Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/qVFoOsJoPP85mo6ZC7nOzhTzuF8.roa
File: qVFoOsJoPP85mo6ZC7nOzhTzuF8.roa (raw, json)
Hash identifier: 9LpGyXlRv46wriOkYJv9UFWYnqVDg/CEyqaeLRabxWQ=
Subject key identifier: A9:51:68:3A:C2:68:3C:FF:39:9A:8E:99:0B:B9:CE:CE:14:F3:B8:5F
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 019420687957A24909820C8A4C6FE7784B6B
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/qVFoOsJoPP85mo6ZC7nOzhTzuF8.roa
Signing time: Wed 01 Jan 2025 05:48:25 +0000
ROA not before: Wed 01 Jan 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213683
IP address blocks: 91.239.6.0/24 maxlen: 24
91.239.7.0/24 maxlen: 24
2001:67c:fd0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Jan 2025 15:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:79:57:a2:49:09:82:0c:8a:4c:6f:e7:78:4b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Jan 1 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a951683ac2683cff399a8e990bb9cece14f3b85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a8:42:56:1d:89:86:2b:3a:97:f4:29:35:3a:
07:07:ae:65:73:c7:93:39:96:b2:d8:3c:ae:1c:cb:
11:13:c3:88:14:d5:35:8f:10:26:73:02:dd:5b:65:
f8:a3:b6:8e:15:84:63:fd:d7:df:28:7b:82:d7:1f:
c3:b9:08:61:b2:9d:23:18:48:be:db:6a:79:62:7c:
b4:bc:ce:54:a2:5c:27:a5:20:af:34:fc:2f:c4:16:
fb:09:e2:15:82:11:19:70:05:84:13:e2:4b:e1:ac:
6d:ca:ba:ee:71:cf:e5:b6:c9:58:55:1a:83:1a:25:
c3:53:8a:29:41:ca:d0:70:4c:e3:54:05:fd:63:6a:
a0:7e:20:00:e5:42:16:68:5d:f3:99:a8:05:f6:13:
bc:4a:41:be:0e:49:c9:4a:4e:38:10:fc:7e:69:1e:
31:5f:7b:82:3e:01:7b:d8:13:3e:5e:85:9e:9e:0b:
75:a1:c6:fc:bf:c6:4e:66:d2:f0:51:df:68:b5:f2:
fb:c3:ba:b5:74:94:90:1b:be:c3:25:22:f9:98:5c:
5b:7a:7d:d3:ae:51:05:80:8b:35:ac:85:6c:8a:71:
44:9f:80:e9:45:41:d8:64:f8:f3:07:da:98:18:24:
91:f7:e0:9d:1a:7f:ff:b5:4c:57:f1:66:95:76:dd:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:51:68:3A:C2:68:3C:FF:39:9A:8E:99:0B:B9:CE:CE:14:F3:B8:5F
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/qVFoOsJoPP85mo6ZC7nOzhTzuF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/23
IPv6:
2001:67c:fd0::/48
Signature Algorithm: sha256WithRSAEncryption
45:6f:bd:d8:d4:64:61:8e:98:36:bd:9f:d0:7f:9e:af:54:20:
55:85:37:ee:00:6f:a5:cb:31:17:0a:3a:fc:f5:10:43:f0:92:
c1:d1:66:2d:d1:59:c8:77:03:3d:aa:e0:35:93:99:f8:b2:dd:
df:08:df:e9:57:99:32:ba:92:2d:e1:1f:95:73:51:37:89:29:
8b:6a:de:ff:07:0e:bb:56:20:3b:e7:88:21:11:af:38:44:b2:
70:8a:33:e7:32:07:81:d0:52:37:76:af:3f:40:b9:c4:c8:ac:
4a:de:2f:e2:6e:2b:07:5a:16:eb:17:15:c8:cc:6e:bf:49:9d:
2a:7b:0b:70:d4:7f:47:f1:e3:0d:26:a0:93:e2:65:27:96:e8:
22:55:09:bc:f7:73:51:16:3b:25:ef:13:3f:3f:5b:bf:0d:5c:
6d:0c:cc:d7:29:6e:89:a5:33:a2:76:84:e8:66:9a:dc:75:5d:
df:3c:4f:09:4e:a4:70:96:71:23:63:70:65:84:b9:a2:89:3a:
6f:41:e6:4b:24:a4:26:df:04:03:09:6f:76:d3:9d:6d:c2:da:
f2:e7:d5:f2:07:cc:06:f0:5a:d4:9f:f0:5e:b8:b9:02:09:04:
72:84:29:29:12:bf:3c:71:4e:a5:10:a8:9d:4f:e6:55:3c:9f:
0a:15:16:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:16:40 2025 by rpki-client