Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/RFcH-GTmJRB4gBjJmqhvR8UMXD8.roa
File: RFcH-GTmJRB4gBjJmqhvR8UMXD8.roa (raw, json)
Hash identifier: H/jvYGwwwVGN3J3kDd3gVWlb3TqKBhFo+Fc9l03Lp0Y=
Subject key identifier: 44:57:07:F8:64:E6:25:10:78:80:18:C9:9A:A8:6F:47:C5:0C:5C:3F
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 018CC64B44D28580265A17C9223C94166856
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/RFcH-GTmJRB4gBjJmqhvR8UMXD8.roa
Signing time: Mon 01 Jan 2024 18:31:10 +0000
ROA not before: Mon 01 Jan 2024 18:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39232
IP address blocks: 91.242.0.0/19 maxlen: 19
91.242.0.0/20 maxlen: 20
91.242.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:44:d2:85:80:26:5a:17:c9:22:3c:94:16:68:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Jan 1 18:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=445707f864e62510788018c99aa86f47c50c5c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:6e:ac:6d:9a:97:39:d8:70:1c:57:98:35:
2b:47:6e:4a:c9:e0:56:9e:f3:02:b9:f8:9a:c3:fe:
3c:c1:12:5c:64:af:5a:9b:81:71:76:50:ed:24:de:
bf:30:46:de:76:06:fc:8c:6e:5a:69:ee:53:4f:77:
f3:98:f0:45:35:d5:95:7d:13:8f:10:19:68:2c:db:
5d:8f:cd:bc:14:86:09:41:17:2f:08:87:d7:53:96:
1c:4c:68:ee:90:e5:52:7f:0a:99:a0:c1:b8:51:de:
5e:81:61:ae:0a:4e:a5:22:ea:0d:4a:cc:69:01:6b:
9f:ed:d4:fc:b0:5f:a9:6d:0c:15:dc:35:bd:94:83:
e3:d2:d9:39:cb:ec:3e:b1:0d:db:0a:13:20:49:39:
3d:a4:06:78:b0:04:e2:65:e8:03:35:25:51:ed:ab:
b9:1b:26:f2:c5:d9:c3:a8:07:f8:a6:a0:f4:38:0a:
dd:b4:de:55:c0:fb:61:c6:e2:1e:95:a2:03:69:4e:
a0:79:f8:bf:ed:62:bc:b0:23:fd:0d:5f:ef:09:d3:
dd:76:46:15:8d:b8:dc:d1:94:2c:5d:aa:5d:26:7f:
bd:98:56:4a:22:c8:95:d2:2e:fb:2c:7b:1a:a5:a4:
c5:be:6a:fc:f7:71:2e:21:91:6b:ef:78:b1:c3:68:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:07:F8:64:E6:25:10:78:80:18:C9:9A:A8:6F:47:C5:0C:5C:3F
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/RFcH-GTmJRB4gBjJmqhvR8UMXD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.0.0/19
Signature Algorithm: sha256WithRSAEncryption
18:b4:28:f6:28:63:b3:aa:2b:4d:73:ce:e6:00:31:4c:c9:b3:
a8:11:22:d0:40:86:57:ce:d4:86:04:82:f5:98:74:ce:68:aa:
f8:d0:f5:00:a2:e5:7f:78:6b:7d:82:33:10:2b:36:34:38:e4:
d8:33:0e:e4:21:8f:3a:1f:5e:a9:ac:03:2b:3b:0c:84:c1:ae:
e9:bf:c3:bd:19:24:71:0c:4c:3e:c5:86:ab:e8:a1:e7:f9:6e:
83:d2:e7:1b:d4:22:ce:1c:95:0a:e7:67:52:65:87:1b:4b:1a:
22:f3:04:62:a7:98:d1:1b:ba:b2:25:60:85:d5:47:a6:0a:bb:
79:25:7d:fb:65:79:7e:60:04:a0:fa:53:81:5b:2c:12:9f:da:
3a:0f:ea:56:c5:ed:09:75:65:59:62:00:97:d6:14:65:56:66:
3a:c9:56:09:08:e8:b0:e5:fb:c5:9e:cd:ac:30:7c:ce:44:3a:
b0:4b:2d:2d:f5:50:67:8a:42:95:70:7f:62:c2:40:69:d5:6e:
69:2d:95:32:00:d4:07:f7:fd:91:68:c7:44:1f:c0:a1:96:8f:
52:94:d5:b6:1f:26:cb:ad:f9:3a:79:35:c5:0b:07:d1:25:04:
dd:7b:7c:24:24:ca:34:42:3a:e5:b5:17:e9:6a:cd:b1:f8:83:
b3:55:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:20 2025 by rpki-client