Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/whhzXiuKHN4McuDNFx-IdSzKyLE.roa
File: whhzXiuKHN4McuDNFx-IdSzKyLE.roa (raw, json)
Hash identifier: l78QbljYepcnoRoQqqwd0dJ50RMenjzCfzFadVoZyOo=
Subject key identifier: C2:18:73:5E:2B:8A:1C:DE:0C:72:E0:CD:17:1F:88:75:2C:CA:C8:B1
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 01938D2FA47E18FC58740A1B7ABDDC9A148E
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/whhzXiuKHN4McuDNFx-IdSzKyLE.roa
Signing time: Tue 03 Dec 2024 15:42:09 +0000
ROA not before: Tue 03 Dec 2024 15:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59437
IP address blocks: 91.226.226.0/24 maxlen: 24
2a0c:3c80::/29 maxlen: 29
2a0c:3c80::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Dec 2024 21:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:2f:a4:7e:18:fc:58:74:0a:1b:7a:bd:dc:9a:14:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Dec 3 15:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c218735e2b8a1cde0c72e0cd171f88752ccac8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:e7:33:2d:5a:4f:27:0e:59:33:ba:96:a5:
86:0b:a5:60:26:bd:ae:0e:63:b3:85:e3:ff:74:0d:
bd:71:a0:9e:37:63:5f:ba:55:5b:ff:dd:70:d6:cf:
2f:c6:3e:3d:3d:20:5b:5d:dc:24:54:2f:37:75:28:
d6:4b:ef:d0:54:50:9b:86:c4:cb:e0:af:93:b2:52:
0c:06:46:b0:ed:e4:d2:80:fa:ab:84:21:84:b7:29:
bf:61:3b:2f:7d:42:c3:fa:a3:c4:9d:60:ba:4c:d2:
ab:84:d4:0e:70:8c:56:7a:15:f1:4a:40:ce:18:47:
ab:25:17:a5:09:70:ab:74:46:79:d2:3c:8d:a1:a4:
1b:66:f4:33:5f:2b:c9:79:22:31:9a:e6:6e:92:a1:
22:e4:56:54:e0:43:0f:64:b0:36:fd:93:1d:8b:01:
b4:de:c6:e1:93:ed:0a:90:a6:38:fc:29:ad:85:7a:
22:8d:5e:23:46:dd:1c:95:d8:6c:3a:ce:28:0a:fb:
14:d3:90:3d:e3:45:d4:3e:b8:02:ec:3a:b6:77:13:
f7:bc:88:78:fd:ef:ae:f9:e0:ae:55:ba:2d:90:66:
93:1c:62:1a:5d:5d:8a:ed:e5:59:55:e8:c8:93:30:
f1:f6:7b:69:40:8d:79:34:56:7a:0f:5d:18:08:9a:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:73:5E:2B:8A:1C:DE:0C:72:E0:CD:17:1F:88:75:2C:CA:C8:B1
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/whhzXiuKHN4McuDNFx-IdSzKyLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.226.0/24
IPv6:
2a0c:3c80::/29
Signature Algorithm: sha256WithRSAEncryption
41:dd:52:23:7a:53:8d:00:ee:13:0e:cd:70:b5:ec:16:ff:5c:
91:0b:3e:a1:30:9d:55:11:e2:33:e5:88:fb:9d:42:f2:a7:db:
ca:df:de:d0:ef:25:2f:fd:78:99:2f:9b:e7:f8:11:86:50:05:
2c:ed:be:c1:54:dc:52:1e:f9:e1:7a:9f:87:1b:02:cf:7e:3b:
31:e9:ee:74:4c:8b:34:5d:14:20:c0:c3:22:1f:6c:94:f5:05:
f4:42:dd:c2:14:6d:b5:f9:f1:eb:98:93:3a:22:48:9e:b3:23:
b2:6c:ef:49:34:ca:42:06:3d:b4:8b:15:ee:af:73:98:08:3d:
5a:a4:e2:b8:79:a0:de:d0:75:0d:75:c8:3c:77:06:26:1f:cb:
78:ba:3b:b0:aa:47:2a:ee:08:5e:a7:3b:75:5f:f9:8a:81:75:
28:1d:1d:be:85:e5:52:13:8d:bf:7a:8e:dd:63:af:5b:97:32:
38:a7:8f:8f:ac:e0:c6:07:11:18:fa:eb:15:67:1b:c9:14:21:
89:48:67:a0:62:cc:6c:24:01:aa:ae:c6:bf:9e:72:86:a2:f5:
ac:fd:b6:c6:2b:1c:6b:44:85:49:04:d2:08:7a:2a:04:15:cb:
7b:b5:51:f6:12:7b:f2:36:e9:bc:64:7f:0e:f0:71:3d:e5:90:
01:8a:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:17:00 2025 by rpki-client