Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/1-lL6QXGc-uOidXzDY6P4Tw54bWw.roa
File: 1-lL6QXGc-uOidXzDY6P4Tw54bWw.roa (raw, json)
Hash identifier: uz7TIXANgh/vfj8SnWNASbWsC/Jz4Oih2bbr0GWilRM=
Subject key identifier: FA:52:FA:41:71:9C:FA:E3:A2:75:7C:C3:63:A3:F8:4F:0E:78:6D:6C
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 0193D45CA8FCB47925C9A97E910E3B58BEF5
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/1-lL6QXGc-uOidXzDY6P4Tw54bWw.roa
Signing time: Tue 17 Dec 2024 11:24:22 +0000
ROA not before: Tue 17 Dec 2024 11:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197968
IP address blocks: 91.147.108.0/24 maxlen: 24
91.147.109.0/24 maxlen: 24
212.108.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:5c:a8:fc:b4:79:25:c9:a9:7e:91:0e:3b:58:be:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Dec 17 11:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa52fa41719cfae3a2757cc363a3f84f0e786d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:f2:e6:66:66:a0:19:8c:f9:e0:a0:48:2c:
d7:bd:79:c1:1f:d6:cc:06:e1:02:44:79:ac:62:14:
28:fe:ec:ac:43:f8:37:a4:b8:3d:13:01:55:d0:14:
c6:ff:cf:6c:dc:18:13:b0:d5:83:c8:df:e4:bf:82:
54:5c:80:8f:b6:2b:e5:67:4f:b0:eb:b9:d3:15:ed:
30:0c:14:3d:1e:35:6e:23:67:d3:cb:3c:8a:15:66:
4c:f9:22:9b:71:7d:c8:ce:3a:b0:20:c4:16:43:fd:
26:c8:25:f4:b2:e6:13:77:4a:a6:5f:fe:44:a8:f5:
e6:cb:39:75:e9:52:3a:5c:8d:51:28:dc:96:43:d1:
ae:57:8a:6b:39:da:dd:7e:3d:08:8f:a1:30:28:bd:
7f:28:78:f9:88:6d:0a:15:ec:29:5f:7f:86:4e:1b:
35:ab:49:fe:f9:54:fe:e1:39:e8:28:66:81:e5:e6:
70:ce:6f:d6:e4:44:a5:6f:02:d0:53:25:b1:88:1c:
27:13:22:04:2c:8a:ce:67:02:7e:d6:bb:b8:63:22:
a7:0d:46:dc:6f:1f:f6:4d:54:34:da:5d:c7:85:43:
01:fc:61:a3:41:fd:1c:3c:df:ed:4f:99:a7:ef:b6:
51:eb:30:d8:8f:5b:22:3c:c7:30:67:1f:c4:b8:96:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:FA:41:71:9C:FA:E3:A2:75:7C:C3:63:A3:F8:4F:0E:78:6D:6C
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/1-lL6QXGc-uOidXzDY6P4Tw54bWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.108.0/23
212.108.86.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:a3:a1:9d:9b:ca:97:57:5f:c5:c0:ad:a0:c9:bf:8e:bd:b1:
bc:66:d3:be:21:60:af:99:79:72:02:c5:f5:14:0d:2f:5a:e5:
ff:05:d8:2f:e4:35:b1:ec:91:a9:cc:36:7e:d5:c7:13:d3:9d:
c0:14:4c:91:f6:91:db:bc:bb:92:8b:ba:5f:25:07:dc:94:59:
1d:40:d9:35:88:23:35:18:20:19:28:43:b2:34:15:df:7d:68:
5e:a6:b1:57:d4:c5:fe:77:a3:60:3a:d8:58:ff:ad:6e:7c:68:
8a:7d:20:3f:f7:a3:7d:a3:4a:82:99:71:db:ac:1c:d5:dd:82:
15:b5:5c:db:dc:1c:14:bc:3c:1c:83:65:86:08:46:34:ba:4e:
55:49:2c:de:3f:a5:48:4c:8d:0c:7f:32:a3:e0:24:31:2d:36:
77:ed:f9:0e:10:c6:ab:d9:89:d9:68:76:b0:6c:80:32:f2:2f:
d6:e3:91:8d:60:b4:5d:6e:f2:ff:d9:94:2c:3d:f6:5b:b9:30:
76:b7:7d:c1:f4:4d:07:7f:28:bf:f9:dc:7f:fb:69:35:f5:b8:
ba:25:7f:f2:27:18:33:2b:10:6e:ce:ac:fd:09:42:07:b4:b3:
82:03:e1:fe:46:58:7e:d5:aa:6f:38:d6:8c:fd:b6:71:ec:6c:
80:b1:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:57 2025 by rpki-client