Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/auhedlG9t5zzptcI9wpQtDWJ-oY.roa
File: auhedlG9t5zzptcI9wpQtDWJ-oY.roa (raw, json)
Hash identifier: yFhLuVIRM55NBCT6jkxoB5RbQLO1vwt3bztwB5VGXtM=
Subject key identifier: 6A:E8:5E:76:51:BD:B7:9C:F3:A6:D7:08:F7:0A:50:B4:35:89:FA:86
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC795344E8BD36D17ECBB4B37FAA42FD6
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/auhedlG9t5zzptcI9wpQtDWJ-oY.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201909
IP address blocks: 91.219.16.0/24 maxlen: 24
91.236.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:34:4e:8b:d3:6d:17:ec:bb:4b:37:fa:a4:2f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ae85e7651bdb79cf3a6d708f70a50b43589fa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:a0:d0:e8:60:79:6d:f1:d1:79:67:39:52:
c0:ba:3d:47:77:a5:f2:b7:8d:50:7d:c8:30:ad:de:
b7:4f:6e:1b:67:0f:e2:70:a2:b4:45:c4:eb:6e:cd:
77:6c:15:a2:41:cd:5c:b7:af:f2:40:18:b3:ac:76:
2c:37:f5:de:90:67:55:1a:8a:a5:fc:d2:9a:6d:d6:
f8:da:e1:15:0a:fd:96:fb:e0:89:a6:e5:77:be:9b:
fc:82:74:75:6b:23:23:41:78:6c:df:61:36:ee:1b:
44:7b:3a:04:80:30:5d:69:3a:44:0a:f1:83:aa:26:
68:d6:98:41:16:0d:8f:fd:92:e4:2f:fe:a2:e2:db:
e8:db:5a:a0:b0:0a:28:c4:18:63:5c:1f:47:b1:c9:
12:f1:a2:27:78:8c:7d:b1:e3:68:ec:c9:cb:72:35:
92:fa:c7:7a:98:c7:e8:87:8d:a6:3e:1e:27:75:c7:
55:3c:87:4e:f9:d1:86:a7:2e:ae:05:aa:d6:3c:6c:
a3:7a:88:93:33:cc:29:09:96:67:a7:dd:62:90:b9:
fa:04:83:08:e0:91:89:f3:a5:f8:5b:35:e3:1f:d8:
8c:69:74:8a:7c:7e:fc:cb:d7:ab:9c:4b:56:61:8f:
c6:1e:28:5b:24:a7:99:ca:35:a2:68:a4:72:b7:43:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:5E:76:51:BD:B7:9C:F3:A6:D7:08:F7:0A:50:B4:35:89:FA:86
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/auhedlG9t5zzptcI9wpQtDWJ-oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.16.0/24
91.236.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b5:c8:d7:65:8e:09:f2:50:c2:db:bb:09:e2:52:2e:93:76:
88:c4:f8:a8:ce:e2:c5:fc:82:42:77:16:80:63:bf:69:57:e3:
07:ef:1c:ee:ae:20:72:8b:32:ab:c4:6b:06:27:ab:72:c2:4d:
b2:f4:a2:16:66:07:6d:b0:bb:81:27:b9:fd:4c:b7:30:c5:d9:
01:46:3d:a9:28:f8:9b:d9:1b:be:a5:a6:e0:a5:aa:43:bf:79:
71:9d:fe:4c:a2:ff:d4:ba:67:55:d0:e0:73:cf:9a:4d:1f:42:
5a:1b:6b:0c:93:85:2a:bd:99:80:ea:e5:c6:ec:a2:78:28:cf:
bc:7e:25:fa:e0:ce:3c:3b:77:81:f3:75:c8:25:da:23:1b:8e:
7d:95:6f:2e:91:4b:42:89:40:97:df:ae:d3:38:2e:f7:5d:27:
bd:ee:d7:7e:f1:98:87:c7:49:64:7a:c8:da:9b:fc:0a:56:db:
d4:67:95:da:04:2a:c1:93:41:5b:53:39:a2:76:d7:5c:e3:7f:
58:ad:15:7e:79:2d:f0:60:a7:48:90:f7:dd:bd:fc:68:63:99:
19:c3:fa:50:dd:f2:90:73:a5:35:c0:63:2d:53:bc:8f:8b:da:
ed:23:07:32:b4:99:9a:b4:f4:21:9e:ed:a8:e0:6c:d5:e4:7d:
3b:3b:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:02 2025 by rpki-client