Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/AdXTASjqoi8z_QIeQHQxSQxDdBM.roa
File: AdXTASjqoi8z_QIeQHQxSQxDdBM.roa (raw, json)
Hash identifier: N3tNUwZ7HPmZxYp3cjjvv0V/sbIAqOlAsuusMg+dgj8=
Subject key identifier: 01:D5:D3:01:28:EA:A2:2F:33:FD:02:1E:40:74:31:49:0C:43:74:13
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0196AB058F1356C41077C7A7FD2CDF2089CB
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/AdXTASjqoi8z_QIeQHQxSQxDdBM.roa
Signing time: Wed 07 May 2025 13:53:10 +0000
ROA not before: Wed 07 May 2025 13:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58030
IP address blocks: 91.237.255.0/24 maxlen: 24
91.238.0.0/24 maxlen: 24
2001:67c:1158::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 14:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:05:8f:13:56:c4:10:77:c7:a7:fd:2c:df:20:89:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: May 7 13:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d5d30128eaa22f33fd021e407431490c437413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:42:09:0d:7c:9b:b1:85:7c:9c:e7:80:0e:
54:2a:90:a4:a8:8e:34:9c:91:9f:80:31:07:b8:0d:
f6:28:92:ff:16:7c:62:9f:3b:e6:02:2e:25:a1:0d:
d3:87:e0:cb:b7:f6:9c:28:39:41:a6:fb:01:42:89:
b0:ba:b6:72:95:21:d1:dd:52:cb:bb:e1:4b:74:d7:
c5:3a:5e:bf:e8:e9:94:7b:4a:70:92:9c:e6:ab:d7:
26:03:93:a9:c1:b6:9e:27:4c:af:61:f8:d4:c3:a1:
6a:05:c7:3b:ee:2d:ad:aa:1e:85:4e:c9:e2:9f:6d:
f0:ea:92:24:5b:f5:91:91:0a:7e:60:16:9b:bd:55:
9c:4c:e1:28:d1:36:d4:c7:14:4c:1b:84:26:24:94:
1c:88:5a:ed:a9:31:26:e8:d8:54:20:7d:9b:8b:8c:
73:50:8f:e7:6a:2e:f6:94:bd:98:80:a1:29:93:6a:
9d:7f:c4:48:43:cd:15:6c:9d:94:60:ec:e6:2a:dc:
74:3f:c8:51:e6:ba:10:c2:9f:b7:b3:48:c4:40:f1:
01:9d:4e:53:48:2e:b2:ad:82:2a:65:9c:90:bb:04:
50:fd:07:53:16:57:0c:ed:a2:84:ba:0e:47:25:2d:
12:04:55:a7:44:9a:fa:bb:02:08:1e:d4:4c:1d:ca:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:D3:01:28:EA:A2:2F:33:FD:02:1E:40:74:31:49:0C:43:74:13
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/AdXTASjqoi8z_QIeQHQxSQxDdBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.255.0-91.238.0.255
IPv6:
2001:67c:1158::/48
Signature Algorithm: sha256WithRSAEncryption
7e:f5:0b:bf:af:bc:ab:af:e3:4a:f1:69:15:59:57:bb:7b:61:
4a:d2:07:43:2d:40:59:2f:a8:9b:2c:73:54:9c:b1:a8:af:19:
26:c9:5f:4f:98:f0:b3:73:d8:39:25:2c:cc:f7:74:99:3e:c6:
e3:16:37:56:66:6a:91:4f:e2:89:f9:ba:6c:ed:35:5b:35:2a:
db:15:a6:d9:36:46:8f:97:91:cc:b4:82:16:9f:cd:e9:4f:cc:
48:60:6f:66:d6:41:88:63:ad:8e:ef:03:25:70:a5:4b:ee:be:
33:81:cf:f0:34:f1:24:b5:65:89:32:86:e5:42:0f:e4:9a:7a:
c9:87:3d:94:53:3b:46:88:3a:bb:39:d5:44:7a:02:24:43:9c:
b5:95:59:e3:64:cd:00:16:35:ad:19:d1:c4:b3:1b:36:28:e9:
4b:45:a8:5e:9a:3d:00:ab:e0:b7:ab:05:27:92:18:d5:83:1f:
03:39:4f:3e:c1:69:50:ed:66:20:c2:91:20:1b:1e:72:38:f7:
2c:85:51:a2:ba:bd:cd:25:52:f3:1c:c6:ae:c4:c6:8b:3d:34:
e3:1c:3b:62:40:0f:cd:10:f6:cc:1d:3d:ba:00:f2:cb:1e:70:
6c:70:33:29:d1:c5:32:2a:4a:94:51:31:f0:60:1c:2f:e3:12:
98:67:39:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:29 2025 by rpki-client