Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/tuVguFvpiuwp7_3wZhVlbtzyYn8.roa
File: tuVguFvpiuwp7_3wZhVlbtzyYn8.roa (raw, json)
Hash identifier: WVLwWs7vSQ1e5ISzKP2ovmwhs1ESZh0DtNxii6D9Uvc=
Subject key identifier: B6:E5:60:B8:5B:E9:8A:EC:29:EF:FD:F0:66:15:65:6E:DC:F2:62:7F
Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial: 018CC5DC8935A8F26686AF0010948E95EF06
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/tuVguFvpiuwp7_3wZhVlbtzyYn8.roa
Signing time: Mon 01 Jan 2024 16:30:13 +0000
ROA not before: Mon 01 Jan 2024 16:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216186
IP address blocks: 91.238.238.0/24 maxlen: 24
2a10:be40::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:89:35:a8:f2:66:86:af:00:10:94:8e:95:ef:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Validity
Not Before: Jan 1 16:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6e560b85be98aec29effdf06615656edcf2627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:fe:ee:53:ae:43:33:a8:6e:df:d8:7d:f9:
d6:f7:e0:68:a7:0d:d3:12:da:ea:af:c7:06:35:3d:
b6:65:c4:48:d7:f2:d1:21:fd:d1:03:ec:58:72:b5:
ed:43:bf:b3:2f:41:33:e8:f0:88:6a:22:08:7e:99:
7d:58:fd:10:60:b3:bb:a9:d6:43:34:3d:a6:23:fe:
c6:4b:b9:bf:96:72:c1:90:f6:56:47:d0:40:4d:62:
6c:6e:b0:3a:1e:36:3a:47:c6:e5:cc:11:d6:cc:09:
b9:da:80:1e:bb:e2:67:4a:0c:58:2f:40:32:5c:8a:
6c:07:07:c2:64:cc:5c:8a:42:74:58:e7:91:77:ee:
52:fd:6d:f6:7c:69:ad:76:e8:0c:1d:4b:a8:cd:9c:
c9:3d:7f:5d:f7:d1:3c:e8:75:3e:a5:e1:e6:53:c6:
21:fc:35:83:07:85:ca:f6:2a:91:9b:fc:f2:22:b0:
8a:f8:ff:df:22:40:70:36:91:dc:fd:c6:6f:2d:31:
0f:59:14:8a:b8:0b:6c:d6:16:5d:60:58:27:e6:a5:
be:23:ff:fd:15:ad:14:d9:9e:92:8a:e1:73:e4:08:
12:32:e8:6e:e3:7f:2c:9d:95:08:e8:67:31:85:7e:
24:07:42:3f:54:f5:de:61:33:c4:02:72:9e:94:5d:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E5:60:B8:5B:E9:8A:EC:29:EF:FD:F0:66:15:65:6E:DC:F2:62:7F
X509v3 Authority Key Identifier:
keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/tuVguFvpiuwp7_3wZhVlbtzyYn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.238.0/24
IPv6:
2a10:be40::/32
Signature Algorithm: sha256WithRSAEncryption
2e:58:8c:ae:2f:2d:0c:58:bf:cd:98:5e:00:e1:90:bb:49:02:
1b:78:d8:25:6b:0f:e1:50:30:60:33:20:1f:6f:98:93:b8:36:
e9:c7:ce:8f:e1:88:9a:d8:47:2c:ec:17:45:77:65:ca:4a:01:
d4:bb:6f:12:e2:60:e8:d4:46:2f:c0:05:f8:6e:0c:7f:8c:b8:
1d:60:26:5a:f5:14:2b:eb:95:f0:bb:f9:8f:b7:e1:55:0b:8c:
2b:6a:ec:d6:88:8f:c8:05:54:17:a4:7f:92:f8:7b:75:a9:8a:
34:ec:50:19:36:7e:c3:db:46:c1:ec:ad:41:a7:92:c2:55:64:
d9:b9:b2:28:19:8d:90:b2:03:ac:cb:78:6c:61:92:15:36:c4:
a2:e4:5c:ba:ed:8a:16:f5:ee:5b:b5:44:05:37:4d:9f:63:e0:
aa:31:71:d6:e6:82:f7:21:c2:0c:7b:a3:12:f0:63:82:31:1c:
af:d1:65:db:a0:e4:5c:58:d3:a5:b0:6c:c7:ac:3a:bf:c7:23:
8e:12:7a:1b:31:3a:94:28:d5:d1:e0:32:6c:5c:1e:a2:ca:2e:
fd:b6:6c:51:eb:74:4e:8a:8d:ad:35:69:aa:42:0e:5e:11:59:
c2:ff:b0:fe:ae:83:f9:b4:c7:0c:59:08:69:c8:73:97:15:23:
f8:4e:34:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:39 2025 by rpki-client