Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/G6hGn1qk1ItnjNIquy4HWgnL7y4.roa
File: G6hGn1qk1ItnjNIquy4HWgnL7y4.roa (raw, json)
Hash identifier: rOHAC4fDEDaQGu3xrtEtDEpG+87aWXtJu9ZCmIMQwss=
Subject key identifier: 1B:A8:46:9F:5A:A4:D4:8B:67:8C:D2:2A:BB:2E:07:5A:09:CB:EF:2E
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 018CC26D363FFD4DD1330111FBE3D354B581
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/G6hGn1qk1ItnjNIquy4HWgnL7y4.roa
Signing time: Mon 01 Jan 2024 00:29:46 +0000
ROA not before: Mon 01 Jan 2024 00:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.198.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:36:3f:fd:4d:d1:33:01:11:fb:e3:d3:54:b5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ba8469f5aa4d48b678cd22abb2e075a09cbef2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:58:16:b5:7a:22:c0:84:02:05:75:ab:dd:
33:b8:72:31:77:b8:72:21:25:be:1f:df:3f:e8:21:
0f:e4:14:f7:db:91:c8:76:77:99:d8:77:d7:0f:bc:
5c:93:79:e9:8c:fb:58:88:41:78:35:01:bf:32:b4:
45:3b:da:09:83:c0:75:8a:43:46:8f:14:db:81:96:
a7:19:24:92:97:0f:ca:9d:2e:ed:a7:af:6d:33:e3:
b6:3d:c1:3e:8e:06:ee:bd:b1:3a:19:5c:a2:77:d4:
e1:fc:2d:0b:5e:c6:91:43:d8:5c:d1:02:6b:19:a6:
18:56:99:eb:3b:d9:7d:8b:c0:e2:59:df:93:36:47:
93:6e:c4:b2:65:ef:8c:7d:e7:c3:6b:af:cc:c0:19:
12:54:2c:af:74:6d:12:ac:46:ba:f1:e3:66:d0:8e:
6a:7f:a6:b5:3a:b8:a5:f0:fd:89:3c:d3:3d:51:8a:
c4:65:e5:3c:99:ad:23:fb:bc:bc:cc:2f:ec:c0:f8:
1b:cf:2d:75:09:67:d4:c6:3b:96:14:61:84:1e:bb:
37:aa:24:45:8a:1b:e5:32:d8:c7:04:4b:4f:8b:5f:
31:72:f8:18:cb:c7:69:e9:9a:ed:a6:db:d3:00:50:
54:0a:0d:0c:d5:73:66:1d:d4:5d:e8:2f:a3:68:4b:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:46:9F:5A:A4:D4:8B:67:8C:D2:2A:BB:2E:07:5A:09:CB:EF:2E
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/G6hGn1qk1ItnjNIquy4HWgnL7y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.107.0/24
Signature Algorithm: sha256WithRSAEncryption
64:99:e0:5a:14:85:bf:a5:d9:88:e5:da:80:c9:2a:fe:60:fe:
61:11:04:91:4a:81:60:ef:d4:58:d4:7a:dc:fc:68:00:ab:b5:
52:d5:d4:00:83:64:c4:8c:df:90:20:52:ae:24:2c:7d:72:b5:
59:56:db:1f:5f:ed:79:8e:75:ee:d7:22:79:aa:47:0e:b6:02:
3c:86:44:9e:98:28:9e:3f:c6:54:3a:05:5a:2e:b4:97:82:a2:
9d:79:0a:e3:15:b8:94:9e:8f:a2:97:8f:5b:c9:a6:35:ab:71:
70:cf:f3:aa:1b:a6:90:c8:a4:ca:79:b4:b2:50:ed:2d:0e:1e:
f7:36:9d:3f:11:b0:d9:d3:cb:85:47:8d:5b:57:c2:06:64:46:
c7:3a:04:05:0a:f2:18:47:f7:64:b1:7f:3b:ba:42:ac:0e:e5:
0e:03:76:5f:a3:db:2a:b8:d5:f9:eb:65:7c:d0:1f:b3:7f:bf:
39:6d:f1:71:c8:e1:2d:ca:d0:7d:59:47:b0:0a:1a:86:0e:30:
6b:12:31:6b:67:96:c9:d8:dd:7c:76:10:af:4c:58:81:4b:dc:
ee:30:f6:2d:f5:73:7a:d3:85:9e:e5:87:42:a4:d6:03:b2:47:
95:f6:68:83:16:2b:6a:ff:64:df:86:d1:42:11:b8:bf:42:f7:
f9:43:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:22:26 2025 by rpki-client