Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/vYSsCVDbtSPSep7vvRVhCaMGiew.roa
File: vYSsCVDbtSPSep7vvRVhCaMGiew.roa (raw, json)
Hash identifier: pAAqsYjc1/JRfJPkWSVN9HDuxfix/7/FycBLQwCQOyk=
Subject key identifier: BD:84:AC:09:50:DB:B5:23:D2:7A:9E:EF:BD:15:61:09:A3:06:89:EC
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 018CC42476B983FFA116E6B9A4CB327CE1A5
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/vYSsCVDbtSPSep7vvRVhCaMGiew.roa
Signing time: Mon 01 Jan 2024 08:29:33 +0000
ROA not before: Mon 01 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25145
IP address blocks: 91.241.51.0/24 maxlen: 24
91.241.48.0/24 maxlen: 24
2a0c:8dc5::/32 maxlen: 32
2a0c:8dc7::/32 maxlen: 32
2a0c:8dc4::/32 maxlen: 32
2a00:7540::/29 maxlen: 29
2a0c:8dc0::/30 maxlen: 30
Validation: Failed, certificate revoked on Fri 05 Apr 2024 23:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:76:b9:83:ff:a1:16:e6:b9:a4:cb:32:7c:e1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd84ac0950dbb523d27a9eefbd156109a30689ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:37:1f:6c:b1:bb:81:2d:e5:df:75:86:94:
6f:0e:1f:0c:57:56:67:20:9d:0a:6b:3f:6a:bb:71:
b0:14:44:77:62:e2:b0:4c:f3:86:65:b1:0e:af:46:
fa:21:49:a9:d9:81:2d:3c:4f:fe:4c:80:17:e1:3b:
e1:3e:85:3a:11:eb:16:bd:47:cb:9d:ca:8e:6c:a2:
7a:d0:89:8b:48:db:2d:aa:f2:3d:b4:52:03:79:d1:
0b:34:ac:2d:c4:50:d2:10:03:8c:2c:c5:0c:39:e4:
a3:09:e0:97:3c:60:b2:b4:f1:ba:a4:a2:64:f8:ad:
bf:4f:a6:80:15:37:1a:b6:7a:8a:da:37:cc:f4:bf:
87:90:e5:26:4c:ea:a0:61:e2:4c:c4:2b:a4:c9:f3:
d6:82:19:12:08:3d:56:8e:78:1e:d9:29:79:89:cb:
c9:24:86:26:51:1e:89:0e:3b:d5:33:b4:e3:0b:33:
8a:86:c6:c3:ac:61:4c:05:ea:ee:b9:26:04:84:0e:
57:b1:20:2d:bb:4c:09:1e:8a:db:42:64:2a:6c:29:
0d:9a:27:a1:3e:55:d4:36:c3:70:5f:1c:50:1c:39:
89:b3:c6:62:9e:a1:b7:d5:65:26:60:93:97:7e:6e:
81:5b:ef:d3:a8:a5:92:6a:96:28:ce:77:62:21:8f:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:AC:09:50:DB:B5:23:D2:7A:9E:EF:BD:15:61:09:A3:06:89:EC
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/vYSsCVDbtSPSep7vvRVhCaMGiew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.48.0/24
91.241.51.0/24
IPv6:
2a00:7540::/29
2a0c:8dc0::-2a0c:8dc5:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:8dc7::/32
Signature Algorithm: sha256WithRSAEncryption
4c:41:45:23:9f:8f:b9:4e:f0:a6:b6:d4:d9:a5:ba:ba:3c:86:
07:65:e0:fa:29:05:22:92:53:52:77:e0:84:37:c8:73:78:c1:
50:21:51:de:ca:e1:ab:d9:0a:8c:1c:15:ca:0b:eb:b8:dc:42:
df:2f:60:07:4e:04:bd:86:9e:52:57:31:94:85:ee:4c:ea:d8:
ef:94:d2:72:69:5f:c4:24:68:bc:64:66:ae:a0:4f:dc:0c:4f:
8f:f3:3f:8e:48:ab:38:67:2f:d5:cd:55:00:e0:60:f2:7a:30:
db:ec:6d:f4:e6:a5:13:61:c6:67:80:69:7c:07:4e:5e:8d:16:
fe:92:78:18:13:06:06:56:17:1f:b7:b6:02:20:e0:0b:8c:f3:
09:bc:a6:ee:10:32:13:b1:77:c3:54:79:10:ed:7b:9a:fd:00:
fb:4e:d7:42:19:8f:ac:1f:bb:0f:de:0f:a9:b2:0d:e8:7d:f1:
b5:68:8b:2a:b8:c7:27:6e:ac:2d:97:62:67:c4:e2:9f:36:d3:
bf:5d:5d:d8:ad:1c:cc:48:02:b0:17:81:d8:d2:ae:0b:eb:7c:
35:9b:c2:fc:0d:af:5d:d9:1b:13:a2:3a:f0:f3:49:2d:f9:b6:
bf:e8:23:2f:fc:73:08:4f:4b:a3:12:ec:e3:ad:87:90:70:f0:
f9:1c:86:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:10 2025 by rpki-client