Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/8ylfSzc6pfgWsrvF2B1VikUSj_g.roa
File: 8ylfSzc6pfgWsrvF2B1VikUSj_g.roa (raw, json)
Hash identifier: rgniIkc1N82r7pHeBeodSyoS2RmCVz1khgVT/6INrLU=
Subject key identifier: F3:29:5F:4B:37:3A:A5:F8:16:B2:BB:C5:D8:1D:55:8A:45:12:8F:F8
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 018CC2DB1138CCEFFF296D11C91B9D1690D6
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/8ylfSzc6pfgWsrvF2B1VikUSj_g.roa
Signing time: Mon 01 Jan 2024 02:29:45 +0000
ROA not before: Mon 01 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197655
IP address blocks: 91.223.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:11:38:cc:ef:ff:29:6d:11:c9:1b:9d:16:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3295f4b373aa5f816b2bbc5d81d558a45128ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:6d:87:37:d7:56:24:61:3b:3d:ba:30:16:
a2:cd:41:75:db:eb:cb:b7:02:0a:c7:08:28:6b:28:
27:ee:53:b1:93:ad:8e:3f:b9:d8:98:ca:49:a5:2c:
a3:95:b9:8a:a3:83:0e:b4:68:ad:f8:5c:7d:6e:c6:
ab:32:f1:8f:53:cd:0e:92:9f:84:dd:c9:9a:d0:fa:
d0:e3:68:52:8c:11:3e:39:11:86:f4:d8:b4:55:d8:
2e:76:48:04:79:19:be:33:17:df:c4:f5:91:fd:2a:
07:59:a8:5a:c5:0f:9a:4e:7d:52:1e:b3:dd:fc:ae:
c5:6e:b7:68:aa:b0:a1:69:9d:92:34:9e:e6:5a:e7:
7c:2d:66:50:4f:7f:1a:e0:ef:0e:fa:41:22:dc:68:
67:f2:d8:f0:21:a5:42:cb:b1:2e:08:b6:26:5b:e9:
e8:1f:26:43:d8:93:65:52:88:43:a8:0c:28:22:cc:
a0:c9:5a:a4:2a:fc:5c:91:70:28:61:6e:0f:8a:52:
08:62:44:08:f8:4b:78:19:6e:b9:8c:e8:6c:2e:18:
d0:77:f0:67:e5:07:aa:9d:85:a7:3d:26:95:56:f2:
53:33:64:66:0f:44:04:b1:3e:23:12:31:eb:97:6c:
4b:03:13:b3:20:63:9d:28:a8:20:22:49:d3:9f:e6:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:29:5F:4B:37:3A:A5:F8:16:B2:BB:C5:D8:1D:55:8A:45:12:8F:F8
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/8ylfSzc6pfgWsrvF2B1VikUSj_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.193.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7b:81:99:3a:c7:b3:0b:18:fe:14:d3:d0:c2:36:b4:3d:08:
36:e2:38:c0:cc:01:06:98:02:a7:83:13:85:80:14:fb:9b:9b:
d2:14:a8:73:bc:4a:0d:67:7b:54:ad:fa:90:b6:1e:cd:f9:07:
dc:1f:2f:e6:30:40:1a:ff:fa:80:a6:3c:ad:76:39:7e:3d:3b:
14:11:91:2b:6f:9f:26:d5:1f:5f:35:ec:53:c5:d9:8c:e5:7c:
d0:91:d0:76:80:45:82:4e:d4:f6:50:a2:7f:9d:9b:91:13:52:
fc:06:76:a0:bd:fc:39:db:8d:fb:d5:d6:c4:5e:e6:ce:99:11:
07:fe:ed:a0:a2:65:0f:c0:74:61:33:be:7a:9f:94:f1:89:1f:
36:53:74:64:eb:e4:f4:81:4b:22:1a:90:cb:65:4b:98:3a:7d:
03:de:dd:07:07:48:59:b5:0d:c2:14:d9:58:89:a4:bf:6f:db:
63:d9:14:fd:8e:b6:fe:a7:cd:7e:87:cb:09:46:44:ab:45:f7:
f8:1a:51:9f:e8:fb:6a:fb:1b:7c:00:eb:72:a7:48:46:ce:d6:
a9:20:b1:a4:32:c3:f4:42:d6:66:d3:e9:9e:0b:c0:a6:2d:69:
e8:be:49:6f:f6:79:5d:6c:09:47:9b:3a:38:6a:eb:1e:6f:d6:
86:5d:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:42 2025 by rpki-client