Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/kR3ce-jWA0Zu5Pw3AoMuTDi5cE0.roa
File: kR3ce-jWA0Zu5Pw3AoMuTDi5cE0.roa (raw, json)
Hash identifier: uxBCTfQhm3AND4qKHTlH4kkIdNjd/1zElQsDJ8/N6To=
Subject key identifier: 91:1D:DC:7B:E8:D6:03:46:6E:E4:FC:37:02:83:2E:4C:38:B9:70:4D
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 0190347F458478E8E5463EB8A60F5202637A
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/kR3ce-jWA0Zu5Pw3AoMuTDi5cE0.roa
Signing time: Thu 20 Jun 2024 07:14:34 +0000
ROA not before: Thu 20 Jun 2024 07:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.107.72.0/21 maxlen: 21
185.91.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 Aug 2024 18:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:7f:45:84:78:e8:e5:46:3e:b8:a6:0f:52:02:63:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Jun 20 07:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=911ddc7be8d603466ee4fc3702832e4c38b9704d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:96:4b:99:81:29:47:72:db:3d:b0:e4:18:
88:9f:c2:ea:e9:88:29:21:5e:69:9a:1b:d3:b5:1d:
99:df:99:4b:b1:05:c9:95:34:29:cc:70:69:d3:e8:
79:08:b0:b5:3b:6f:96:42:04:35:21:34:ca:9d:71:
6c:6d:5c:4b:61:0c:28:92:7e:3c:4b:2d:28:91:59:
51:d2:88:f5:75:fa:74:64:b5:cc:d0:d2:49:10:08:
71:67:0a:25:a3:0b:dc:89:fc:5e:16:4d:a1:0a:c1:
9f:16:bc:e7:3f:4a:16:41:36:2c:58:f5:90:a0:de:
c4:35:cd:c3:47:b0:45:d8:5a:9f:b2:b7:31:c7:0c:
73:23:9e:e6:d6:52:d1:42:4f:82:89:ab:fb:e3:61:
16:77:cb:a6:db:a4:9b:ca:22:e9:50:b1:56:fc:b6:
5b:0d:e1:a1:89:bb:68:df:0b:ec:9b:3a:11:a2:af:
06:76:f5:6f:6a:9e:60:db:46:ac:64:13:4f:db:ea:
1f:d0:f5:1a:77:d1:ea:b2:81:ec:a9:40:51:76:41:
35:4c:a1:11:e3:47:97:f0:bb:3d:c4:1f:46:50:8d:
8e:11:3d:da:01:4a:ef:9c:e3:51:f6:14:5b:a2:2e:
46:cd:c4:50:a6:88:8c:93:3d:81:66:02:74:c8:90:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:DC:7B:E8:D6:03:46:6E:E4:FC:37:02:83:2E:4C:38:B9:70:4D
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/kR3ce-jWA0Zu5Pw3AoMuTDi5cE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.72.0/21
185.91.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:b3:1c:9a:2b:93:ce:e1:4d:5b:b4:6a:2e:40:00:ac:d2:69:
79:69:fb:91:5c:97:0c:18:7a:c1:20:b4:1e:13:51:54:75:d6:
27:92:0b:83:18:b8:19:9c:2c:14:63:93:0d:46:bd:1d:9c:72:
1b:d2:d7:44:92:83:ff:b1:ed:97:0f:c7:12:60:f1:37:8a:56:
35:4f:13:c0:9a:03:76:f6:65:bc:e1:34:2a:fc:13:8b:fb:51:
19:88:05:8d:30:9d:40:f4:50:5e:16:b0:12:c8:c8:a6:85:46:
81:fd:ae:8b:92:72:5c:8d:9c:78:7a:99:35:88:ad:0d:4c:7e:
81:b1:d4:93:2c:b1:be:46:61:03:6e:ea:43:a5:2d:d3:60:eb:
12:87:e1:bd:db:0c:22:c6:e8:4f:27:3b:c0:d5:6b:3f:99:b5:
e4:15:16:0c:14:d7:26:df:ed:d3:bc:5f:c8:a5:17:40:3f:e8:
bd:62:44:41:b4:8b:d1:36:12:70:83:75:b9:a6:67:1b:94:3a:
d6:b1:29:61:52:75:4f:ae:07:f3:25:e0:6e:37:70:62:3a:7d:
d5:0e:28:37:27:dc:3d:dd:06:d1:89:62:6e:35:05:21:46:e1:
ae:0e:f7:6d:80:be:01:12:80:cf:b4:ac:8e:ad:d7:a8:6a:a6:
d4:7f:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:43:40 2025 by rpki-client