Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/egVarJnJqLyNuHw_59z1i1EUTHo.roa
File: egVarJnJqLyNuHw_59z1i1EUTHo.roa (raw, json)
Hash identifier: XclzzPJFUA1rhn4KYvAOoqvmiqy7z1xXExMmPV7Txiw=
Subject key identifier: 7A:05:5A:AC:99:C9:A8:BC:8D:B8:7C:3F:E7:DC:F5:8B:51:14:4C:7A
Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial: 018CC72597272A54DFB6521B256AC91DCEDB
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/egVarJnJqLyNuHw_59z1i1EUTHo.roa
Signing time: Mon 01 Jan 2024 22:29:38 +0000
ROA not before: Mon 01 Jan 2024 22:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208664
IP address blocks: 91.207.8.0/24 maxlen: 24
91.201.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:97:27:2a:54:df:b6:52:1b:25:6a:c9:1d:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Validity
Not Before: Jan 1 22:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a055aac99c9a8bc8db87c3fe7dcf58b51144c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:b6:d4:c3:34:f5:cb:30:78:3b:c4:23:0f:
b0:d7:b8:8f:0e:f3:c3:98:14:dc:3e:fa:c7:82:b4:
32:11:6d:2b:88:53:4e:66:aa:9e:9f:7c:b6:da:0c:
38:2d:77:12:cb:47:71:48:2c:02:d8:73:06:ed:6f:
1d:45:f9:e6:e9:18:4c:85:4b:fe:69:9d:0c:3a:01:
82:ae:ff:83:26:4c:58:60:84:de:2d:28:f1:23:dd:
27:0d:d3:7f:ae:26:74:39:b9:27:15:eb:34:92:5b:
61:89:a1:e9:dc:a2:0f:05:35:c7:7e:20:29:d5:ab:
8a:62:a7:4d:b0:f8:2f:02:42:cc:4a:5d:9f:fe:55:
a5:8b:6c:bc:5d:a2:d7:40:75:77:e8:33:41:bf:14:
18:23:62:e9:d0:18:c1:ad:79:f2:97:92:82:4b:cd:
f2:5a:9d:f5:d3:d7:c1:02:f9:48:1d:af:ae:ea:4c:
db:94:e4:b8:6c:46:57:e5:9b:c6:31:00:6c:bb:0d:
6a:83:04:51:a7:fe:de:a5:b4:cd:23:fd:14:40:98:
b9:2a:95:66:35:a0:2c:91:6f:62:76:aa:14:b1:d8:
78:a4:5e:2e:7f:be:22:b8:95:69:78:b8:9b:23:29:
de:db:14:1d:44:42:89:a7:a1:89:61:68:42:0f:fb:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:5A:AC:99:C9:A8:BC:8D:B8:7C:3F:E7:DC:F5:8B:51:14:4C:7A
X509v3 Authority Key Identifier:
keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/egVarJnJqLyNuHw_59z1i1EUTHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.10.0/24
91.207.8.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ee:cf:7e:76:6f:a4:cb:e2:98:d3:10:db:f0:95:04:0f:5f:
0b:2e:be:46:01:38:4d:f6:32:ad:16:6f:39:0b:48:4d:ed:fe:
16:1f:b2:d2:d4:29:ea:9b:81:c7:ea:6c:ad:fe:1d:a2:06:45:
c9:8e:0d:27:a1:d2:04:e7:07:ef:f1:79:d4:ad:fb:90:d0:c1:
4b:1e:ef:8b:77:26:70:0b:7a:23:48:25:2c:8c:b1:32:98:5e:
47:da:d4:fd:68:0a:96:27:a1:7f:b3:e5:8d:67:3b:49:1e:e3:
c9:b2:60:1e:3a:51:99:f3:5a:a8:7b:e5:13:75:0a:91:bf:ef:
82:72:82:f1:63:97:08:43:af:40:17:4a:87:d7:78:57:17:9a:
36:b8:93:ae:44:6b:ff:32:c3:4b:2b:ab:14:6a:af:bd:2b:5f:
34:60:11:15:40:c7:2c:e5:73:63:6f:1f:b2:08:a2:97:92:e5:
71:f3:12:72:6f:15:e9:5f:68:70:df:a1:4f:65:45:4b:a1:81:
c2:e7:d3:f0:2e:90:b7:6e:d0:78:17:1a:c8:8d:29:4c:97:7f:
62:17:4c:14:a2:83:da:71:ce:73:f8:90:d6:f9:f1:33:fc:39:
bc:cc:c1:31:19:39:6b:78:87:27:d8:77:4d:58:4b:f1:d3:a6:
d0:3d:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:41 2025 by rpki-client