Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/yuNUza8U5EGj-y926WhuPacf4-Q.roa
File: yuNUza8U5EGj-y926WhuPacf4-Q.roa (raw, json)
Hash identifier: e30hNzGcBkPPM537wyfkysMujWs+npj2xULZFojqRG8=
Subject key identifier: CA:E3:54:CD:AF:14:E4:41:A3:FB:2F:76:E9:68:6E:3D:A7:1F:E3:E4
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 0194258F6C1CC92B3A2DA53E1D7CB03C896D
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/yuNUza8U5EGj-y926WhuPacf4-Q.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48219
IP address blocks: 91.223.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 14:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6c:1c:c9:2b:3a:2d:a5:3e:1d:7c:b0:3c:89:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae354cdaf14e441a3fb2f76e9686e3da71fe3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:82:fe:e4:85:7d:dd:40:18:74:87:47:ea:
d7:f8:e4:d3:39:40:4e:1f:51:72:1e:b1:60:57:bc:
f8:fc:17:f2:cd:56:56:9a:59:ea:9d:e2:2f:39:88:
dc:d5:7a:03:8b:16:85:a7:da:df:80:78:24:35:1a:
47:1d:cb:4d:b6:60:f0:59:9c:14:2c:b3:2c:96:1f:
ee:68:b6:dd:d6:62:3d:21:60:e8:f6:4d:62:c5:19:
e9:6c:66:77:2b:26:13:9b:7d:f5:f9:64:e2:ae:dc:
35:55:44:1e:f0:ad:8a:c1:85:8c:87:b4:20:1a:bb:
b1:56:f5:5b:e5:37:6c:f9:49:6f:fa:3c:9a:ca:af:
93:84:93:cd:d5:41:2e:73:4d:f9:87:67:a5:ef:c7:
d3:7d:28:d8:d9:c4:d0:df:e9:a2:fc:5d:64:1a:c2:
fb:24:2a:9e:c5:2a:58:bc:73:81:bc:1d:3d:07:45:
bc:8d:7e:9c:d7:f1:8f:8e:3c:1a:8b:11:9e:53:6a:
19:35:fe:33:38:8c:f2:ab:e1:b1:d3:90:f5:92:43:
22:35:3b:e8:26:85:a2:b0:83:7b:39:a6:e0:94:3d:
6d:a6:02:47:44:3d:25:b1:96:dd:cb:1f:1d:96:b5:
2d:cc:6d:67:35:59:a7:c8:9f:12:c6:83:61:7a:68:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:54:CD:AF:14:E4:41:A3:FB:2F:76:E9:68:6E:3D:A7:1F:E3:E4
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/yuNUza8U5EGj-y926WhuPacf4-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.137.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:10:1c:a3:de:17:84:43:3a:fb:5e:58:a4:bf:34:7e:c7:a6:
1e:23:b3:d2:ac:78:3f:33:20:47:6d:75:c4:be:3f:07:20:11:
37:05:92:68:3d:de:3a:e6:98:02:89:dc:00:ef:54:b0:16:ed:
60:89:08:a4:8e:61:0f:58:3d:bd:28:61:09:80:56:d7:03:1b:
ab:f0:2c:a3:4a:12:1e:f8:7f:94:90:e1:7c:4b:f6:34:07:39:
8c:10:83:f0:8d:bc:46:6f:98:a6:b3:56:93:b2:61:ee:ad:c3:
bd:5d:44:28:d2:4d:16:21:91:41:b7:0a:54:11:46:16:87:c5:
a5:13:b1:61:db:eb:21:fd:85:11:7d:99:f5:86:3e:5e:c8:cf:
73:fd:86:d5:f6:ec:bd:4a:37:7c:56:27:50:7f:c5:06:1a:69:
4d:6c:91:67:51:db:f7:42:bf:fa:dc:36:c1:6b:1a:cd:5f:d4:
fd:cb:a2:17:b8:81:2b:bc:19:96:45:e7:46:13:47:c2:e9:23:
b0:df:ea:4f:0b:7c:a5:18:80:24:42:47:b2:0d:07:2a:cc:de:
63:96:36:ba:01:26:5f:76:ad:cd:a1:df:a0:a7:f4:4b:fe:f2:
72:69:b1:15:3d:48:13:e8:be:bd:94:76:00:f3:4c:9f:24:3d:
e6:69:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:30:24 2025 by rpki-client