Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/_pTVSU5ZlkXOW1ahzsUYHtigt9c.roa
File: _pTVSU5ZlkXOW1ahzsUYHtigt9c.roa (raw, json)
Hash identifier: mJ0vbgJVZge4EC7OR7UiXwdygVA/fAGb+DfbDZKe+aI=
Subject key identifier: FE:94:D5:49:4E:59:96:45:CE:5B:56:A1:CE:C5:18:1E:D8:A0:B7:D7
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018CC6B88EA9B86AB6747EE49DA54A677118
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/_pTVSU5ZlkXOW1ahzsUYHtigt9c.roa
Signing time: Mon 01 Jan 2024 20:30:33 +0000
ROA not before: Mon 01 Jan 2024 20:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35631
IP address blocks: 91.215.252.0/23 maxlen: 23
91.215.254.0/24 maxlen: 24
91.215.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:8e:a9:b8:6a:b6:74:7e:e4:9d:a5:4a:67:71:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 20:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe94d5494e599645ce5b56a1cec5181ed8a0b7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:02:9e:44:5c:ba:09:56:70:22:10:b6:08:
fd:55:a8:0c:34:16:e1:36:b2:7d:20:2e:1c:1d:4b:
be:0a:4a:73:c4:e5:d7:83:cd:16:44:a8:e0:18:8d:
44:e5:74:05:4e:ce:f6:ec:b9:9b:15:11:92:11:c9:
7f:4b:dd:97:6b:ad:67:c7:05:53:36:7c:6b:5b:09:
24:24:40:2c:c3:3a:d1:aa:ee:5a:ef:78:86:70:2e:
43:96:89:58:cd:65:a8:30:93:36:ce:59:ca:f2:79:
78:c7:92:7e:0b:7d:3b:c2:0f:00:4c:5f:3e:89:db:
5f:21:f2:f7:e2:4a:63:64:22:3e:70:5d:68:d4:f8:
bb:c5:8a:32:43:26:d0:1b:14:26:17:42:0e:e5:ab:
9c:a7:0d:87:67:f6:8e:c2:0c:33:13:e9:91:2f:21:
e6:cf:2a:59:73:73:a5:67:77:6c:09:1d:ef:e2:83:
25:a5:d8:4f:a9:a9:0e:a1:55:b1:46:48:c1:8c:28:
ba:12:0a:65:6e:14:6f:f2:cd:40:8d:15:0b:91:28:
64:5d:4e:21:a9:54:4b:00:0e:43:15:96:00:00:e8:
5e:b5:df:86:22:e0:39:e6:64:f5:93:4a:51:57:eb:
f6:e5:14:f3:e1:c1:34:8b:d6:04:eb:e6:ea:06:95:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:D5:49:4E:59:96:45:CE:5B:56:A1:CE:C5:18:1E:D8:A0:B7:D7
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/_pTVSU5ZlkXOW1ahzsUYHtigt9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.252.0/22
Signature Algorithm: sha256WithRSAEncryption
97:ce:50:c5:b8:82:04:72:99:bc:12:f9:58:9d:c7:9c:82:e6:
ab:65:83:b9:48:71:95:21:69:22:82:3f:a6:eb:5d:01:17:98:
84:dd:51:49:1e:d4:8b:68:bb:89:d2:f1:9d:ac:38:79:a0:af:
47:e6:82:bc:7d:a1:f8:fd:ea:ee:b8:38:5e:46:0d:fe:a7:e2:
d3:87:08:57:c3:51:c0:fa:b3:1a:f3:ae:7e:31:6d:b4:60:f9:
3e:8c:d2:32:0c:f5:15:81:cc:72:48:69:bb:da:25:2a:73:5c:
6b:f6:63:9b:a3:76:c2:23:d7:3b:d8:a8:ce:3f:0f:e7:ac:e7:
a7:c7:ff:ef:a7:90:78:8b:63:10:6d:19:fd:19:58:82:ea:22:
56:e8:0f:ef:31:ce:ea:00:0f:53:af:8b:ab:8f:f0:bf:c8:65:
25:2f:c0:ca:21:ce:60:1c:6f:aa:2c:ca:41:d3:0a:51:dd:e3:
f8:91:8b:6c:ce:f7:66:21:b9:ab:48:e5:6a:15:f0:82:b4:12:
26:c7:85:1a:c8:ff:c2:01:f5:6d:4b:41:cd:ae:b8:49:09:89:
30:9a:18:dc:16:26:89:33:fb:2d:b7:1c:83:41:8a:bf:b8:b2:
e7:14:e8:e3:4c:af:4e:73:a6:72:25:73:7e:5f:f6:07:0c:dc:
f3:9e:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:59 2025 by rpki-client