Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/v7aiKR4cwnl3Mjw-_UIOW3NKAHM.roa
File: v7aiKR4cwnl3Mjw-_UIOW3NKAHM.roa (raw, json)
Hash identifier: CZ3hC1DENSylKao8gyR5V/5DnbTWsZbY8n039fwwWLs=
Subject key identifier: BF:B6:A2:29:1E:1C:C2:79:77:32:3C:3E:FD:42:0E:5B:73:4A:00:73
Certificate issuer: /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial: 01914625BB0127A07BDF79E8BF7A7D5E8E6C
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/v7aiKR4cwnl3Mjw-_UIOW3NKAHM.roa
Signing time: Mon 12 Aug 2024 10:32:43 +0000
ROA not before: Mon 12 Aug 2024 10:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56886
IP address blocks: 91.229.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:25:bb:01:27:a0:7b:df:79:e8:bf:7a:7d:5e:8e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Validity
Not Before: Aug 12 10:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfb6a2291e1cc27977323c3efd420e5b734a0073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:05:c8:cd:dd:9b:54:97:ce:d4:5c:4f:ec:37:
a7:2d:37:5a:2c:3b:b5:c3:2b:77:0d:94:e6:8f:56:
99:26:d2:a8:85:03:32:8d:4d:01:e1:40:60:d5:6e:
4d:9d:41:96:15:64:fd:07:c4:26:20:5d:50:58:78:
43:0d:c7:39:29:57:80:fe:ec:f6:ed:f4:75:fc:aa:
67:21:16:b1:01:76:13:9d:9a:b1:2f:8c:45:33:71:
00:77:45:7c:e0:31:77:de:79:f1:9c:96:81:9f:e3:
ef:8a:34:2a:2e:5f:ae:13:99:6d:57:b4:ae:d8:da:
84:2a:dd:c0:4b:22:de:a9:af:59:67:30:07:d5:c0:
dd:d7:df:7d:7d:36:97:fa:65:fc:65:47:10:4b:6f:
66:b8:7a:e5:85:f5:4e:c4:f8:34:b4:a2:44:ba:a4:
b9:33:fa:01:e3:54:ce:b6:4b:18:9b:e0:97:58:dd:
74:14:3e:ab:29:b8:ec:44:dc:06:d4:b0:66:95:da:
6c:ad:24:a8:d8:95:08:67:25:e7:65:04:b0:e7:30:
df:4f:01:0a:b2:75:4e:85:dd:80:c0:4f:05:87:ba:
1e:7d:c5:a5:4e:a1:48:15:b4:a0:27:9a:a5:57:fc:
19:d6:6d:62:36:f1:79:8e:da:12:44:d7:74:d1:e7:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:A2:29:1E:1C:C2:79:77:32:3C:3E:FD:42:0E:5B:73:4A:00:73
X509v3 Authority Key Identifier:
keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/v7aiKR4cwnl3Mjw-_UIOW3NKAHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2f:32:bb:da:30:f5:35:8e:07:9b:f8:71:b8:4e:97:f9:7d:
44:a0:c9:af:1b:07:72:f0:cf:30:8b:6d:7f:a9:64:5a:5f:14:
4d:78:8f:b6:3c:58:ca:4d:24:f0:77:9f:65:d3:c5:63:46:d6:
9a:64:63:a7:86:14:d9:d1:16:47:e5:93:fd:12:bd:76:fd:35:
96:7b:55:06:0f:37:fe:2f:34:7b:aa:1b:32:de:84:47:3b:c4:
99:c8:3b:59:4d:e5:45:75:8c:87:7b:24:68:0d:80:8a:07:ab:
35:eb:2e:89:10:96:38:a5:1a:9e:a2:dd:71:5d:50:23:15:59:
a0:59:35:92:44:3d:c2:f0:e1:0d:e7:02:83:03:dc:fb:41:d2:
07:78:e7:60:ec:7c:59:e5:08:2b:8b:27:e0:2a:21:9b:79:ba:
0b:bc:12:81:ae:85:74:f6:0d:5e:3e:3c:ea:45:a9:2f:d7:b3:
d7:40:71:27:dd:e9:d6:68:a2:43:a5:b2:aa:4f:85:80:d6:60:
e4:e9:61:99:71:52:48:2b:78:f5:94:4e:61:ee:ca:91:5b:2d:
ad:a1:14:5e:80:fa:a0:19:11:ad:e0:a8:d6:50:35:48:d8:ae:
a4:c8:e0:a2:44:65:77:15:d2:dd:59:a1:09:87:26:0c:1f:fe:
a6:87:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:33 2025 by rpki-client