Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/mZ-px8f9ex4hz7E5GzgYuKVQJls.roa
File: mZ-px8f9ex4hz7E5GzgYuKVQJls.roa (raw, json)
Hash identifier: yX7CiGFJbBmCF4RxTgpMsqkhWsBXKWVM3GZcdVFlPcw=
Subject key identifier: 99:9F:A9:C7:C7:FD:7B:1E:21:CF:B1:39:1B:38:18:B8:A5:50:26:5B
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 018CCA2969475BF613EBE5D56EBDB16E04D1
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/mZ-px8f9ex4hz7E5GzgYuKVQJls.roa
Signing time: Tue 02 Jan 2024 12:32:40 +0000
ROA not before: Tue 02 Jan 2024 12:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203056
IP address blocks: 91.146.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:69:47:5b:f6:13:eb:e5:d5:6e:bd:b1:6e:04:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jan 2 12:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=999fa9c7c7fd7b1e21cfb1391b3818b8a550265b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:60:01:a2:32:f8:76:1d:55:13:ec:7f:77:
bd:11:f9:58:ec:c9:0b:c0:de:4a:1f:91:77:df:09:
88:ad:ef:48:67:73:f9:a7:55:ec:72:97:71:7d:4a:
8f:5f:56:d6:57:71:7e:ca:9c:08:c1:57:e3:26:5a:
03:21:0e:b9:fb:99:38:58:c4:83:67:be:e0:d8:c9:
6d:39:70:07:5e:c4:97:fb:30:a7:0e:66:6f:8a:da:
e0:21:aa:51:1a:c3:f9:8e:e3:10:ee:db:8f:de:b5:
18:9f:ee:91:59:0c:29:a0:49:cb:46:f0:45:7a:af:
f6:da:d9:60:4f:95:90:c6:cc:de:78:9f:b3:8f:e2:
af:6c:70:0d:e4:12:63:2b:b3:8e:64:65:a8:b5:1d:
61:45:46:91:48:7a:53:3c:df:de:d2:0c:88:0c:c3:
f0:a6:76:aa:41:20:d5:58:68:d5:48:e9:3d:16:08:
63:ae:62:b9:2e:b8:6e:a3:0e:64:df:87:59:d1:55:
a3:7b:d3:c0:b5:5e:62:74:00:2c:f5:47:1a:dc:1e:
66:31:62:82:00:2f:83:df:b1:66:8d:5f:67:5c:3d:
32:61:d0:2f:bb:c9:07:1b:c9:77:d9:98:5e:15:0b:
03:88:9e:39:53:15:c4:90:bd:b7:42:85:1d:10:b6:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9F:A9:C7:C7:FD:7B:1E:21:CF:B1:39:1B:38:18:B8:A5:50:26:5B
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/mZ-px8f9ex4hz7E5GzgYuKVQJls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.114.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:4c:1f:6d:0b:c9:6e:30:1c:64:03:1d:00:52:2c:11:94:c3:
cc:af:25:d9:16:74:bc:aa:31:9b:4e:73:22:09:e4:a9:65:17:
55:22:7f:a1:02:80:04:f9:b0:33:ea:70:df:ae:dc:21:33:3f:
41:83:a8:e5:63:a8:ae:2d:a9:74:62:9d:10:7d:22:b0:fc:75:
47:8e:cc:26:2b:49:83:cb:4c:d4:c2:63:1d:59:38:9e:4f:41:
56:c8:87:87:5f:a3:ad:be:6f:a3:70:d6:4d:47:71:50:f0:18:
c9:36:d5:5d:e0:f8:f9:0b:7d:82:9e:46:27:e2:82:60:88:da:
38:d3:4f:4f:b7:a2:e5:4f:ce:39:d7:12:8b:76:f4:cc:78:72:
64:49:49:7d:3b:f4:5b:34:cf:bb:85:ad:3e:12:f5:36:d2:48:
0f:4f:e1:c7:03:8f:2c:e2:85:00:c8:99:3e:71:41:8d:70:42:
c2:bc:2e:43:d5:cf:2e:41:b3:c9:f7:e0:d7:c9:0b:85:5f:64:
c5:d8:da:64:c4:49:9b:68:86:3d:05:a9:d7:5e:c2:0a:21:cc:
1d:7c:8d:da:e6:fd:0d:60:55:6c:48:b7:7f:ca:c1:cb:5d:d9:
fa:ff:9f:62:56:04:76:57:e9:3b:c4:11:1d:61:dd:ef:99:45:
d6:a3:72:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:35 2025 by rpki-client