Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/x0pXO_c3PyKW6Ov9xeTBZqjWaSc.roa
File: x0pXO_c3PyKW6Ov9xeTBZqjWaSc.roa (raw, json)
Hash identifier: DU/hf94jWFV9xBHc12rqbwHtthzJSj3EEaBU9pzqm0U=
Subject key identifier: C7:4A:57:3B:F7:37:3F:22:96:E8:EB:FD:C5:E4:C1:66:A8:D6:69:27
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 018CCA2BC963F0735E102D16EA79563C078B
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/x0pXO_c3PyKW6Ov9xeTBZqjWaSc.roa
Signing time: Tue 02 Jan 2024 12:35:16 +0000
ROA not before: Tue 02 Jan 2024 12:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43866
IP address blocks: 91.195.202.0/23 maxlen: 23
91.195.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c9:63:f0:73:5e:10:2d:16:ea:79:56:3c:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Jan 2 12:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c74a573bf7373f2296e8ebfdc5e4c166a8d66927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:dd:05:24:c6:ed:ae:27:25:c0:51:40:bb:
bd:52:f8:97:c6:41:db:d2:d8:27:fd:c1:35:4f:eb:
4c:a7:f1:85:95:22:34:40:e6:d8:5d:18:d7:2b:44:
1e:a8:a9:fa:27:fb:dd:11:c7:19:c1:44:4d:dc:f8:
68:8b:57:6c:bf:db:da:c9:8e:31:e9:d0:f5:b2:8c:
3d:09:f5:bc:a3:14:42:c2:cc:ef:71:3c:ab:69:61:
07:63:4d:ad:64:13:60:93:6f:ab:d5:10:f6:02:f0:
7f:0d:40:63:dc:f8:c6:d1:6c:3e:61:3f:22:02:e0:
86:6e:c0:30:ec:25:77:b9:d2:7e:9e:51:f5:a7:e4:
34:fb:7d:7b:91:a1:c6:fb:c5:a7:6e:14:a1:95:03:
36:38:35:6d:0a:12:18:3e:c1:65:6a:ac:63:f1:6e:
aa:d3:4a:8d:5b:41:29:1f:d3:49:51:a9:0f:93:48:
39:4c:95:3f:b8:65:7c:0b:7f:9f:3b:59:8c:92:db:
c7:22:01:5d:ed:cc:fd:dd:be:5c:8d:95:46:52:5f:
40:cc:36:b0:3b:8d:73:01:85:f2:37:ec:6e:35:51:
72:15:59:13:8e:2b:33:6b:6b:fe:5e:f1:a4:24:c9:
58:77:4a:6b:83:e9:3b:3b:35:0e:25:7e:6b:5f:c3:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4A:57:3B:F7:37:3F:22:96:E8:EB:FD:C5:E4:C1:66:A8:D6:69:27
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/x0pXO_c3PyKW6Ov9xeTBZqjWaSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
31:4f:7f:38:8c:42:da:f9:7d:03:9f:84:46:f9:ee:a6:8d:f4:
4d:ef:83:65:83:a6:ef:1b:63:51:21:44:40:1f:83:ef:79:67:
3b:2b:4f:58:b5:64:51:c8:42:41:63:82:9f:0b:10:ec:46:5a:
5f:a3:f8:9e:47:3c:ad:34:bd:2b:59:2e:d3:79:22:54:55:58:
eb:53:a3:77:04:76:2a:21:0e:65:02:4a:e3:d8:0f:0c:36:1f:
05:71:b6:45:6b:a8:b7:bf:93:83:05:b7:c0:b2:02:67:a0:6d:
91:92:e4:fc:f3:15:79:2d:67:a1:97:92:db:84:fe:44:24:12:
22:44:4a:7f:95:39:93:72:7e:98:fa:7f:dd:e7:40:86:94:b9:
9d:b7:60:5e:0b:67:91:d5:82:3b:ea:c8:4d:05:69:92:48:8f:
ca:9d:58:c3:a6:9b:76:72:bd:1e:85:a6:7d:4b:7a:b8:a2:b7:
0c:17:df:39:73:cc:47:10:7b:c9:09:23:da:20:5a:a8:e6:39:
ad:41:03:f3:58:1e:ea:1a:23:76:20:8d:2c:22:65:50:22:06:
67:5d:c6:ea:7b:f3:e9:36:6d:5d:68:66:6f:af:93:99:58:66:
d7:a7:8f:ee:1f:03:7f:8a:3d:62:85:67:5d:61:f6:a4:81:ad:
bd:1a:b1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:50 2025 by rpki-client