Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/e_sSEfQp7Yv9o3CyiXOpx0niKMg.roa
File: e_sSEfQp7Yv9o3CyiXOpx0niKMg.roa (raw, json)
Hash identifier: iRxlsbM63jnWSw8OoDE7IsnE68l4MRTBMbB27l4aD8Y=
Subject key identifier: 7B:FB:12:11:F4:29:ED:8B:FD:A3:70:B2:89:73:A9:C7:49:E2:28:C8
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 0193C5CACCB76308A29FDCAA1515E8A152AB
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/e_sSEfQp7Yv9o3CyiXOpx0niKMg.roa
Signing time: Sat 14 Dec 2024 15:30:22 +0000
ROA not before: Sat 14 Dec 2024 15:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202312
IP address blocks: 91.200.88.0/22 maxlen: 22
91.200.88.0/24 maxlen: 24
91.200.89.0/24 maxlen: 24
91.200.90.0/24 maxlen: 24
91.200.91.0/24 maxlen: 24
2a0c:69c0::/32 maxlen: 32
2a0c:69c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c5:ca:cc:b7:63:08:a2:9f:dc:aa:15:15:e8:a1:52:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Dec 14 15:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bfb1211f429ed8bfda370b28973a9c749e228c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:5b:c8:c8:cc:7d:e2:54:b4:b6:42:40:26:
bc:71:61:f9:bc:87:4d:3f:f9:03:dc:63:8a:ce:e3:
04:83:79:f2:28:8f:26:bb:13:b1:f6:76:0c:1b:43:
ab:5b:02:c3:fd:73:14:74:27:ca:21:1d:a5:05:2f:
19:36:58:6b:f3:3b:55:06:11:1a:14:93:60:e5:6d:
02:80:62:bf:ae:b9:f2:50:26:5d:e8:8f:5c:a3:7a:
b4:d2:92:8b:9f:3d:c0:d3:de:37:35:71:d7:b3:0b:
c7:ce:ce:03:35:2c:d2:c0:0f:b3:f4:f5:43:82:0a:
d2:f9:ef:df:78:75:9b:6b:09:7f:b5:7a:45:d7:b7:
5d:e4:d7:63:c5:42:f9:ea:96:3e:7a:0f:66:d2:fb:
de:fa:69:d6:39:bc:c9:cc:f0:94:08:c8:cf:22:54:
bd:83:ce:8d:11:9d:fe:df:4e:b9:20:af:0f:de:11:
09:94:8a:4c:2a:ab:25:8c:be:d4:07:e7:cf:b3:97:
fe:ce:89:3e:d5:15:be:c0:5b:eb:d5:4c:48:e9:9c:
2a:ea:25:77:2a:1d:5d:93:54:4c:d4:ec:6c:3a:7b:
8b:08:c9:e0:d6:36:1d:20:a8:66:d5:c3:65:8d:b9:
43:1c:68:c9:0c:19:aa:cf:a5:d7:10:36:24:3d:06:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FB:12:11:F4:29:ED:8B:FD:A3:70:B2:89:73:A9:C7:49:E2:28:C8
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/e_sSEfQp7Yv9o3CyiXOpx0niKMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.88.0/22
IPv6:
2a0c:69c0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:68:4c:e0:15:70:2b:74:f3:8e:8d:87:04:bb:5b:c8:d9:77:
7d:93:11:8d:59:40:43:9c:f0:60:a5:c4:99:f6:4f:f0:75:d9:
23:17:4f:46:6a:ca:3d:71:d2:b0:1a:3a:05:b8:f9:82:5e:81:
28:28:28:bc:5d:d4:78:0b:20:bf:c2:41:40:2c:d3:12:39:05:
30:2e:00:14:8a:56:0f:b0:33:b0:57:fb:89:98:94:b9:06:8e:
86:8a:dd:f2:b2:34:36:97:1a:03:ed:79:14:31:a3:3e:d3:10:
84:d9:c0:e7:ec:50:8d:0a:69:71:1c:f5:19:ad:f4:9a:87:04:
39:e4:2c:0b:99:6a:3c:3d:21:79:34:ca:66:37:0d:fe:9a:4c:
01:6e:9d:50:a5:cc:95:f9:82:c6:83:c4:a6:a9:a6:a6:cb:fb:
95:32:ae:81:37:d6:11:be:c3:60:fe:39:a7:22:aa:03:45:d3:
9b:ed:5e:2a:74:f0:65:51:5b:37:b0:13:49:ad:26:f4:06:75:
90:f2:15:4a:7e:10:6c:d3:d9:a7:95:26:65:95:2e:6c:6f:2e:
b4:5c:f0:4c:6e:86:e4:c2:3b:2b:28:15:d2:c8:02:c2:75:ab:
ee:a8:e9:bb:16:d3:be:34:9e:1a:18:ba:5c:f5:89:c9:c1:24:
0c:12:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:58:01 2025 by rpki-client