Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/91fpYt8alRy2NwXX4pAbkr6dtmw.roa
File: 91fpYt8alRy2NwXX4pAbkr6dtmw.roa (raw, json)
Hash identifier: pmaLEgXhCj9ygCHalg3OvbT/6XkrnfEzI0InjRHLOF4=
Subject key identifier: F7:57:E9:62:DF:1A:95:1C:B6:37:05:D7:E2:90:1B:92:BE:9D:B6:6C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018ED4E69C6959CBA0073F505B60665D0562
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/91fpYt8alRy2NwXX4pAbkr6dtmw.roa
Signing time: Sat 13 Apr 2024 00:41:06 +0000
ROA not before: Sat 13 Apr 2024 00:41:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147293
IP address blocks: 37.128.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 00:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d4:e6:9c:69:59:cb:a0:07:3f:50:5b:60:66:5d:05:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 13 00:41:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f757e962df1a951cb63705d7e2901b92be9db66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:1e:e4:a7:cd:24:7b:26:5c:46:2d:a3:96:
53:b0:c6:57:04:10:db:92:1b:cb:79:fe:2e:99:2f:
0c:d3:dd:15:58:bc:37:52:52:8d:94:d6:d4:08:a9:
c5:95:16:50:f8:3c:22:39:ed:6c:8e:db:f8:78:58:
e5:cc:65:bf:c7:37:ce:25:7d:ae:0a:82:25:83:80:
57:51:42:f5:77:4b:d6:38:04:75:fe:81:ca:9b:3d:
45:d2:6f:53:f3:d9:ac:b6:b6:de:66:6d:84:18:dc:
be:c8:d2:b3:7c:c1:f7:97:fb:17:3d:28:ab:9c:b6:
02:6a:e5:d1:ad:ea:0c:02:08:80:a3:dd:a4:d6:71:
5b:6c:67:b3:22:07:61:a5:3f:bf:d6:12:8e:4d:5c:
75:39:99:8f:2e:6d:66:02:af:ed:cf:35:17:8d:08:
c1:f5:f4:57:f0:90:28:81:b4:a7:04:f3:d8:f3:4d:
da:3e:a9:2f:bc:28:51:da:45:89:69:01:80:53:1d:
05:2e:21:ca:b3:49:d4:11:bc:63:af:e9:ea:27:7e:
73:ce:5d:87:bd:bf:e9:70:62:5c:18:59:33:28:df:
2b:0a:05:c4:21:f7:2b:0b:9f:62:fb:c1:6a:b2:ec:
60:97:d0:83:16:a7:d9:77:3f:7f:d5:ef:ac:31:36:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:E9:62:DF:1A:95:1C:B6:37:05:D7:E2:90:1B:92:BE:9D:B6:6C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/91fpYt8alRy2NwXX4pAbkr6dtmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8c:37:19:d4:8a:b4:44:15:a1:e0:5c:c7:ae:2d:64:48:c1:
08:7e:2e:0c:c2:ab:e8:3c:9e:fb:f7:08:a0:f9:bc:46:b9:be:
b8:82:4d:5e:4c:92:23:18:b4:54:f7:28:28:96:50:07:99:52:
a4:6b:35:7b:14:8b:2b:d4:5f:64:51:1a:83:a1:12:ba:09:45:
86:c1:d1:3a:08:d6:0f:81:8c:58:38:db:9f:f5:00:e7:0a:e8:
eb:e5:44:27:ff:24:6d:5a:db:e4:74:97:9f:4b:ad:3b:00:53:
4c:76:85:3d:09:50:d6:51:6c:9d:3e:3c:ae:4e:8f:dc:65:34:
6a:95:a3:68:c0:b7:c6:d7:04:aa:7e:93:99:f3:5a:f7:9a:80:
22:32:15:f6:80:4e:74:b7:58:7c:c4:8a:83:5f:70:a8:88:ee:
40:52:e8:46:80:a8:24:ec:60:16:e7:82:28:9b:d7:dc:c7:e6:
c6:34:c7:9c:41:4a:2a:40:86:08:50:31:78:c5:6b:1f:6e:5f:
e7:2d:c0:92:8a:98:77:c1:bf:5c:89:52:cd:50:fc:ca:5e:85:
39:29:66:c4:19:a6:9a:21:a8:6d:d2:ad:2f:82:67:25:0c:85:
02:94:0b:11:0c:53:cf:b5:06:b3:91:c6:fa:fe:3a:18:25:4e:
ec:81:ba:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7U5pxpWcugBz9QW2BmXQViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjQwNDEzMDA0MTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzU3ZTk2MmRmMWE5NTFjYjYzNzA1ZDdlMjkwMWI5MmJlOWRiNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnAe5KfNJHsmXEYto5ZTsMZXBBDb
khvLef4umS8M090VWLw3UlKNlNbUCKnFlRZQ+DwiOe1sjtv4eFjlzGW/xzfOJX2u
CoIlg4BXUUL1d0vWOAR1/oHKmz1F0m9T89mstrbeZm2EGNy+yNKzfMH3l/sXPSir
nLYCauXRreoMAgiAo92k1nFbbGezIgdhpT+/1hKOTVx1OZmPLm1mAq/tzzUXjQjB
9fRX8JAogbSnBPPY803aPqkvvChR2kWJaQGAUx0FLiHKs0nUEbxjr+nqJ35zzl2H
vb/pcGJcGFkzKN8rCgXEIfcrC59i+8Fqsuxgl9CDFqfZdz9/1e+sMTayEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdX6WLfGpUctjcF1+KQG5K+nbZsMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvOTFmcFl0OGFsUnkyTndYWDRwQWJrcjZkdG13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYD+MA0G
CSqGSIb3DQEBCwUAA4IBAQCljDcZ1Iq0RBWh4FzHri1kSMEIfi4MwqvoPJ779wig
+bxGub64gk1eTJIjGLRU9ygollAHmVKkazV7FIsr1F9kURqDoRK6CUWGwdE6CNYP
gYxYONuf9QDnCujr5UQn/yRtWtvkdJefS607AFNMdoU9CVDWUWydPjyuTo/cZTRq
laNowLfG1wSqfpOZ81r3moAiMhX2gE50t1h8xIqDX3CoiO5AUuhGgKgk7GAW54Io
m9fcx+bGNMecQUoqQIYIUDF4xWsfbl/nLcCSiph3wb9ciVLNUPzKXoU5KWbEGaaa
Iaht0q0vgmclDIUClAsRDFPPtQazkcb6/joYJU7sgbpk
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:23 2025 by rpki-client