Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/gYwIKw-xSLHcSjWk9Y0rdVBM4Hg.roa
File: gYwIKw-xSLHcSjWk9Y0rdVBM4Hg.roa (raw, json)
Hash identifier: D/H2NTfVJPb6w7G//67beVKcW7TPtcjT3UnT0MdjXDw=
Subject key identifier: 81:8C:08:2B:0F:B1:48:B1:DC:4A:35:A4:F5:8D:2B:75:50:4C:E0:78
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01942823FEB37EBCEEBEB7E5C27F65566315
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/gYwIKw-xSLHcSjWk9Y0rdVBM4Hg.roa
Signing time: Thu 02 Jan 2025 17:50:35 +0000
ROA not before: Thu 02 Jan 2025 17:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 91.102.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:fe:b3:7e:bc:ee:be:b7:e5:c2:7f:65:56:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 17:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=818c082b0fb148b1dc4a35a4f58d2b75504ce078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:e6:e8:fd:93:c8:1a:6d:5a:0e:51:3b:2a:
9f:a4:40:2b:b5:81:ca:82:5d:f5:f0:40:4b:fe:d2:
71:e3:f5:87:5d:7c:5c:c3:f8:70:24:54:79:9f:fc:
22:c3:05:5c:3e:56:38:37:2b:33:74:8d:ef:a1:9a:
d4:0e:9a:3d:b2:f6:16:7a:a3:7e:c3:80:88:ec:5d:
40:3f:41:6d:0f:0b:cf:d5:a1:4e:a4:0b:4a:f6:fb:
63:54:4d:66:ae:e6:3f:ac:96:dd:63:ba:96:dc:12:
12:79:d8:22:11:24:b9:c4:bb:3e:de:35:c6:f6:8c:
ab:6d:d4:e8:84:18:ed:1a:a1:b4:80:b5:b9:57:f5:
cd:e1:7a:c0:4e:a9:fc:a4:95:04:78:b0:25:e4:09:
19:93:df:81:67:67:2c:7f:42:bb:66:4e:15:43:85:
99:ce:dc:0c:a2:8d:5e:46:50:de:04:04:1a:d6:c8:
c9:10:1e:a3:6c:95:c6:1f:dd:3c:7c:03:df:01:9d:
b6:cf:25:61:89:85:f1:4e:71:e4:8c:71:7b:29:d3:
e9:1f:79:81:4f:77:a9:31:ff:61:5b:37:7d:5d:66:
6b:c0:aa:18:5c:9a:02:c6:4c:b6:c8:cd:ca:ed:79:
a4:a6:8e:74:6c:97:89:ec:d0:e9:04:19:93:a5:c8:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8C:08:2B:0F:B1:48:B1:DC:4A:35:A4:F5:8D:2B:75:50:4C:E0:78
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/gYwIKw-xSLHcSjWk9Y0rdVBM4Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:42:b5:78:f7:b9:1c:60:c0:4b:44:2a:7a:f7:4f:5d:d6:cd:
cf:c4:b1:f5:96:03:5c:59:54:5a:44:5d:29:00:22:c9:00:3c:
0b:2b:6e:ce:69:83:6f:e7:0f:c6:77:87:9d:0b:cb:fb:04:67:
b2:7c:22:da:bd:96:ab:01:ea:a1:ac:d2:62:5f:09:6e:d5:c5:
a2:4d:a4:1b:4b:10:7d:46:48:b7:d1:d9:2a:e3:ef:7b:9d:46:
ea:fe:79:87:ab:70:77:96:c5:6d:ad:7b:e0:ce:92:93:4d:22:
12:90:db:7e:43:fb:7c:73:41:66:e2:1f:86:5f:65:54:fa:64:
d4:b2:d9:c0:1f:20:6d:35:02:ab:bf:78:57:43:d4:c7:dd:73:
e9:f3:c3:23:de:18:0f:85:8c:f4:89:2d:3c:42:39:f8:4e:14:
2d:6b:92:35:39:83:25:e1:27:44:42:29:84:35:7c:3c:51:28:
72:0d:e9:f5:d9:c0:9b:47:cf:60:01:97:14:50:48:72:27:20:
5b:18:ed:e8:e4:e8:75:d9:13:ea:e6:12:1f:4c:09:e1:7e:d5:
9e:a9:19:27:ec:76:c7:cf:9e:0f:44:9f:9d:33:42:68:cb:51:
08:9f:ba:bd:df:b3:77:3c:4a:2b:1d:be:22:b6:a3:1d:0d:e3:
f1:f7:39:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:16:57 2025 by rpki-client