Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/j7vLyDHqiXb7ED_Eis3-QkZmFYA.roa
File: j7vLyDHqiXb7ED_Eis3-QkZmFYA.roa (raw, json)
Hash identifier: Srzr85D6gQ9fXiBeIIGG3SNhn64gpuvQ1GYk/ihzs4I=
Subject key identifier: 8F:BB:CB:C8:31:EA:89:76:FB:10:3F:C4:8A:CD:FE:42:46:66:15:80
Certificate issuer: /CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Certificate serial: 018CC6B94333C9C161D4FB39153C8063003D
Authority key identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/j7vLyDHqiXb7ED_Eis3-QkZmFYA.roa
Signing time: Mon 01 Jan 2024 20:31:19 +0000
ROA not before: Mon 01 Jan 2024 20:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43099
IP address blocks: 91.194.66.0/23 maxlen: 24
2001:67c:a2c::/48 maxlen: 56
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:43:33:c9:c1:61:d4:fb:39:15:3c:80:63:00:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fbbcbc831ea8976fb103fc48acdfe4246661580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:30:9e:df:9c:3e:04:ac:b3:41:ca:70:72:
28:26:28:c0:05:29:14:0b:dd:e4:eb:16:15:c9:62:
10:97:85:76:7e:8c:ea:34:1e:c0:66:c3:ec:d6:d2:
e6:fa:b9:ea:f9:43:7d:b2:e9:b5:d5:7e:d3:3a:4c:
30:4e:3d:7c:16:6b:24:1f:e0:80:45:99:53:5b:c3:
aa:f9:92:78:71:47:46:4c:04:2d:8d:70:06:d8:2d:
82:cf:c7:d4:dd:df:e8:fb:f8:37:19:19:02:de:d0:
08:5f:92:35:8d:bd:18:73:d7:9d:d9:0d:f2:72:86:
1d:60:e2:35:2d:11:0c:63:0d:14:f2:40:a4:11:05:
82:a8:9a:08:78:61:8f:8e:7a:a9:b7:97:a8:72:f1:
c0:c0:90:01:db:f0:b5:59:6a:76:a8:86:31:e9:a5:
fe:0f:1d:5c:e8:43:d2:b7:1a:f3:4b:81:59:78:0a:
9c:73:ee:2f:0f:6a:16:70:d6:06:86:12:b1:46:5c:
4b:eb:06:48:f6:84:ff:5c:e1:67:95:16:30:a9:58:
d0:44:64:ba:5f:6c:bf:d5:c6:16:f5:67:d4:36:9e:
41:0a:37:8c:80:73:fa:32:7b:47:ea:aa:b2:10:57:
65:0c:fa:a9:9f:a7:44:00:5c:02:48:db:d6:54:36:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:CB:C8:31:EA:89:76:FB:10:3F:C4:8A:CD:FE:42:46:66:15:80
X509v3 Authority Key Identifier:
keyid:8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/j7vLyDHqiXb7ED_Eis3-QkZmFYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.66.0/23
IPv6:
2001:67c:a2c::/48
Signature Algorithm: sha256WithRSAEncryption
8b:db:b1:54:71:c0:3b:a6:19:51:ef:20:96:4d:18:33:fb:4d:
81:cc:a9:29:d7:0a:a6:aa:01:88:3b:e5:75:f1:81:bd:68:ad:
9a:02:0a:da:a4:70:4c:5a:d4:10:5b:e4:14:80:fb:55:08:cb:
57:b9:09:79:f4:2f:0b:d7:69:43:a1:c0:13:cc:5e:b3:18:5e:
7d:5e:a9:a6:eb:27:a0:4e:0c:a0:62:61:77:64:44:0e:1b:dc:
9e:31:f9:14:60:4c:2a:f1:cb:87:5f:e1:c3:a9:91:9b:4c:f0:
6f:58:2a:6b:3f:2a:dc:3a:e7:33:94:73:47:91:b4:d4:a2:4d:
20:ea:5c:9e:d0:cd:0c:d3:18:e5:75:7f:01:ba:57:38:0b:c0:
f5:49:e0:d2:fe:d9:cf:d8:22:7a:93:bb:65:c6:81:c2:fb:95:
9a:ff:60:3c:66:57:ab:21:5c:92:5a:fd:e9:2f:0d:63:4f:60:
d4:72:f5:01:4b:86:65:36:3c:1c:74:32:be:2e:61:31:8f:2d:
35:87:67:91:57:81:fe:75:c7:a8:7d:97:97:6a:77:c1:20:f1:
16:49:e8:d2:96:9a:6f:93:f8:40:af:ae:68:f8:52:88:be:b5:
6e:36:37:61:1b:49:07:34:40:72:0d:d4:f7:3b:7d:8c:5d:17:
03:c7:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:40:40 2025 by rpki-client