Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/y9tyRqOLLUT_DwpRxJU4rfsUofc.roa
File: y9tyRqOLLUT_DwpRxJU4rfsUofc.roa (raw, json)
Hash identifier: QxAA9PJgP+N/IOUyh3aZtr9O/6xAdcLGq1DAdJPGn6g=
Subject key identifier: CB:DB:72:46:A3:8B:2D:44:FF:0F:0A:51:C4:95:38:AD:FB:14:A1:F7
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 018CC9BBBE6E3B8830E52C1264F4AEDA9252
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/y9tyRqOLLUT_DwpRxJU4rfsUofc.roa
Signing time: Tue 02 Jan 2024 10:32:53 +0000
ROA not before: Tue 02 Jan 2024 10:32:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 91.103.240.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:be:6e:3b:88:30:e5:2c:12:64:f4:ae:da:92:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jan 2 10:32:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbdb7246a38b2d44ff0f0a51c49538adfb14a1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:df:b0:e3:fb:36:35:da:5c:8b:3c:c8:3a:
84:33:5d:8e:fa:a4:f9:fa:58:2a:1b:4b:ca:67:92:
ea:a6:36:16:b3:73:1c:81:7c:b1:08:2e:96:08:26:
39:ee:8e:c5:28:b6:76:ae:11:4b:85:0d:20:58:28:
9c:dd:63:b6:cc:e9:0a:78:c5:1c:45:9d:87:e4:7c:
b7:e0:ac:4b:83:42:93:7d:14:f3:51:b8:08:0d:94:
61:db:0b:61:89:d9:38:5d:83:7d:f8:dd:24:f6:ff:
ef:ca:50:cf:5f:28:ef:f2:d4:2b:47:04:15:bd:10:
2e:bd:33:4d:87:15:44:60:7f:05:47:59:58:2a:25:
4f:78:c5:03:dc:78:99:71:bc:c0:5a:57:29:6a:45:
80:29:04:21:9d:aa:da:c3:e4:67:95:f0:6a:af:95:
3e:bd:d5:27:d3:d5:27:c6:64:2f:20:d8:46:c6:92:
b8:b3:4a:fd:22:68:65:f9:4f:20:eb:f9:e7:ca:59:
69:7f:1c:d7:91:5e:e4:5a:50:0a:02:e6:4c:ab:bc:
44:06:52:ae:df:00:14:d7:3d:4a:24:7f:76:6c:d8:
4a:b3:88:73:84:ab:ba:f3:4d:01:e1:d3:e7:11:b7:
fc:4e:ca:2a:83:ff:ee:a8:76:5b:8c:6c:18:ac:44:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DB:72:46:A3:8B:2D:44:FF:0F:0A:51:C4:95:38:AD:FB:14:A1:F7
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/y9tyRqOLLUT_DwpRxJU4rfsUofc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.240.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:82:be:51:3e:0d:9a:2b:7a:76:15:95:cf:cf:ed:5e:a7:ae:
aa:be:4e:7f:d8:e9:e1:6f:58:48:2f:7a:fe:f2:a1:3c:cf:2b:
1f:f4:42:81:ce:82:09:aa:4f:88:ef:b1:6e:73:31:68:4e:ae:
a2:a5:3f:85:9e:f4:a4:1e:c6:a9:8e:66:b3:90:ee:e3:73:96:
c7:66:0a:64:49:aa:3b:ee:d6:3a:51:8f:c7:95:fd:58:54:f9:
d4:de:79:20:0c:42:32:14:8d:99:f4:30:ab:e7:8b:95:fa:75:
3d:cf:f0:44:01:f9:b9:01:d1:8f:ea:e8:a5:12:64:a6:e6:38:
bc:1c:44:97:17:1e:97:c8:bf:13:15:cc:c9:cd:e4:54:ab:2c:
7c:d1:a5:5e:3d:44:ff:de:1f:a8:bd:e0:24:ce:13:24:17:06:
45:bf:e8:7c:87:6b:e7:13:83:1e:32:02:ff:4a:4c:9c:0b:01:
19:7b:b3:93:b3:90:1a:bb:e7:8e:ac:48:d8:0d:93:c8:ea:a3:
90:18:46:47:53:c2:52:41:3d:15:70:ee:84:4c:8e:d2:be:0e:
09:ca:e3:96:da:ae:3d:21:7e:70:87:f1:ab:d1:ee:de:16:40:
dd:36:73:f7:88:2d:db:a2:c3:e4:da:f2:17:38:11:b7:b1:ca:
7a:e4:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:39 2025 by rpki-client