Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/nB8Hadko4kP-eH4InTHY0UUyxUo.roa
File: nB8Hadko4kP-eH4InTHY0UUyxUo.roa (raw, json)
Hash identifier: 8DRR4KdfO8CNh/rZkRJMC5CpA+QNWeUPMh0GT4bFTXI=
Subject key identifier: 9C:1F:07:69:D9:28:E2:43:FE:78:7E:08:9D:31:D8:D1:45:32:C5:4A
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 0192AE4D5646E358A630C1C51432E56504F9
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/nB8Hadko4kP-eH4InTHY0UUyxUo.roa
Signing time: Mon 21 Oct 2024 08:59:16 +0000
ROA not before: Mon 21 Oct 2024 08:59:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 91.216.155.0/24 maxlen: 24
91.217.90.0/24 maxlen: 24
193.203.50.0/23 maxlen: 23
193.203.50.0/24 maxlen: 24
193.203.51.0/24 maxlen: 24
195.211.40.0/23 maxlen: 23
2a13:f580:5::/48 maxlen: 48
2a13:f580:6::/48 maxlen: 48
2a13:f580:7::/48 maxlen: 48
2a13:f580:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Nov 2024 12:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:4d:56:46:e3:58:a6:30:c1:c5:14:32:e5:65:04:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Oct 21 08:59:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c1f0769d928e243fe787e089d31d8d14532c54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:cb:b6:bb:45:fb:e4:34:ae:33:53:8d:0a:
22:a6:fd:16:83:34:2c:71:fc:ae:52:81:2f:37:7e:
32:ad:d6:8e:dc:25:ec:c5:e7:8f:4c:51:fb:0b:f6:
73:a9:b4:50:f9:89:b2:53:b5:f5:d6:fa:53:c3:86:
88:11:4c:34:4c:47:1a:5f:af:0f:86:e3:71:54:1e:
96:98:5c:20:88:91:e2:99:58:fe:01:3c:5b:d2:32:
8a:a8:89:b7:c3:0e:76:dd:ad:fe:63:fa:67:f2:6b:
bd:8f:07:6c:2d:83:1b:ea:53:07:23:40:eb:ac:76:
a4:64:69:95:5b:f8:ef:aa:44:6c:d5:3c:bb:bf:f8:
cd:57:fb:e5:2f:45:f0:ea:33:eb:cc:b2:b1:8d:0d:
63:95:0f:a7:63:fc:4c:8e:e2:66:1c:14:17:75:fa:
64:e2:48:1a:5c:e9:37:8f:d9:28:ff:3d:b1:96:35:
13:3a:ab:6e:37:ca:a0:d3:6c:c9:1a:d0:5c:9d:a4:
e7:06:67:d2:62:e0:db:bf:e4:3c:e7:71:54:c5:50:
97:0c:7b:07:60:7f:40:07:a3:19:e4:39:a3:51:e0:
3b:79:88:be:e7:3e:6d:4c:b7:66:c6:9a:c4:60:41:
4c:49:b4:b0:08:d7:eb:ad:09:12:11:dd:02:0c:6c:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:07:69:D9:28:E2:43:FE:78:7E:08:9D:31:D8:D1:45:32:C5:4A
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/nB8Hadko4kP-eH4InTHY0UUyxUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.155.0/24
91.217.90.0/24
193.203.50.0/23
195.211.40.0/23
IPv6:
2a13:f580:5::-2a13:f580:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
30:1e:4c:3b:e3:e5:86:47:fc:db:81:bb:e6:c3:d7:91:b2:a7:
8b:57:15:d6:36:1d:16:71:ed:2c:90:ae:ed:8f:62:2d:82:ee:
65:9a:1d:0b:1c:a5:50:b4:be:1f:d4:40:cd:0e:7f:13:04:36:
98:b8:2b:c9:23:03:5a:51:d9:d2:6c:97:44:99:46:b3:bf:53:
1f:27:f0:e4:78:23:6b:f8:f6:c7:20:65:79:84:83:ef:45:11:
4d:61:c8:cf:b2:fb:d8:5a:5a:3e:e8:3a:d1:c3:51:ca:14:49:
4b:47:40:1a:b9:0b:53:4e:c4:51:33:54:94:2e:7d:61:f7:b8:
75:a7:8c:d4:5e:83:9a:b4:03:07:a3:f4:19:69:84:40:a3:dc:
ab:b9:89:70:6b:b5:96:d5:85:65:75:ba:0e:aa:ba:22:8c:af:
b8:cf:f5:1c:a8:0c:19:8e:36:c1:96:0f:45:be:c2:9d:59:f3:
53:ef:65:5f:fd:1c:28:d3:ad:99:fb:06:8e:84:ea:a3:df:16:
33:81:7d:17:70:21:62:95:96:98:de:9d:c5:3c:e7:87:b8:7d:
c9:61:df:b0:04:44:7f:99:b1:09:77:cf:22:12:bc:65:10:bb:
90:46:bc:85:b9:ec:6a:aa:db:c2:5a:e7:94:84:99:37:c8:22:
61:93:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:55 2025 by rpki-client