Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/aS-P1ytKaybfx78PN-ceAnLUYMw.roa
File: aS-P1ytKaybfx78PN-ceAnLUYMw.roa (raw, json)
Hash identifier: NIR/VX6FBjeq/qihjoVNwiOUUE03rnRs8iCyU/H4s70=
Subject key identifier: 69:2F:8F:D7:2B:4A:6B:26:DF:C7:BF:0F:37:E7:1E:02:72:D4:60:CC
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 01942368F66EA96EF5D7A9CFA2B5C0C8398A
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/aS-P1ytKaybfx78PN-ceAnLUYMw.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47790
IP address blocks: 91.206.210.0/24 maxlen: 24
91.206.211.0/24 maxlen: 24
91.226.196.0/24 maxlen: 24
91.226.197.0/24 maxlen: 24
91.230.8.0/24 maxlen: 24
91.230.9.0/24 maxlen: 24
185.142.160.0/22 maxlen: 24
185.142.160.0/24 maxlen: 24
185.142.161.0/24 maxlen: 24
185.142.162.0/24 maxlen: 24
185.142.163.0/24 maxlen: 24
185.152.120.0/24 maxlen: 24
185.152.121.0/24 maxlen: 24
185.152.122.0/24 maxlen: 24
185.152.123.0/24 maxlen: 24
2a14:7a80::/29 maxlen: 32
2a14:7a80::/30 maxlen: 30
2a14:7a84::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 02 Jan 2025 12:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f6:6e:a9:6e:f5:d7:a9:cf:a2:b5:c0:c8:39:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=692f8fd72b4a6b26dfc7bf0f37e71e0272d460cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:2a:7b:2d:a8:60:5a:fa:3c:e8:b5:73:3c:
6f:1a:fc:78:47:f7:0f:77:8f:d8:6f:b3:3d:fc:7e:
6d:f1:38:41:dd:a6:fb:ef:8d:61:46:38:8a:4c:81:
01:ee:17:1a:58:3c:a3:36:d5:62:9b:b6:16:52:0c:
9a:eb:0c:f1:bc:65:7c:48:c3:b9:1a:84:9d:4e:1d:
aa:07:26:3b:fc:a5:35:08:73:af:5f:f4:28:17:dd:
82:fd:8a:f3:d8:73:1a:e2:f7:f6:c3:92:b5:92:05:
b2:02:f8:b4:6d:9a:9e:78:f9:66:cd:ee:5a:6d:cc:
ef:0c:97:89:52:2a:6b:0d:1f:86:d7:e4:ae:a6:c7:
83:55:6c:51:39:94:9f:94:86:8a:3a:5b:b7:ac:3b:
cf:87:55:91:5b:af:b7:67:4d:4a:24:40:d1:01:5d:
90:58:1a:57:1e:04:53:40:b6:ec:74:ac:62:7f:f5:
c4:41:ed:eb:1e:2f:12:08:81:01:e4:14:f9:15:03:
8f:9b:99:b7:64:9e:ba:1c:71:af:f0:bf:71:5d:63:
c4:5a:b4:f9:a7:a4:c0:50:a8:ee:37:07:dd:f0:b5:
5b:84:5a:6c:c2:3b:23:6e:75:bf:ab:78:c9:27:7a:
4e:c1:74:d6:6e:e0:07:55:7e:2f:b3:7a:b4:5e:b7:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2F:8F:D7:2B:4A:6B:26:DF:C7:BF:0F:37:E7:1E:02:72:D4:60:CC
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/aS-P1ytKaybfx78PN-ceAnLUYMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.210.0/23
91.226.196.0/23
91.230.8.0/23
185.142.160.0/22
185.152.120.0/22
IPv6:
2a14:7a80::/29
Signature Algorithm: sha256WithRSAEncryption
85:5b:35:92:ff:3d:e6:2a:ee:26:45:5d:45:00:fc:c5:b0:6c:
5d:ed:25:fd:47:e5:3e:99:66:b8:b3:8d:fb:0f:70:92:89:11:
ba:6b:75:bd:55:7a:b0:4a:be:6d:e1:a5:72:33:f5:09:a7:cf:
92:98:b2:1c:60:f5:78:51:fd:e2:7c:0a:15:1b:d4:44:7d:4e:
34:bf:92:45:06:27:df:30:51:d2:e9:49:1b:9e:5c:6c:fc:47:
af:16:92:e1:ca:f4:42:c3:3f:5e:1a:13:22:ad:b5:c0:ac:45:
a0:54:18:a2:76:97:8b:7e:b7:69:a2:b0:fd:50:d1:d6:f6:b8:
37:5c:8a:b8:fb:5f:79:a2:0e:7c:0d:a3:99:32:c9:45:4f:c6:
6c:98:ce:45:d7:43:34:50:cf:d5:26:31:05:3f:a1:05:2b:65:
4b:b9:3b:09:20:48:03:0e:95:b2:04:5d:4b:16:52:1f:2c:04:
7c:18:e9:14:aa:7f:95:61:82:be:db:be:8a:36:a7:5d:fc:81:
0e:1a:2b:bb:0f:93:4b:55:8d:c4:84:ea:5f:3e:a5:1b:d5:68:
0f:16:97:e9:26:a1:92:af:db:a6:86:59:8b:ec:16:25:2c:eb:
0e:97:25:ea:eb:f7:d0:57:0d:e8:93:9c:24:51:97:24:73:04:
b8:e5:73:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:15:09 2025 by rpki-client