Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/B-1nD_EAKr06ASh0fUcSAsrdIoI.roa
File: B-1nD_EAKr06ASh0fUcSAsrdIoI.roa (raw, json)
Hash identifier: fS6ZxHev8Fbn8UnfuPBDrSMfQrNbElzE6TvXGLWNL0U=
Subject key identifier: 07:ED:67:0F:F1:00:2A:BD:3A:01:28:74:7D:47:12:02:CA:DD:22:82
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 018CC725A592B40F86F533F1CB96329C614E
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/B-1nD_EAKr06ASh0fUcSAsrdIoI.roa
Signing time: Mon 01 Jan 2024 22:29:42 +0000
ROA not before: Mon 01 Jan 2024 22:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205547
IP address blocks: 91.209.225.0/24 maxlen: 24
2a12:d1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 29 Dec 2024 08:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:a5:92:b4:0f:86:f5:33:f1:cb:96:32:9c:61:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Jan 1 22:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ed670ff1002abd3a0128747d471202cadd2282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:dd:9d:90:b9:26:e7:c9:2f:74:38:6d:37:
74:c6:11:3a:4c:ee:35:ec:d8:b9:d3:b8:0c:1f:b5:
35:3c:a0:f7:a1:8c:73:a6:66:17:42:c3:31:fc:3d:
04:5a:cc:9f:bd:da:11:ca:ac:9a:9e:47:11:7c:fd:
d3:20:e4:9c:9b:68:7c:49:1e:3e:80:7b:15:24:c5:
92:a9:16:d9:be:32:e9:b6:89:b7:ad:0b:37:a6:eb:
1f:fb:85:a0:0e:1b:c5:2c:64:9a:15:30:8e:10:ad:
f8:9f:53:e3:6b:6e:ff:d2:3d:c3:d7:c4:73:22:da:
83:81:17:63:12:31:7f:bd:51:54:6a:f3:77:45:43:
f2:f2:d2:21:b2:be:6a:19:0a:f1:26:45:58:24:6b:
9f:f2:46:6b:7b:56:b1:ab:f5:c6:15:23:52:3d:24:
84:ec:3b:bf:ec:93:35:9f:00:1b:5d:c7:50:fc:65:
1c:4c:66:19:91:9a:64:3b:2a:7b:6a:5f:da:74:73:
04:34:8a:c2:dd:99:ec:a3:ee:ad:f1:95:c8:eb:8d:
b2:bd:9a:4d:cf:b4:ce:e9:ff:fe:d6:43:70:92:f2:
2d:92:8c:a7:2e:6c:5b:67:7d:80:46:13:a5:e1:9f:
42:de:5e:44:39:f9:9b:3c:f4:da:83:b7:2c:ff:94:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:67:0F:F1:00:2A:BD:3A:01:28:74:7D:47:12:02:CA:DD:22:82
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/B-1nD_EAKr06ASh0fUcSAsrdIoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.225.0/24
IPv6:
2a12:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:a9:2d:49:11:15:6e:14:d9:0c:66:7d:40:28:a0:dd:ff:e6:
87:9f:3d:35:a0:4a:4a:89:81:d3:12:a3:30:cb:3f:f0:ad:b8:
ce:21:f4:16:ab:e5:d6:5d:84:75:fe:5a:24:e2:b4:48:56:19:
86:9a:0b:af:5d:b9:a0:b1:94:34:e5:90:9f:3f:21:81:03:f0:
6c:b4:b2:e4:0b:44:43:f8:17:8a:b4:1e:a8:cd:51:e2:be:90:
95:d2:25:bf:18:ca:15:5f:ba:be:dd:4e:a6:61:e5:47:88:7e:
53:ca:6c:78:a1:a8:6a:1a:2c:f3:bf:62:18:ec:48:fd:50:fe:
3c:ab:83:6f:0d:6d:3b:9a:cb:ab:b9:41:58:0f:19:0b:bf:61:
80:60:1a:d9:f8:f2:81:e5:da:f1:33:f5:a9:01:b0:c1:6e:95:
9a:b7:3f:80:9f:c7:c3:c0:15:47:c7:06:f6:37:fd:95:3e:8a:
e3:09:fd:33:bb:e1:9d:50:a1:5d:56:9c:8b:51:15:e0:1e:83:
60:eb:e7:8e:ca:82:21:f9:3b:cf:25:db:2b:ef:84:84:bc:de:
d2:5c:44:58:b8:f3:62:95:19:7c:a3:3d:52:a0:ba:be:ae:35:
3d:75:2e:9b:6b:3a:17:c2:8e:59:01:2a:eb:35:5b:e7:a6:94:
68:01:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:04 2025 by rpki-client