Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/Ii5HfRJSDTcif9sW4bNNDM4UYvk.roa
File: Ii5HfRJSDTcif9sW4bNNDM4UYvk.roa (raw, json)
Hash identifier: YOotPHT3j3R3qy/aSSulemfB3CTio3aPrurDmZzllpA=
Subject key identifier: 22:2E:47:7D:12:52:0D:37:22:7F:DB:16:E1:B3:4D:0C:CE:14:62:F9
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 018D3657DD80250DFD9E0983D727C0A7D6A0
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/Ii5HfRJSDTcif9sW4bNNDM4UYvk.roa
Signing time: Tue 23 Jan 2024 12:42:24 +0000
ROA not before: Tue 23 Jan 2024 12:42:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147287
IP address blocks: 91.207.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:57:dd:80:25:0d:fd:9e:09:83:d7:27:c0:a7:d6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Jan 23 12:42:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=222e477d12520d37227fdb16e1b34d0cce1462f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:22:d8:11:11:39:f6:2d:61:b1:c1:d7:c7:
92:30:b3:15:a4:77:73:77:a1:29:b7:08:64:d3:f4:
50:ce:ae:fe:47:48:dc:1b:25:62:81:4d:67:9d:8e:
46:4f:16:a0:30:32:c8:51:75:63:5c:70:04:f9:71:
2d:f1:5f:73:a7:5a:bb:21:f1:f3:99:49:7a:08:62:
87:ba:52:d4:f1:53:b6:0d:84:c6:c5:2f:63:73:f1:
21:84:75:71:5f:a6:ac:b6:dc:97:c7:d7:13:ab:22:
75:b3:13:da:1c:33:63:4d:56:76:9a:7b:04:3b:39:
35:06:00:62:f1:af:e1:1f:fc:30:c1:8e:a4:d8:a8:
57:00:3c:9d:38:bd:b7:ed:b8:6e:79:9b:58:4a:5b:
9a:a6:cb:87:25:b2:76:90:31:1b:fd:77:e7:7c:80:
4a:0c:27:f0:76:32:ee:3d:a0:08:eb:6c:04:fd:56:
d1:e8:75:fe:01:57:c9:8d:2f:08:23:3f:94:ed:cb:
55:db:9b:e7:92:3e:dd:b2:b6:6d:0d:b1:9b:ee:a7:
ed:af:5a:5d:32:c5:91:79:b8:f8:b8:50:62:94:b7:
d4:4a:1a:62:83:55:c3:6f:b8:cb:8f:b1:f1:f5:c6:
5d:92:00:c0:5f:0a:da:d1:ad:a7:fe:e4:db:ee:10:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:47:7D:12:52:0D:37:22:7F:DB:16:E1:B3:4D:0C:CE:14:62:F9
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/Ii5HfRJSDTcif9sW4bNNDM4UYvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fc:db:e7:23:01:f7:d7:1a:f6:ff:24:19:ee:15:7c:0d:a4:
53:b5:27:94:b2:6e:97:f0:ef:e7:c5:97:bc:99:51:27:c9:8d:
7d:66:cb:c8:13:92:ac:3f:b4:8c:59:f2:4c:78:47:3c:93:90:
b4:33:d5:cd:8f:61:ff:83:18:76:ba:76:20:aa:b1:43:d3:e5:
ba:07:39:cc:cb:34:26:81:13:6b:dd:3b:c0:9d:66:36:68:a9:
e3:2a:0a:bf:b0:0f:7e:dd:64:50:ef:7b:45:03:a6:93:52:3a:
e9:b7:88:26:cd:03:b0:ab:ec:14:ce:59:2e:95:b0:d9:6b:2a:
b2:14:c6:57:c7:2a:49:bf:c2:ac:82:6e:41:27:f9:21:d7:53:
13:da:d4:c7:53:c9:10:88:0b:d8:00:ec:36:73:a2:55:3b:bb:
7d:c5:31:34:3d:9d:36:30:01:81:55:c8:15:7f:b2:43:86:ef:
e7:9a:6b:54:3c:ac:e8:87:11:89:6e:16:1f:92:7f:bc:e7:dd:
05:73:d4:d1:0d:18:5f:f6:74:67:1a:2b:ef:20:6a:76:11:f8:
52:7a:dc:b7:e2:d2:0a:96:e2:08:79:4c:ae:34:a3:7d:28:52:
b1:18:1e:5b:26:fe:28:4c:63:96:14:ad:23:dc:27:be:a6:bf:
2b:62:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:04:47 2025 by rpki-client