Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/Xx6bwTSyK0uPxUd8iLm3Vc7NgZo.roa
File: Xx6bwTSyK0uPxUd8iLm3Vc7NgZo.roa (raw, json)
Hash identifier: mksTPfZaO0jhRpS2l3/vkTCjoJY4GRGe0qNiShuYU7Y=
Subject key identifier: 5F:1E:9B:C1:34:B2:2B:4B:8F:C5:47:7C:88:B9:B7:55:CE:CD:81:9A
Certificate issuer: /CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Certificate serial: 0191B31BDAB904D4365CF83B53F712AB1C75
Authority key identifier: 35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/Xx6bwTSyK0uPxUd8iLm3Vc7NgZo.roa
Signing time: Mon 02 Sep 2024 14:20:32 +0000
ROA not before: Mon 02 Sep 2024 14:20:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196849
IP address blocks: 91.206.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:1b:da:b9:04:d4:36:5c:f8:3b:53:f7:12:ab:1c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Validity
Not Before: Sep 2 14:20:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f1e9bc134b22b4b8fc5477c88b9b755cecd819a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:b8:66:56:17:57:c8:c5:bf:36:61:78:df:
ce:b2:79:ea:a7:e2:7a:29:a1:4d:2f:4b:5e:c4:bb:
e9:c3:6e:5f:07:c6:a6:29:84:8e:ce:ca:2a:6d:6b:
36:14:2e:b4:6e:d9:40:14:20:64:f2:e3:81:2e:c9:
0e:a2:1f:85:68:95:7d:04:3a:eb:05:9c:c8:95:ba:
3d:ec:55:30:ca:67:f6:af:9f:02:ca:4c:ce:3a:ae:
fb:e6:86:f1:f0:36:ee:2e:88:42:0a:c2:1f:4c:b6:
0d:9f:0f:3d:0c:82:4f:01:72:62:54:4a:15:a0:d5:
53:56:62:f0:50:d7:b8:f4:73:9f:45:19:0b:b8:4b:
07:8d:56:35:e9:bf:99:e7:2e:42:8c:31:cb:c6:ef:
20:b7:5f:03:ce:8e:21:6c:b8:bf:8b:be:18:be:1e:
87:71:f5:ee:66:bf:e3:09:f6:a3:69:bf:4b:a0:e0:
4b:b9:85:30:26:b0:b1:6d:28:78:42:5a:5f:5a:77:
ca:9f:a4:95:ee:ed:70:33:00:0e:8f:92:2f:8f:ec:
c1:a7:bd:09:b4:3b:cc:e1:99:5b:3c:fa:8f:fe:4e:
f6:a5:2c:f8:8d:1d:eb:4a:61:8e:df:f7:fe:83:6f:
73:1c:5b:6e:13:3e:f5:6d:f7:3b:a5:37:56:f3:37:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:9B:C1:34:B2:2B:4B:8F:C5:47:7C:88:B9:B7:55:CE:CD:81:9A
X509v3 Authority Key Identifier:
keyid:35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/Xx6bwTSyK0uPxUd8iLm3Vc7NgZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d5:87:ca:65:48:a2:ad:65:e2:84:88:08:33:14:cf:a8:e1:
d4:59:9c:69:e7:ff:5d:2d:0e:8a:7f:68:4d:7f:a3:73:d9:ac:
b5:8e:49:d8:85:7a:21:2b:90:50:7f:82:b9:63:ab:a0:77:c5:
1d:e7:d5:79:40:20:e4:dc:3f:56:3d:f6:2b:50:8e:f4:7f:63:
ed:be:d0:08:5e:e3:cb:ec:da:d9:8c:f3:5c:b6:ed:05:79:29:
c7:3e:e8:70:ad:7f:80:db:f0:d7:eb:9e:68:c2:74:db:e4:55:
55:53:54:06:6c:20:7e:1e:9c:12:06:af:26:b9:9b:a4:f5:02:
30:7b:6a:67:c4:36:ac:9a:2c:f8:7d:37:cd:99:48:2d:03:16:
94:a8:8c:34:0c:04:f3:af:70:b9:fe:80:07:99:46:b3:78:84:
66:b1:0e:dc:15:27:ec:19:d3:57:64:bf:e4:e4:45:5b:b8:9e:
9c:96:b5:bc:de:fd:71:be:06:88:09:06:17:5e:52:4b:13:95:
98:c7:26:9b:10:e1:04:ac:73:1a:63:05:f9:c9:32:31:9c:f0:
b9:ee:c1:eb:cb:59:39:e8:09:30:8d:33:b3:63:e6:6b:bc:54:
0e:2f:80:b2:99:8d:28:2d:ff:e2:10:e0:82:f1:68:73:8e:98:
b5:76:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:02 2025 by rpki-client