Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/V1gQTa7FOqLz6ZPw8koObuErwVI.roa
File: V1gQTa7FOqLz6ZPw8koObuErwVI.roa (raw, json)
Hash identifier: myO2cXUNLKoGIy9bxpmXWSgfoPaYutvYq9LXqUsixz0=
Subject key identifier: 57:58:10:4D:AE:C5:3A:A2:F3:E9:93:F0:F2:4A:0E:6E:E1:2B:C1:52
Certificate issuer: /CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Certificate serial: 0192519E1AC0F00A4E6D014FA88747AB9C5F
Authority key identifier: E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/V1gQTa7FOqLz6ZPw8koObuErwVI.roa
Signing time: Thu 03 Oct 2024 09:02:48 +0000
ROA not before: Thu 03 Oct 2024 09:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42905
IP address blocks: 91.199.245.0/24 maxlen: 24
193.39.118.0/24 maxlen: 24
193.200.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:9e:1a:c0:f0:0a:4e:6d:01:4f:a8:87:47:ab:9c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Validity
Not Before: Oct 3 09:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5758104daec53aa2f3e993f0f24a0e6ee12bc152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e8:fc:b4:9f:c7:37:79:92:44:36:5e:31:36:
03:4a:78:00:ca:8a:4a:f7:19:1a:a7:11:0b:00:80:
71:37:2a:c1:95:94:1b:06:63:a6:6e:1d:96:14:cb:
d2:61:32:73:76:df:78:a8:d7:2c:be:30:04:3c:6c:
e9:0c:26:2a:63:94:24:a8:3b:e2:72:2f:b0:81:ea:
7a:65:b1:b9:ab:b1:0d:23:05:64:99:f7:08:18:ba:
39:7d:47:e0:55:76:2c:5b:9d:81:38:5e:79:9f:7e:
0a:a2:a0:d5:4d:2f:be:3f:88:d5:e3:9a:1f:1d:9d:
a4:4d:fd:7f:28:1b:ae:5f:fd:f2:d3:d5:c4:ec:4e:
62:12:f7:5c:36:50:c8:02:22:8c:51:0d:c7:a0:39:
e7:a9:3b:52:ec:f9:6c:c2:34:9c:bd:47:2f:3b:48:
72:e5:49:08:4b:ef:09:19:11:ec:4e:1e:05:50:79:
a0:74:aa:45:9d:02:b2:82:ad:eb:2f:b5:a0:a1:d5:
e2:9a:50:35:ca:f5:a4:5f:4e:51:ce:d7:09:fe:83:
2f:1f:54:9b:62:4e:a4:2b:cc:53:e1:31:d6:aa:b1:
f0:88:b0:20:45:cd:3a:27:5d:9b:96:d5:0c:15:9f:
d5:c2:a1:41:cf:52:3b:2f:c1:50:78:a8:09:26:68:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:10:4D:AE:C5:3A:A2:F3:E9:93:F0:F2:4A:0E:6E:E1:2B:C1:52
X509v3 Authority Key Identifier:
keyid:E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/V1gQTa7FOqLz6ZPw8koObuErwVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.245.0/24
193.39.118.0/24
193.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
63:6c:19:ac:14:73:66:77:77:46:e0:5c:06:7a:06:dd:b3:c0:
32:e3:72:e6:67:05:b2:ef:76:2a:de:45:c4:35:6a:34:61:55:
a2:b0:98:d4:f5:09:04:b1:c6:36:52:80:0a:82:0f:64:0a:4a:
e3:a0:26:96:31:93:66:e6:47:6c:e1:9b:ea:7a:44:03:4e:ec:
a1:13:10:6f:74:ca:9a:bf:7b:af:5f:2b:78:ce:87:9a:82:1d:
e3:94:00:d9:c7:7b:df:f4:a4:8e:65:14:a5:bf:d5:6c:65:d6:
75:32:e7:a8:cb:6a:76:2e:5a:a1:8e:e4:ec:44:b7:30:56:41:
31:0e:85:80:54:e9:a6:3a:7f:d4:5b:67:e1:6e:d2:84:c9:18:
39:06:22:78:c8:24:52:8f:7c:48:7c:e9:ac:61:41:79:9b:f4:
2b:cb:3d:50:69:bb:0f:4f:56:26:63:67:6b:50:41:ba:39:9d:
6e:ff:86:56:5b:27:ae:d1:6d:b6:20:29:b7:41:bd:61:6e:bb:
9b:ec:d5:93:c9:5b:90:cb:63:7b:fb:80:03:d3:7b:0f:e0:2a:
8f:82:38:8b:7d:eb:bd:8a:58:78:51:d7:02:73:e1:f4:b0:2a:
84:9f:57:39:c4:91:d4:bf:66:25:10:61:52:0d:f6:8a:9d:a8:
9e:6a:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:48:27 2025 by rpki-client