Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/IWQ79hQBY_jNJAI15Mz5bLI2qyo.roa
File: IWQ79hQBY_jNJAI15Mz5bLI2qyo.roa (raw, json)
Hash identifier: qmj0mTMLn6ZJ2tEs/SCGFpbEV6oLGeYyJa5aphUN2cE=
Subject key identifier: 21:64:3B:F6:14:01:63:F8:CD:24:02:35:E4:CC:F9:6C:B2:36:AB:2A
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 019218C974825E542FB6C8B62B53171B5930
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/IWQ79hQBY_jNJAI15Mz5bLI2qyo.roa
Signing time: Sun 22 Sep 2024 08:11:48 +0000
ROA not before: Sun 22 Sep 2024 08:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 91.217.90.0/24 maxlen: 24
193.203.50.0/23 maxlen: 23
193.203.50.0/24 maxlen: 24
193.203.51.0/24 maxlen: 24
195.211.40.0/23 maxlen: 23
2a13:f580:5::/48 maxlen: 48
2a13:f580:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Oct 2024 08:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:18:c9:74:82:5e:54:2f:b6:c8:b6:2b:53:17:1b:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Sep 22 08:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21643bf6140163f8cd240235e4ccf96cb236ab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:79:e8:2b:ab:dc:b9:3d:2e:a8:b5:4f:e7:
ff:5e:e6:d4:b7:b4:c1:88:ac:c3:8a:94:87:d3:81:
e6:30:c1:da:09:2a:ee:5d:ac:de:01:79:87:df:30:
5d:ac:6c:22:04:eb:b0:22:68:b1:ce:89:f4:41:f5:
b9:eb:59:39:7d:94:df:20:eb:bc:a9:50:fb:79:53:
63:1a:32:ef:1c:1b:cb:d9:d0:80:c5:b7:16:b2:87:
6b:e3:9d:88:ea:82:44:4f:a2:93:c6:36:7b:70:4d:
b8:ba:bc:51:c1:80:fd:14:f5:39:a1:74:68:7d:5b:
7b:1a:2e:ab:53:5d:ce:29:b9:68:aa:aa:4b:42:d2:
97:cb:63:a7:e5:42:03:d4:fa:ff:b0:55:f4:11:8f:
7c:cc:af:c7:6e:9e:f7:97:6c:c2:bc:c1:e5:d4:97:
36:10:b6:07:e6:db:52:0a:7e:e4:0b:93:8e:73:31:
d1:97:93:72:f0:42:79:23:1a:6e:e1:f3:c2:ac:86:
4d:74:2a:1c:b0:de:c3:fe:d5:6a:e7:0d:31:5d:2c:
11:42:10:de:bb:e6:a4:5a:eb:a2:d4:d3:13:bc:91:
41:36:f9:67:4b:8e:a6:3b:38:fc:bc:bb:d5:b7:52:
57:e8:c1:90:ef:51:b5:09:2c:26:ab:72:71:c7:5a:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:3B:F6:14:01:63:F8:CD:24:02:35:E4:CC:F9:6C:B2:36:AB:2A
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/IWQ79hQBY_jNJAI15Mz5bLI2qyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.90.0/24
193.203.50.0/23
195.211.40.0/23
IPv6:
2a13:f580:5::/48
2a13:f580:7::/48
Signature Algorithm: sha256WithRSAEncryption
38:4b:b9:7a:91:2a:93:27:89:59:17:ab:37:a0:f1:9c:17:7f:
84:63:cc:01:ab:6f:ff:f8:9c:f2:17:e4:4b:71:15:29:dc:9a:
67:f0:69:55:df:f9:29:e1:dc:83:cb:a6:6d:6f:a4:fc:c1:d0:
0d:96:a7:6b:1f:4f:2a:5d:25:77:d5:fc:24:e3:6e:5f:8a:ea:
3b:c5:c2:2c:2c:74:49:36:3b:94:c2:9e:a3:68:71:54:67:0c:
17:08:2b:61:6b:7c:c8:33:df:67:25:f3:93:4a:f8:bf:49:e9:
a0:1b:1f:79:77:7f:f9:c2:66:c5:74:20:f1:4d:58:a9:66:aa:
2f:d0:f8:37:bc:1c:ac:12:18:f6:d8:fa:ab:d8:de:e5:4b:fa:
73:8e:43:d4:b5:cb:ce:20:66:78:ca:aa:d2:a8:8e:db:c7:20:
a6:ca:0f:b6:1e:0e:3d:db:db:7d:2d:33:5a:a2:18:2a:c4:36:
d8:02:af:a6:15:68:a0:7b:2b:da:3b:46:b8:ed:87:4d:cd:0c:
89:fe:3d:d9:de:f3:fb:b4:39:01:40:5f:32:c7:ff:05:fe:07:
06:44:be:94:bd:45:31:7d:2d:cf:fa:f8:72:a7:18:d4:bd:92:
5f:64:da:47:98:b3:3c:ad:24:c9:6b:f1:36:52:80:49:04:ef:
7f:5e:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:23:44 2025 by rpki-client