Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/gNSUu82IQPinFUGfwYOItf-XRBo.roa
File: gNSUu82IQPinFUGfwYOItf-XRBo.roa (raw, json)
Hash identifier: d37H3lPfCLOYMUYZlg4OqH3PU8KUt20WyvmVMgnwzrA=
Subject key identifier: 80:D4:94:BB:CD:88:40:F8:A7:15:41:9F:C1:83:88:B5:FF:97:44:1A
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0196F7E3AB6659E8DB39F1E258427C901CB2
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/gNSUu82IQPinFUGfwYOItf-XRBo.roa
Signing time: Thu 22 May 2025 12:06:54 +0000
ROA not before: Thu 22 May 2025 12:06:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44006
IP address blocks: 91.232.157.0/24 maxlen: 24
194.28.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 15:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:e3:ab:66:59:e8:db:39:f1:e2:58:42:7c:90:1c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: May 22 12:06:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80d494bbcd8840f8a715419fc18388b5ff97441a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:e6:87:85:23:90:6f:48:95:01:69:81:13:
67:8b:05:1d:1b:ee:7b:36:7c:c1:c0:02:ac:59:d3:
40:6f:2e:3a:e9:3d:00:16:27:b7:6f:2c:bc:f9:76:
fd:59:0b:4e:e6:8a:d0:b7:95:47:22:37:34:be:57:
b7:66:37:9e:a8:c8:cc:be:dc:40:0f:0a:5e:a8:5e:
c4:58:d8:04:4b:85:0d:97:94:09:84:d8:55:aa:29:
58:9a:26:5b:e2:ad:bb:9f:5a:b0:1a:10:91:a6:95:
25:87:33:d0:dd:fe:59:09:2d:25:78:e6:69:41:d8:
c8:0e:fc:f6:d8:0b:26:56:84:eb:0f:4e:03:41:9f:
5b:88:87:56:03:20:fd:a3:ba:2f:50:c5:f9:08:4b:
04:3b:4c:7c:5d:49:13:6e:09:f0:c2:bc:14:da:ca:
66:40:4b:08:40:c9:a3:2a:4b:f2:14:17:ea:16:a2:
de:0a:3b:6a:d1:d3:c3:6e:ee:5e:4a:ca:e9:6d:bf:
13:f0:d7:5a:68:cc:c0:c9:50:99:04:91:80:ec:bc:
5b:e6:cb:14:cf:99:95:2a:d3:d3:0f:8c:3a:d0:b6:
24:26:74:8e:f4:03:91:bb:7d:3b:da:a8:3a:e0:ff:
6a:fb:7c:57:da:21:61:c5:86:d7:a7:75:15:6e:1e:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D4:94:BB:CD:88:40:F8:A7:15:41:9F:C1:83:88:B5:FF:97:44:1A
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/gNSUu82IQPinFUGfwYOItf-XRBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.157.0/24
194.28.100.0/24
Signature Algorithm: sha256WithRSAEncryption
72:92:ec:e0:2c:9f:c0:60:77:62:f6:71:36:60:99:80:4f:da:
3c:ca:cb:d9:68:4c:9b:d9:b9:78:ed:6c:0e:c4:6c:4e:fa:cb:
26:17:b6:bf:22:ca:88:79:04:58:8a:42:89:f3:3b:4c:af:2e:
9b:a2:60:00:fb:45:67:e7:6a:8b:f6:5e:29:74:7d:a6:30:ce:
1a:62:a2:9b:78:80:5f:92:5e:84:35:f6:5f:ad:17:47:17:98:
dd:94:de:44:37:8f:c3:5b:10:71:c3:ea:6a:a7:f8:cc:54:ce:
46:83:b7:17:52:65:e8:4a:58:4d:27:e0:e6:00:0d:c2:eb:a2:
fe:b2:68:f5:89:d2:a6:59:3c:b5:c7:69:2b:53:d7:78:f2:46:
64:d2:1f:5f:de:90:f8:f0:b4:99:00:84:fe:d9:a3:b8:dc:ce:
cc:57:74:f6:5e:05:ce:f8:75:b6:2f:c4:8e:d1:30:74:4d:9f:
ad:b1:da:11:db:0e:fc:3d:01:14:8f:64:9e:0a:12:99:cf:d1:
5b:3b:e8:fe:43:64:7b:f6:a9:a5:20:40:11:ad:01:92:76:fc:
54:74:b5:09:cd:2e:c0:af:af:20:cb:6f:e7:a2:e4:82:44:d1:
24:81:1d:2d:2e:d2:da:ab:2a:fa:81:68:e2:d3:e2:3a:a7:e1:
c8:b6:eb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:00 2025 by rpki-client