Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/r5fRVR2JpJRq1O3T4B49h-QfH0M.roa
File: r5fRVR2JpJRq1O3T4B49h-QfH0M.roa (raw, json)
Hash identifier: s1ksqRvlO06++JSWPWwLyo7nxNXOC/3hAnGoJT4NplM=
Subject key identifier: AF:97:D1:55:1D:89:A4:94:6A:D4:ED:D3:E0:1E:3D:87:E4:1F:1F:43
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0194221F954AF289EB1BD982CE896D9BD845
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/r5fRVR2JpJRq1O3T4B49h-QfH0M.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 91.246.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 23:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:95:4a:f2:89:eb:1b:d9:82:ce:89:6d:9b:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af97d1551d89a4946ad4edd3e01e3d87e41f1f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:79:f6:a3:e2:f0:e2:25:f1:47:49:54:01:
b2:2e:38:4b:c4:6a:f3:69:42:d4:13:33:1f:f8:49:
78:d5:d3:05:cd:f5:e3:b6:a2:a3:e7:f3:5b:b6:05:
1f:1b:c4:c1:69:a0:91:c7:4c:d3:52:58:a7:0d:f4:
d6:d7:a5:ea:06:66:da:84:d1:f1:84:6d:dc:f9:08:
f8:27:e3:c3:b1:73:99:dc:dc:97:bb:25:4a:d6:c8:
15:42:ed:73:d5:35:69:71:da:50:d5:5a:28:e5:55:
bd:b7:66:52:3c:93:fe:29:b0:35:47:06:17:0e:69:
03:22:1c:0f:54:65:d5:e5:14:b0:1d:17:8d:85:9d:
7a:19:1a:9e:8b:b6:0a:17:8e:0e:d5:97:16:80:49:
28:0b:1a:a5:6d:a2:0f:e4:2e:96:73:02:8d:bc:66:
2b:77:14:44:d2:d7:41:b8:7d:2c:ce:49:fe:95:9e:
0b:e2:67:3c:c8:17:a7:5a:72:97:75:fa:2b:c9:be:
a9:4a:2b:9c:5c:a8:82:80:bc:1f:8c:bb:f1:1e:ea:
de:d1:3a:4f:27:3b:de:3a:65:db:c9:73:c6:b0:6d:
d6:f4:cf:7b:49:a7:1c:72:97:ad:5e:1f:cf:b9:fb:
84:83:85:f6:65:f4:f7:93:50:3b:be:21:02:be:1d:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:97:D1:55:1D:89:A4:94:6A:D4:ED:D3:E0:1E:3D:87:E4:1F:1F:43
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/r5fRVR2JpJRq1O3T4B49h-QfH0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.55.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5a:67:8c:3a:71:42:74:48:eb:ef:e5:73:0a:72:f6:45:43:
c9:1a:74:ec:a6:ac:53:0f:9e:bd:4d:96:b0:4b:b5:58:74:1d:
4c:23:db:b0:7b:20:e4:8a:72:96:24:ec:80:2e:c4:80:20:e8:
f1:ea:8b:27:5f:fe:f0:1f:ba:f8:30:ec:8a:9a:f2:30:3c:57:
87:d1:75:0b:bc:9d:8a:f5:ff:3b:5f:7c:bd:69:aa:7f:14:da:
5d:5f:43:2b:9d:b7:61:e8:5f:60:7b:6e:92:06:43:a2:b0:7c:
13:bd:67:5b:53:ed:9b:24:90:36:0c:92:38:ff:22:14:57:da:
88:8f:94:e7:4e:3b:ec:03:36:3a:78:5f:a1:26:3b:20:4e:5e:
39:a9:86:9f:87:6a:7a:4f:95:fa:ac:f0:92:55:0c:04:f9:d0:
cb:6f:22:eb:b6:27:be:7f:2c:e6:a8:28:ce:5a:9f:25:ba:f1:
76:d4:71:ad:0a:c0:5c:63:83:d4:c5:cc:7b:c1:ed:61:be:14:
71:d0:21:a7:ca:8b:2f:a0:59:3d:41:b1:a7:a3:87:f3:9b:88:
8e:ef:36:35:00:ed:b5:b1:c8:66:9d:57:24:0c:07:ef:f7:05:
07:eb:5d:51:f0:3b:d4:7e:92:35:9b:82:27:e1:eb:96:ed:ee:
43:f9:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:53 2025 by rpki-client