Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/x5VS2Dbph10ncdraslAkBeBIv98.roa
File: x5VS2Dbph10ncdraslAkBeBIv98.roa (raw, json)
Hash identifier: 56s/QiO5m4bLrnCqy67VmrhTN6o6luvt1VpKrEE9NAs=
Subject key identifier: C7:95:52:D8:36:E9:87:5D:27:71:DA:DA:B2:50:24:05:E0:48:BF:DF
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019416FB0D58F23299F8A16FC9FA0BEE7BC5
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/x5VS2Dbph10ncdraslAkBeBIv98.roa
Signing time: Mon 30 Dec 2024 09:52:19 +0000
ROA not before: Mon 30 Dec 2024 09:52:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.210.144.0/24 maxlen: 24
109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:16:fb:0d:58:f2:32:99:f8:a1:6f:c9:fa:0b:ee:7b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 30 09:52:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c79552d836e9875d2771dadab2502405e048bfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:70:0a:c1:b9:5d:96:82:cb:e8:ca:fc:c5:
fe:93:84:1f:f3:8f:af:e1:57:4c:24:d3:89:a8:4a:
bf:c6:9a:ff:8d:aa:1b:6e:d8:41:65:22:cb:31:98:
39:e9:26:a6:9f:ec:23:9f:ea:5a:1c:56:b2:7e:82:
82:f7:05:d9:c5:13:48:4b:c1:1a:8a:a1:c1:8d:b3:
35:83:6a:47:d7:de:e1:47:19:36:95:5f:e4:3a:de:
1c:e7:1f:ab:c4:82:9d:0b:4b:a4:00:7a:bd:c4:74:
d5:86:16:40:98:6e:b1:d2:3a:9a:57:74:50:e7:44:
45:0c:df:4d:05:f3:d6:15:b6:14:11:2a:00:76:46:
aa:aa:c4:d8:47:c3:ca:2a:93:7f:e0:ef:d6:b3:79:
59:8a:46:dc:10:29:cb:0a:a1:7d:bb:b2:e0:81:56:
27:b0:b6:5a:ac:c8:54:d8:75:d2:e5:ba:45:56:7f:
9b:8a:5c:f4:66:f0:93:f2:02:14:0e:14:b0:23:f1:
c5:4d:0e:5e:13:62:01:82:ec:1c:81:bb:02:95:f5:
8f:99:97:59:98:d2:71:17:50:d2:86:ec:23:95:d2:
72:47:89:7f:e4:65:c6:ea:08:93:43:39:11:ad:94:
df:0a:21:9a:c9:76:9d:e0:e4:25:30:1a:5c:20:d5:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:52:D8:36:E9:87:5D:27:71:DA:DA:B2:50:24:05:E0:48:BF:DF
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/x5VS2Dbph10ncdraslAkBeBIv98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.144.0/24
109.122.45.0-109.122.46.255
Signature Algorithm: sha256WithRSAEncryption
68:c1:68:e7:77:3e:c7:42:f5:31:59:80:cf:8f:be:4c:25:aa:
ee:e1:84:03:b3:c0:11:14:f6:8d:26:fa:2e:d3:47:42:b0:aa:
c8:3b:44:8f:9a:ef:47:20:28:41:bc:a7:6b:ac:5b:ae:68:db:
6d:d1:29:dd:e2:be:16:c6:c4:b6:5b:e3:8a:d4:11:f6:09:90:
0e:70:bf:8e:f8:f7:36:02:8b:4e:6c:80:10:2f:84:e3:93:dd:
7f:bd:e8:f0:10:f3:14:2a:f2:f3:46:37:98:73:be:9d:a2:c1:
18:63:fa:2b:d1:b2:2c:37:24:bc:57:86:a2:83:fa:18:83:91:
0c:21:85:9f:7a:70:66:0b:e8:37:af:5a:c7:b5:49:2e:1d:70:
7b:46:e0:aa:98:06:49:b5:9a:f7:8e:e3:4b:7c:37:dc:b0:88:
d8:11:c3:a4:84:8b:04:a4:da:cc:5b:df:4f:d8:1d:41:44:75:
92:a9:ac:18:62:24:49:00:53:3f:04:a0:c3:66:7a:32:3e:bf:
9b:da:d2:18:c4:b5:3a:fe:52:af:4c:eb:d7:39:7e:84:c3:91:
ce:cb:a4:84:7d:b6:66:83:35:68:ca:c8:3c:0b:c2:d4:40:4d:
01:b9:2b:6b:17:62:fd:22:d1:fc:fb:e1:9b:4d:a9:67:e2:1a:
1b:c8:b4:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:29:01 2025 by rpki-client