Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/2_-AlPLwe8yzCLY_K0isO-sVpc8.roa
File: 2_-AlPLwe8yzCLY_K0isO-sVpc8.roa (raw, json)
Hash identifier: Lkl+ZiJcmRmLmux3YIBI99sQGcDown2VVWH/bgHR194=
Subject key identifier: DB:FF:80:94:F2:F0:7B:CC:B3:08:B6:3F:2B:48:AC:3B:EB:15:A5:CF
Certificate issuer: /CN=0f18326e001aa7fc56f83531315376f9eaae0988
Certificate serial: 019233AC649E03489883F9984D726F4E80F6
Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/2_-AlPLwe8yzCLY_K0isO-sVpc8.roa
Signing time: Fri 27 Sep 2024 13:29:48 +0000
ROA not before: Fri 27 Sep 2024 13:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205134
IP address blocks: 91.216.171.0/24 maxlen: 24
2a12:d9c0:1::/48 maxlen: 48
2a12:d9c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:ac:64:9e:03:48:98:83:f9:98:4d:72:6f:4e:80:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988
Validity
Not Before: Sep 27 13:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbff8094f2f07bccb308b63f2b48ac3beb15a5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:e7:26:3e:50:cc:c5:2c:d1:86:b3:3a:42:
04:87:86:71:a3:ad:38:c8:2c:5d:19:19:33:ff:5f:
85:f2:27:5c:b6:15:97:35:d3:c2:3a:9d:d5:98:3f:
9f:e4:64:b9:0a:ae:2a:2a:b7:81:e7:cd:a2:b1:0f:
4a:b7:dc:e3:97:52:94:69:a0:15:83:12:11:94:5a:
9d:5e:d5:b9:db:97:5d:7b:d6:a5:58:e6:4e:79:cc:
6e:e2:4a:92:8f:aa:ac:b8:89:03:f9:53:f9:13:06:
76:cd:e8:d3:e0:53:99:f0:41:f8:2e:6b:34:2e:2e:
4b:5d:11:c0:92:30:b7:c7:eb:4f:74:89:71:ea:91:
ad:12:56:09:ef:1e:15:b0:ca:f6:92:66:97:a6:14:
03:9f:2c:ce:9a:65:cf:9c:98:24:42:c5:5d:ed:4b:
7a:2a:38:58:cf:1b:fe:48:cc:56:f4:ec:f8:28:6a:
58:6d:3d:31:16:df:12:6c:37:5c:23:27:ed:18:26:
ff:3d:90:81:1c:81:f7:c4:21:cb:a6:a3:99:79:71:
8b:c8:61:99:89:9c:af:40:5c:7b:68:ee:5b:01:6b:
b9:d0:8d:f9:d4:61:7d:4c:13:94:2f:e5:ab:5d:bf:
6c:f0:d8:79:5a:d6:2a:e3:f0:e0:9a:23:d4:48:62:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FF:80:94:F2:F0:7B:CC:B3:08:B6:3F:2B:48:AC:3B:EB:15:A5:CF
X509v3 Authority Key Identifier:
keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/2_-AlPLwe8yzCLY_K0isO-sVpc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.171.0/24
IPv6:
2a12:d9c0:1::-2a12:d9c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:33:03:c9:e1:66:29:01:22:80:e7:1c:7f:e2:b9:10:9f:9a:
77:a7:61:38:55:16:3b:fd:b3:93:cd:ac:3e:3f:3a:fb:09:cd:
f2:8d:36:dd:11:25:4c:29:42:58:95:03:d1:50:12:10:cc:ca:
5e:27:f4:20:df:50:b8:c2:d8:91:4e:ef:f6:55:e7:4e:48:f9:
9c:07:3d:ed:b9:9e:28:13:34:28:87:cc:fe:62:d1:9d:31:50:
af:f1:d4:d1:bd:7f:46:25:fa:c2:25:95:d8:e4:02:0f:3f:30:
02:24:36:d4:28:8b:8d:d4:3f:44:6f:72:43:8d:6e:fb:d7:7b:
92:d8:7a:d0:3b:29:ce:80:4f:2a:db:be:d5:96:59:d0:4c:e0:
a6:dd:cc:f0:d0:4a:2b:a2:26:02:d8:ae:ff:0a:ed:8c:62:ca:
f7:94:7c:03:92:4f:b1:e9:fa:fa:e3:14:94:0d:84:6b:8a:50:
41:21:87:ab:00:f7:e7:b6:48:0b:8c:dd:5b:62:38:64:7c:27:
80:d9:f8:95:5a:56:f0:89:92:6f:06:37:e4:00:7f:e8:fe:79:
90:df:b8:2c:a1:85:b0:04:9f:f7:16:a2:e9:48:26:57:9b:0a:
ff:96:d4:ae:98:16:05:79:4d:aa:d0:37:ff:1d:b2:16:c5:ef:
7d:86:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:34:56 2025 by rpki-client