Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/i586YGFQzk9qEeGaArZlBNh6_HE.roa
File: i586YGFQzk9qEeGaArZlBNh6_HE.roa (raw, json)
Hash identifier: jgr3NqIbrCudSzQQzgla+sRNWQGAwfCc7SxoYK/ltd8=
Subject key identifier: 8B:9F:3A:60:61:50:CE:4F:6A:11:E1:9A:02:B6:65:04:D8:7A:FC:71
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 018CC26D11978C27C77722EF163FECF25DCA
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/i586YGFQzk9qEeGaArZlBNh6_HE.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206953
IP address blocks: 91.150.186.0/23 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:11:97:8c:27:c7:77:22:ef:16:3f:ec:f2:5d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9f3a606150ce4f6a11e19a02b66504d87afc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:aa:79:a7:29:27:0e:0b:5d:b7:6a:b1:59:f3:
bd:d7:a1:84:8f:eb:f0:2f:50:a5:27:cf:d4:8c:eb:
11:92:3e:35:c4:df:25:76:0f:2d:6e:ef:01:72:04:
d6:93:b2:61:28:0f:f6:04:5f:16:1b:8d:e0:27:92:
dc:43:76:e0:f5:6c:9e:59:8c:bb:a8:71:ca:23:d9:
85:42:4a:e2:84:3d:b9:34:e4:78:01:95:f4:53:42:
60:7a:63:13:e9:14:32:e5:c7:04:a8:c1:ed:a1:c3:
61:1d:c0:b6:27:f4:52:03:dc:4c:66:3e:23:39:23:
08:f9:3a:aa:b3:b7:c9:75:9d:ac:0e:5e:9c:fb:b0:
88:03:10:ac:f0:1b:83:ec:59:cc:d3:07:b3:bf:8d:
3b:84:42:7c:64:01:be:9b:fc:5e:30:a1:02:a0:33:
36:a0:29:e7:42:19:5c:f5:f3:3e:f4:32:aa:42:c4:
a6:da:68:09:d2:26:92:fc:f9:7e:4f:ee:ce:d4:bc:
b7:08:bc:38:75:7e:fd:3e:1d:01:70:ff:12:fc:a8:
12:2a:49:58:06:7c:22:e8:60:dd:db:77:a6:c4:99:
44:f7:52:25:a0:c0:8a:0e:e7:e2:ef:1a:46:66:cf:
58:b7:01:fa:48:9c:ad:2d:f2:91:d5:82:e6:16:bd:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:3A:60:61:50:CE:4F:6A:11:E1:9A:02:B6:65:04:D8:7A:FC:71
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/i586YGFQzk9qEeGaArZlBNh6_HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.150.186.0/23
Signature Algorithm: sha256WithRSAEncryption
93:c0:73:2a:0c:be:e8:a8:ce:9e:55:54:c1:ad:d2:28:d6:e6:
21:68:80:ae:e6:14:b5:f8:1c:c6:4d:33:67:16:46:3d:60:b1:
c4:70:29:e1:c8:8d:f0:03:dd:39:ef:6d:12:f7:dc:f0:44:48:
2e:cb:07:e2:a6:9c:c7:49:69:44:46:dd:ce:7a:b2:0e:eb:6c:
ae:f5:f7:1e:30:38:a9:17:d7:ba:6e:ca:24:c7:0e:0e:cd:29:
1f:10:3f:c2:c2:94:52:c5:49:66:2c:1b:35:3a:71:2a:c8:6a:
56:6f:e3:55:6a:64:c9:83:ad:df:aa:eb:45:62:76:2c:2c:17:
26:a9:13:0a:50:f4:ac:fc:b8:be:cb:27:06:37:5f:da:26:52:
03:54:ad:d3:a6:fa:02:30:99:ec:83:c4:57:84:f7:45:95:3b:
c8:14:eb:6c:0a:fc:d1:6e:1f:18:63:df:64:99:34:66:65:5a:
3d:b2:4e:50:04:9e:d9:11:fa:9f:6b:08:43:f5:62:6a:12:f1:
b2:8e:3a:3b:fd:a5:02:fb:92:a0:3a:9c:79:0c:9f:33:b0:e5:
b0:4f:b9:01:50:2b:b9:8e:a1:17:11:c9:ac:4a:e8:58:c0:fd:
60:a7:d4:59:49:29:80:5e:2a:96:fa:f4:e7:05:1c:4f:6a:c6:
cc:0b:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:50 2025 by rpki-client