Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/c6jmPxm6QNo7BT0i7_LRupo9C-U.roa
File: c6jmPxm6QNo7BT0i7_LRupo9C-U.roa (raw, json)
Hash identifier: 4i6Qq9Xs0mMF9rLEDQxasHhaWU6AsnktyD8wJFZZeFo=
Subject key identifier: 73:A8:E6:3F:19:BA:40:DA:3B:05:3D:22:EF:F2:D1:BA:9A:3D:0B:E5
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 018CC56EE765B11FBFABD729F92D907F6EDA
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/c6jmPxm6QNo7BT0i7_LRupo9C-U.roa
Signing time: Mon 01 Jan 2024 14:30:28 +0000
ROA not before: Mon 01 Jan 2024 14:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56953
IP address blocks: 91.229.152.0/23 maxlen: 24
31.132.200.0/21 maxlen: 24
2001:67c:2340::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e7:65:b1:1f:bf:ab:d7:29:f9:2d:90:7f:6e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Jan 1 14:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73a8e63f19ba40da3b053d22eff2d1ba9a3d0be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f0:93:96:b0:2d:03:9b:cc:03:6d:1b:e1:34:
df:4d:1d:83:4b:e3:a0:9e:bb:37:ac:fc:cb:26:76:
68:72:92:eb:30:fb:53:95:5a:4f:6d:00:57:84:08:
22:42:27:c8:e4:89:54:c3:d4:85:03:be:f0:af:e1:
3a:0b:d3:93:95:bd:6a:59:4c:73:c1:e4:4e:bd:33:
2e:68:0f:e3:73:ad:f9:ab:e5:ad:ae:ad:ba:a1:74:
0f:e4:59:43:7d:7d:6d:04:b6:f0:f9:15:ee:bd:15:
19:15:3d:e6:53:11:72:8d:cc:07:fe:7d:60:d0:1c:
67:6a:a6:96:ce:c1:fc:41:3b:e2:c4:d4:58:71:4e:
be:91:47:ca:e1:68:b6:6c:af:9b:39:a4:a2:7b:d3:
ab:1b:27:d9:1d:08:7c:37:64:56:b6:81:6a:98:33:
f0:f5:9b:19:d3:1d:ea:61:01:df:94:b7:1a:2f:8c:
23:c7:d1:42:94:dc:df:4d:30:b0:68:6e:5e:ad:11:
21:d4:32:b3:33:5e:e1:20:96:f9:7c:d5:51:85:f3:
19:ef:7a:24:1f:50:44:8f:ef:eb:1d:3f:f1:0a:b5:
f7:9d:81:f5:c6:90:a7:34:e3:16:2c:c7:37:89:b5:
6f:8d:0b:2b:e3:6e:2a:e1:ab:5e:fa:b2:45:00:d8:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A8:E6:3F:19:BA:40:DA:3B:05:3D:22:EF:F2:D1:BA:9A:3D:0B:E5
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/c6jmPxm6QNo7BT0i7_LRupo9C-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.200.0/21
91.229.152.0/23
IPv6:
2001:67c:2340::/48
Signature Algorithm: sha256WithRSAEncryption
6b:1b:49:72:0b:7d:64:3a:79:d4:8e:2a:94:94:6c:6c:99:ba:
c5:46:9e:7a:a1:8a:72:8c:30:d3:f0:e7:e5:f0:44:80:7d:91:
86:e9:83:5c:4e:23:f4:1d:26:10:57:36:30:29:c7:c5:a7:54:
94:1f:04:8c:8d:0a:04:43:b7:ac:16:dc:9a:07:f0:b2:75:bb:
5f:67:53:9b:6d:19:c2:da:72:12:75:b6:1f:84:71:16:cd:6f:
48:75:36:ce:cd:20:df:df:c5:22:67:81:05:20:be:e7:ba:62:
62:78:06:9d:b1:08:64:cf:74:27:c1:f7:e9:f5:7c:4b:69:1a:
85:df:38:f8:65:d3:4a:75:4a:74:7e:b0:ae:4b:0f:88:67:eb:
e6:0d:26:d0:56:1c:8c:24:24:8f:a5:2f:5a:32:40:9e:a0:c9:
bb:4d:3a:15:51:45:cf:99:c7:18:08:69:33:b2:a0:26:10:b6:
00:c3:70:a2:a3:a0:4e:c4:95:1e:e5:72:fc:38:70:44:a5:bb:
33:1f:ec:f3:d8:ca:82:78:8e:76:80:74:e6:36:75:52:6f:23:
f0:f3:11:17:6b:33:95:7f:6e:31:e6:69:9e:a1:e9:ac:2f:4c:
be:b8:5d:ce:55:8d:e4:34:e3:92:56:43:48:7b:e7:22:67:01:
af:df:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:46 2025 by rpki-client