Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/B552PN5ppD-w4iyQXfS5FdXlj3I.roa
File: B552PN5ppD-w4iyQXfS5FdXlj3I.roa (raw, json)
Hash identifier: QfHWD32NoMCtxiqntJtSfRvuGbqoWPSGDeylf0oo6sw=
Subject key identifier: 07:9E:76:3C:DE:69:A4:3F:B0:E2:2C:90:5D:F4:B9:15:D5:E5:8F:72
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 018CC3488CE87F23B46B8B44EEA5E523484D
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/B552PN5ppD-w4iyQXfS5FdXlj3I.roa
Signing time: Mon 01 Jan 2024 04:29:20 +0000
ROA not before: Mon 01 Jan 2024 04:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60893
IP address blocks: 91.132.240.0/22 maxlen: 24
91.132.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8c:e8:7f:23:b4:6b:8b:44:ee:a5:e5:23:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=079e763cde69a43fb0e22c905df4b915d5e58f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:60:9b:b3:76:32:3e:49:e6:6f:57:7a:b0:
46:93:40:b1:8d:44:f6:20:0b:b0:14:d4:24:e6:ff:
f3:33:a8:a1:28:6e:68:f4:b4:33:77:86:f8:9c:50:
6d:de:d5:29:10:b5:a7:0a:13:f0:e1:39:c7:ea:c5:
d0:bd:5d:3f:b5:10:ae:42:3c:48:77:b8:25:3a:b9:
e2:29:bf:0f:0f:77:08:a0:ae:10:a1:94:f5:60:e0:
06:49:1e:2a:19:2f:7a:6c:ff:64:8d:b9:78:f7:0e:
0d:e2:ef:db:2d:d8:94:08:62:03:84:4a:48:de:32:
b1:03:6f:ef:13:99:2d:cf:2d:f7:3d:34:a6:0c:e0:
1f:a9:d8:dd:cd:a4:22:71:b5:2e:8b:83:49:5f:9f:
07:79:59:35:6d:1e:23:c0:f9:f1:ec:e6:4b:72:8b:
96:6f:12:83:dd:95:1a:2a:ba:8b:9c:47:1d:5b:48:
6b:07:c4:05:d2:cc:b0:63:30:ea:ff:e4:d9:09:1e:
bf:e1:e2:40:f4:38:6e:1d:01:2c:cb:52:98:d6:45:
b1:99:15:f1:4a:58:aa:a8:4d:38:96:fb:ed:7c:ba:
83:3a:3f:fa:2a:97:88:bc:d9:78:f7:fb:66:f1:65:
7e:76:d1:fc:79:42:54:b9:1e:57:20:04:00:f3:2d:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9E:76:3C:DE:69:A4:3F:B0:E2:2C:90:5D:F4:B9:15:D5:E5:8F:72
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/B552PN5ppD-w4iyQXfS5FdXlj3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.240.0/22
Signature Algorithm: sha256WithRSAEncryption
19:f8:f6:c7:33:6b:14:39:42:01:79:b1:51:73:2c:ef:5e:2d:
8d:6e:d1:22:b8:67:05:24:c4:1a:37:a7:cc:2d:0e:fd:ff:58:
5e:98:f1:ca:f3:0d:6c:f8:47:ec:15:ae:3b:66:52:fe:8e:58:
72:86:b4:d8:fd:92:db:0a:c2:15:27:26:3b:84:24:4a:41:d4:
83:f2:90:40:9f:cb:05:9a:0f:58:64:1c:8e:13:23:af:c2:7e:
a0:24:e8:aa:78:5c:17:c2:44:d9:b1:32:77:8e:3e:ac:c1:d0:
06:b6:c1:5f:75:7d:85:f8:fd:c5:75:46:08:7c:f1:b4:67:31:
a5:14:f4:22:1a:21:f5:25:5f:e0:82:6a:82:5a:c9:b2:1e:97:
40:d9:d8:04:b6:4a:9e:45:4d:03:01:6b:15:07:69:20:2e:e5:
9e:96:fd:8d:cc:08:ef:6c:5b:df:95:02:7c:d6:af:db:bd:87:
f0:18:65:8b:ce:4e:c7:a5:cb:01:ec:ac:d0:09:25:cc:f3:ad:
62:3b:94:5d:bc:bf:33:f7:c4:e4:5f:b0:1e:be:f1:d6:fa:64:
e9:59:86:28:af:92:07:30:be:45:38:23:59:3f:b1:0a:6d:08:
a9:a9:8d:26:ba:6f:d4:5d:40:2c:1f:82:35:f7:3f:42:c4:82:
1a:f1:d0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:07 2025 by rpki-client