Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/XSxO_Y6Lj7Ucey8vXbyz5BnCD_g.roa
File: XSxO_Y6Lj7Ucey8vXbyz5BnCD_g.roa (raw, json)
Hash identifier: pm7LKub87nGzvxQz2MoJunV9dXecq3Wcb3bK3/NNAeY=
Subject key identifier: 5D:2C:4E:FD:8E:8B:8F:B5:1C:7B:2F:2F:5D:BC:B3:E4:19:C2:0F:F8
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019420D5E91E8F004F64AEDC19BB8C1938E1
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/XSxO_Y6Lj7Ucey8vXbyz5BnCD_g.roa
Signing time: Wed 01 Jan 2025 07:47:57 +0000
ROA not before: Wed 01 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43824
IP address blocks: 91.92.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 00:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e9:1e:8f:00:4f:64:ae:dc:19:bb:8c:19:38:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d2c4efd8e8b8fb51c7b2f2f5dbcb3e419c20ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:c8:bb:5f:0c:5a:7d:fc:8a:56:0c:83:96:
50:6b:36:df:05:5b:92:cf:f1:44:35:13:8b:b4:1d:
cf:61:ef:ac:32:98:94:01:e2:5b:f0:3f:1f:25:57:
ad:63:8d:ca:1d:76:9f:62:ed:44:7c:42:3b:23:ca:
86:e9:c7:08:de:9b:6d:13:b5:9e:0a:70:cc:6f:e9:
e1:0c:e6:d7:4b:d5:a6:bb:85:d6:93:11:4c:d4:c6:
f1:e4:f0:d7:84:07:ea:33:ec:b4:f0:7a:0a:6d:e1:
52:5f:7c:67:3e:4b:75:5a:0e:5f:aa:d2:e4:c1:9b:
59:02:e6:57:78:4a:c0:c8:af:73:8f:5c:d6:f7:df:
84:09:fd:db:a0:4c:f7:e5:ee:71:40:c7:35:c3:68:
89:ff:d5:c6:ff:1f:ea:a0:88:12:b8:a0:10:05:c9:
42:a7:43:94:29:30:94:8c:25:54:4a:84:14:9e:f1:
19:fd:22:2b:a1:99:b6:39:43:ce:26:5a:80:4e:13:
88:81:4f:80:17:77:81:c7:f4:59:3a:b0:7a:5f:f7:
17:32:55:23:4b:79:f2:75:0b:58:07:c0:d3:b0:fa:
59:97:29:5b:55:8b:37:6e:5d:1e:54:a5:c4:92:cc:
49:f7:46:3b:48:d5:bc:8f:1b:45:6d:55:d5:95:51:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2C:4E:FD:8E:8B:8F:B5:1C:7B:2F:2F:5D:BC:B3:E4:19:C2:0F:F8
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/XSxO_Y6Lj7Ucey8vXbyz5BnCD_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:fb:c2:27:0f:8b:6c:80:c8:21:ef:a1:12:2b:61:96:4f:55:
cf:9c:4f:0a:ac:5d:7a:77:94:1d:ff:a1:65:c8:23:6a:0c:5e:
65:a6:62:a2:aa:c1:39:31:81:01:bd:e4:76:22:b8:ae:d7:0e:
db:64:8c:61:4c:0e:e4:bd:d8:45:0d:fb:d7:de:03:81:38:4f:
ff:ee:1f:45:fa:b2:74:73:ad:bd:17:de:83:9d:7a:c1:5d:ae:
54:b5:d7:3d:77:a4:35:6a:3f:2c:7a:b7:f9:eb:2f:99:de:60:
70:ce:b1:d0:26:38:47:4f:65:47:6a:18:e6:cd:6d:9d:46:1a:
fd:5c:af:14:e8:49:d1:34:58:fb:a4:1e:c8:62:a0:32:1f:ae:
f0:99:b3:03:86:d0:e2:da:eb:10:69:82:5d:de:c1:b3:22:41:
18:3f:95:8d:fe:08:a6:3d:4d:79:6a:30:51:51:58:4d:8e:80:
6b:c9:b7:68:9c:13:09:27:c7:d1:0e:f7:fc:1e:b0:3c:1e:f5:
11:66:94:f7:db:49:24:e4:79:54:dc:41:95:52:79:0a:b5:09:
7e:e2:53:d2:b4:6d:57:e7:4f:9f:80:57:7a:0c:a2:4f:c9:e5:
83:ba:89:00:af:bb:40:2d:5d:33:73:04:ca:7f:84:b3:59:53:
64:e7:78:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:26:53 2025 by rpki-client