Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XB7p29dm2Aj-R1N6Bk0mN1ZVKYA.roa
File: XB7p29dm2Aj-R1N6Bk0mN1ZVKYA.roa (raw, json)
Hash identifier: O5KOLvJ/9UfNu0euoTKnXRIX+GgEe+nezltC0KQNVmc=
Subject key identifier: 5C:1E:E9:DB:D7:66:D8:08:FE:47:53:7A:06:4D:26:37:56:55:29:80
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 0194F91014A3A2DCFD9725A80D9DFD6ED882
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XB7p29dm2Aj-R1N6Bk0mN1ZVKYA.roa
Signing time: Wed 12 Feb 2025 07:29:28 +0000
ROA not before: Wed 12 Feb 2025 07:29:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29491
IP address blocks: 91.202.160.0/22 maxlen: 22
178.214.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 13 Mar 2025 11:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:10:14:a3:a2:dc:fd:97:25:a8:0d:9d:fd:6e:d8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Feb 12 07:29:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c1ee9dbd766d808fe47537a064d263756552980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:29:0f:55:ed:84:ce:d0:76:85:83:17:f3:
09:3e:69:e4:d2:b9:a6:1a:21:79:87:7c:f5:21:ea:
bd:6b:91:b6:f7:55:de:d4:0e:cc:62:c2:e9:b4:27:
ac:f5:6e:80:a2:ea:96:8e:8d:ee:c3:69:0d:c1:9d:
e0:f8:e5:fa:34:d8:99:d0:9a:01:76:30:cc:57:61:
b2:6f:fe:06:65:c0:63:d3:cf:e0:a9:51:6a:da:28:
de:19:50:e9:7f:9f:16:80:c6:a7:2b:cc:e6:9c:9f:
8a:3a:34:64:5d:3d:d4:cc:38:14:36:3c:6d:dc:5c:
43:0e:cd:d3:43:91:9b:01:7c:f7:f3:e3:16:a8:71:
f3:62:d8:18:c6:08:16:14:15:54:b1:61:7f:65:ae:
71:2e:dc:41:11:aa:be:ff:36:83:85:f2:8e:13:24:
6f:85:9c:6c:47:af:a3:a0:d1:fd:d2:9a:d9:cf:8b:
84:52:6a:bf:94:9a:28:f5:2b:c6:10:fd:86:d8:04:
ad:24:dc:c2:45:61:3f:8d:2f:76:32:bc:42:4a:a7:
68:54:17:0e:36:9a:37:fc:20:6d:d1:15:20:b1:2b:
67:ba:1b:01:7b:26:e0:ee:9c:49:7f:f3:78:01:b8:
47:82:36:4a:eb:4d:46:96:a0:0b:e0:1b:ad:06:e1:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1E:E9:DB:D7:66:D8:08:FE:47:53:7A:06:4D:26:37:56:55:29:80
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XB7p29dm2Aj-R1N6Bk0mN1ZVKYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.160.0/22
178.214.208.0/20
Signature Algorithm: sha256WithRSAEncryption
01:7e:c3:ad:98:e7:2a:4f:0e:f3:5e:fa:d6:e1:83:71:df:60:
67:9d:3f:8e:37:dc:19:99:8e:0f:44:5d:25:0e:74:7a:df:c8:
9a:91:68:fa:a5:e2:cc:c4:9a:1c:d1:c5:c4:0a:0c:ef:bf:d4:
17:11:d4:cb:db:81:9f:8e:d0:fd:49:5f:12:59:4b:b2:74:08:
85:e6:8d:31:94:62:a0:96:1f:da:ea:90:94:15:52:04:06:6a:
1b:76:8f:05:b8:b5:4f:6f:6b:f2:dc:0b:93:aa:56:21:df:ff:
4f:9e:85:09:99:1f:03:37:b6:f6:38:f3:a2:f4:e3:ea:b3:98:
31:6e:a1:7d:32:74:e0:d9:d1:cb:27:79:78:13:0c:23:6f:53:
97:e3:90:b5:eb:1e:19:90:89:a7:80:15:d8:c7:62:b3:a0:85:
f8:bd:b2:b5:b8:af:75:fc:9d:a8:29:68:af:d1:a5:6a:85:a6:
7f:1c:49:10:96:9c:18:0d:89:e4:13:09:a9:1c:0d:e7:fb:19:
d7:a7:48:83:79:10:39:04:db:ca:3b:3b:ce:c7:b5:36:5e:4c:
1f:33:1f:9b:60:d2:ac:0c:87:88:2a:77:00:62:5a:8d:36:af:
b8:8b:6f:57:ee:aa:d2:6d:40:86:02:2f:87:49:6a:f6:f5:a9:
9d:c8:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:22:15 2025 by rpki-client