:
13:81:6c:32:c8:90:b7:fd:e9:a2:47:bd:e6:35:b3:f4:c5:64:
50:5b:09:7a:58:b7:f4:2d:42:2c:39:25:cd:d4:40:e4:eb:b1:
5c:cf:05:0f:ac:85:5d:a3:e6:03:c9:6a:63:64:1b:d5:95:8a:
76:67:69:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:15 2025 by rpki-client