Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/C-2P4mlb6Lp-SCXJAYKZ6UABX4Q.roa
File: C-2P4mlb6Lp-SCXJAYKZ6UABX4Q.roa (raw, json)
Hash identifier: 4iPLomuHfONXmyxICP4tAR27QB1ThUgqwGHDLgK/BEE=
Subject key identifier: 0B:ED:8F:E2:69:5B:E8:BA:7E:48:25:C9:01:82:99:E9:40:01:5F:84
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 018CC4247F3D0C5CBD7FC0EA83CD1D5A3029
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/C-2P4mlb6Lp-SCXJAYKZ6UABX4Q.roa
Signing time: Mon 01 Jan 2024 08:29:35 +0000
ROA not before: Mon 01 Jan 2024 08:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42507
IP address blocks: 91.151.196.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7f:3d:0c:5c:bd:7f:c0:ea:83:cd:1d:5a:30:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Jan 1 08:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bed8fe2695be8ba7e4825c9018299e940015f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:03:c9:94:f3:6c:09:f5:42:71:5b:85:1f:
ec:d2:ee:68:23:72:5d:a4:7d:df:fc:f5:87:d5:f6:
42:79:ad:72:4e:38:b9:df:c6:0a:5e:e7:6b:33:6c:
f2:a7:6a:dd:58:ad:0b:f6:a8:95:5b:e0:01:8e:62:
6d:5f:51:fd:5f:64:34:01:dc:02:af:47:13:e4:3f:
d0:c2:58:3b:ea:bd:a6:94:b4:96:3c:e3:4f:93:e3:
55:1b:2e:65:e5:80:a4:08:12:a0:8d:ad:5c:42:41:
eb:33:d4:5f:13:ad:c2:ca:43:1b:7c:b0:19:43:75:
f8:c7:b5:f0:07:fc:86:d7:69:34:4c:8a:9c:47:f2:
0f:a1:63:af:ee:31:f4:0a:92:fb:6c:2f:84:f3:cb:
62:33:20:20:d4:84:6a:ec:3a:33:c9:84:a9:62:c5:
7b:93:37:68:39:a1:ab:2b:70:8a:a4:a7:19:4f:10:
da:ee:09:4d:d5:10:bf:bc:94:e8:36:9a:1e:36:c0:
e5:b1:0e:61:b5:af:25:79:2b:54:b9:92:02:30:8c:
ca:bd:cf:95:ec:8f:76:40:b2:47:de:79:e6:4b:da:
38:3a:6b:29:75:db:fd:e1:a8:98:c0:a4:df:af:c3:
b5:67:b2:08:8c:d4:3b:06:11:73:75:e0:6e:38:b0:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:8F:E2:69:5B:E8:BA:7E:48:25:C9:01:82:99:E9:40:01:5F:84
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/C-2P4mlb6Lp-SCXJAYKZ6UABX4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.196.0/24
Signature Algorithm: sha256WithRSAEncryption
90:11:fd:29:4f:53:93:09:67:5e:f9:10:28:40:d7:03:58:3e:
cd:4b:53:ee:38:23:5a:7e:b2:2f:d3:a3:bb:e5:e0:35:fc:d5:
50:2f:83:61:12:ed:d8:45:8c:e9:e5:79:98:e6:7a:a9:c9:34:
6d:4b:18:f8:ba:dc:8b:21:53:a6:fb:b3:cb:0b:6a:16:f6:25:
01:8c:1f:be:05:56:48:8e:ea:ea:22:ae:55:44:71:ca:ee:de:
6d:5c:7f:f1:72:fb:89:5b:7a:4f:28:23:59:f0:a0:82:2b:2c:
e2:0e:b9:97:1f:60:ad:88:a0:d1:a8:b8:5a:f6:1e:84:fb:97:
71:28:7c:da:a6:18:70:50:e4:a5:f6:32:1e:53:ed:2e:5b:75:
32:b3:93:69:b9:cf:b1:57:3d:be:1a:4c:52:a2:be:7c:d8:6d:
b3:5f:02:fc:08:36:a0:c4:d3:6f:5b:30:f4:ad:12:22:cc:2b:
8b:42:98:77:b9:c2:cc:8f:6d:9e:49:84:7f:26:89:69:1b:3e:
04:5e:cc:5b:21:9c:ce:2a:3a:65:aa:ab:0e:7d:67:9c:6a:96:
34:66:61:db:97:1e:49:ba:27:5f:02:9e:2c:4e:6a:d5:4b:e1:
b9:2a:cf:47:06:a9:57:b6:a1:07:9f:47:ec:9e:8a:f7:a5:51:
c2:38:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:20:37 2025 by rpki-client