Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/85IHqE-FU-M1XhmI3m0jdKagts0.roa
File: 85IHqE-FU-M1XhmI3m0jdKagts0.roa (raw, json)
Hash identifier: Qa9mqXjDeGQMtCXkVSpoA5srgnNegDAG33oSsLLVQbI=
Subject key identifier: F3:92:07:A8:4F:85:53:E3:35:5E:19:88:DE:6D:23:74:A6:A0:B6:CD
Certificate issuer: /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial: 018EA8C64A9B16EF31ADAA55353BE645A0A4
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/85IHqE-FU-M1XhmI3m0jdKagts0.roa
Signing time: Thu 04 Apr 2024 11:02:31 +0000
ROA not before: Thu 04 Apr 2024 11:02:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51626
IP address blocks: 91.220.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:c6:4a:9b:16:ef:31:ad:aa:55:35:3b:e6:45:a0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Validity
Not Before: Apr 4 11:02:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f39207a84f8553e3355e1988de6d2374a6a0b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:5c:85:96:67:2a:6d:79:06:db:35:95:c2:
3f:71:4c:03:7e:4c:25:c5:84:5d:bc:18:91:23:08:
bf:7b:86:4c:b6:ea:2d:cb:79:5b:35:ff:ff:69:6d:
fe:24:9f:87:02:1c:a8:e9:b4:b1:c7:f6:f6:b2:42:
2c:93:80:82:f1:76:b5:5d:20:1a:6f:96:d1:42:e7:
f1:85:ca:1f:8f:3b:79:dd:47:a7:88:7a:99:41:1c:
77:80:48:99:0f:25:91:e9:ce:4e:a4:02:cf:1e:5c:
95:1f:cb:c4:25:2d:41:ea:23:6f:d8:a1:bf:93:fa:
19:18:67:6d:76:19:37:2f:56:9d:4d:24:18:66:fb:
6b:72:76:03:a7:ce:81:6c:fc:42:f5:d4:1d:d5:18:
c0:cf:5c:3d:e4:ac:0a:37:a3:cb:11:0f:f0:81:45:
7a:6d:20:bb:c3:f5:4c:3d:2c:15:aa:9c:2c:71:d0:
4e:52:da:bf:9f:aa:47:9d:f1:c0:41:52:b8:40:00:
5a:5d:60:c1:31:46:d6:20:33:3e:db:6b:1b:8e:42:
97:2d:4f:00:a6:36:60:a0:0c:96:06:8e:7f:7d:c2:
fa:13:21:ef:85:ba:c3:63:77:76:f1:c8:f9:e7:b8:
2f:7d:1f:e4:87:b4:cd:94:e7:52:76:c8:83:af:17:
e7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:92:07:A8:4F:85:53:E3:35:5E:19:88:DE:6D:23:74:A6:A0:B6:CD
X509v3 Authority Key Identifier:
keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/85IHqE-FU-M1XhmI3m0jdKagts0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.13.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b6:bb:08:e0:86:04:e5:3e:52:25:a6:47:d4:38:f3:5d:be:
71:e3:ae:4c:7b:65:00:5b:88:38:b4:82:24:d6:88:53:68:2c:
62:3c:ea:cb:1a:8f:f6:bc:59:51:32:72:4e:35:cc:7a:4c:0b:
45:96:34:d8:ae:22:5f:3e:fd:df:65:f4:af:96:52:af:0e:bf:
06:e0:8b:76:b3:c2:6f:e8:55:e4:cc:96:41:e1:3f:e9:72:24:
ec:12:07:03:50:da:91:03:d5:5e:8e:1a:0b:4d:14:90:01:43:
85:13:42:a1:f0:c9:60:3f:84:48:57:22:da:9c:a5:dc:81:3c:
9e:bf:af:c4:9a:12:39:37:cc:b8:83:da:22:21:d4:69:78:0f:
63:68:ba:b7:a3:f7:1d:ee:56:0f:3f:dd:58:fa:87:ca:13:35:
9d:dc:ef:de:3f:b0:8e:1c:33:93:63:6c:49:3a:ba:83:eb:22:
9f:85:d5:6e:71:7a:07:b4:6b:87:b7:78:f9:5a:0b:7e:45:7a:
a5:ca:83:79:61:1f:a2:b7:68:04:1d:a5:40:03:be:9b:65:5f:
03:ef:3b:a4:04:fc:6f:87:a5:23:c4:05:59:b3:dc:b2:71:61:
87:b7:2f:b6:21:a6:d2:16:60:bb:27:ac:3d:cb:b8:32:fe:b7:
db:75:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:13 2025 by rpki-client