Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/KwspaK6uE9zgJwbWhfHtJCWXVYQ.roa
File: KwspaK6uE9zgJwbWhfHtJCWXVYQ.roa (raw, json)
Hash identifier: ZHwQngWIHP2IL+NRGZY84fWW0VeNucF9izGN7U1gAcU=
Subject key identifier: 2B:0B:29:68:AE:AE:13:DC:E0:27:06:D6:85:F1:ED:24:25:97:55:84
Certificate issuer: /CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
Certificate serial: 018CC94D26DF026A88A927AA2A4591FFFF31
Authority key identifier: 55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/KwspaK6uE9zgJwbWhfHtJCWXVYQ.roa
Signing time: Tue 02 Jan 2024 08:32:05 +0000
ROA not before: Tue 02 Jan 2024 08:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49270
IP address blocks: 91.212.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:26:df:02:6a:88:a9:27:aa:2a:45:91:ff:ff:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
Validity
Not Before: Jan 2 08:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b0b2968aeae13dce02706d685f1ed2425975584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:59:cb:db:e6:2d:c4:48:4d:4d:51:ba:91:
3f:63:12:c5:14:ae:46:8e:76:e1:90:25:d6:e1:f8:
99:87:71:e2:3f:a5:0b:38:b7:6f:64:81:e1:02:3b:
ac:2d:08:f6:83:c0:4a:cd:32:ff:c7:6b:e9:bb:3f:
90:1e:c3:ea:50:05:f0:ac:ef:30:29:f1:7a:1d:97:
1e:f1:b0:09:9a:0f:a0:86:4d:5a:eb:d6:be:8e:f0:
2f:a4:8e:ae:cf:dd:ef:26:a8:b5:94:97:a9:4b:4e:
38:93:97:bc:fb:a0:ae:d4:6f:98:fd:07:b6:1e:f7:
ce:b8:f6:ad:1d:ef:8e:fd:ed:57:b7:6c:96:e7:fa:
d7:73:cf:29:b1:a8:55:2d:b8:30:50:45:7c:4f:9a:
4f:46:68:f0:f8:40:da:f5:b2:56:58:94:32:d3:d2:
a8:82:c1:7d:b6:bd:a5:56:99:a7:44:94:5c:dc:f2:
50:32:8f:ee:78:d9:e4:1a:f7:a0:49:a3:40:05:97:
fd:83:3d:01:2f:f2:9c:f9:1a:77:71:75:cc:b0:ae:
19:9a:73:d5:a4:e9:e7:da:97:41:be:92:df:ef:3e:
67:b3:2a:61:c4:24:b3:4e:42:7f:4b:7b:c0:7a:4c:
32:9e:a9:a9:dc:23:84:06:1c:f6:2c:ca:62:0a:1d:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0B:29:68:AE:AE:13:DC:E0:27:06:D6:85:F1:ED:24:25:97:55:84
X509v3 Authority Key Identifier:
keyid:55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/KwspaK6uE9zgJwbWhfHtJCWXVYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:45:db:8c:97:9a:b2:b3:9c:a1:54:d2:c3:54:c2:ad:58:08:
0f:91:f4:b1:a8:02:78:dd:07:30:3a:77:3b:1a:51:be:fb:89:
6c:e4:50:71:f3:c1:28:6e:02:fb:27:04:0b:73:76:8c:db:80:
81:36:8e:05:63:7a:51:73:74:98:9c:7b:e7:43:25:a6:d0:90:
e2:47:a2:81:78:7d:d0:5b:50:d4:cf:bb:d0:80:72:45:5e:62:
bb:1e:78:42:50:d1:54:f9:ba:59:f8:c4:4f:da:e9:e4:0d:5c:
02:11:b8:24:ee:c7:c5:0b:b6:36:be:87:74:74:50:39:18:1a:
6a:b4:5c:46:48:a8:d0:0d:a5:81:67:f7:66:14:9c:e1:58:f6:
ff:ec:70:b3:98:b8:80:3b:54:be:4c:ba:87:1a:41:04:75:0b:
43:b2:3c:97:49:b7:9e:c6:a9:83:32:52:5b:b0:be:87:35:5d:
d2:12:fe:5e:f7:1d:1f:54:85:ad:39:cb:10:47:64:77:82:c8:
1d:10:72:d4:cc:4b:5d:13:20:25:97:fe:f0:b0:93:80:a2:00:
21:13:ca:18:8f:23:0f:e4:eb:f4:7e:ff:d5:38:4e:e9:9f:1d:
cf:5e:94:08:c7:9a:89:aa:29:35:b6:05:48:6e:ef:33:47:45:
5b:0f:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:52:55 2025 by rpki-client