Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/bZc8SS4gZDfbDlrMyhOU6_swaLI.roa
File: bZc8SS4gZDfbDlrMyhOU6_swaLI.roa (raw, json)
Hash identifier: RA+bYQzbHDvP8AF1PFL4CRjQRmxqFazVFlPKcZW6IdI=
Subject key identifier: 6D:97:3C:49:2E:20:64:37:DB:0E:5A:CC:CA:13:94:EB:FB:30:68:B2
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 018CC49244840E68F1BE96E4702EF237DD7B
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/bZc8SS4gZDfbDlrMyhOU6_swaLI.roa
Signing time: Mon 01 Jan 2024 10:29:29 +0000
ROA not before: Mon 01 Jan 2024 10:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13026
IP address blocks: 91.222.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:44:84:0e:68:f1:be:96:e4:70:2e:f2:37:dd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 1 10:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d973c492e206437db0e5accca1394ebfb3068b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:9a:ef:99:48:84:76:29:6e:37:92:fb:b6:
e9:8d:72:db:99:46:64:33:cb:92:a6:8e:0c:08:87:
6b:e1:e1:db:1e:4e:c7:8a:07:4a:d4:fe:7b:34:59:
c4:c4:a0:86:84:46:37:e6:77:69:a9:d7:d8:7c:da:
ac:bd:2b:f6:bf:42:3d:70:72:4a:4b:4a:6a:c0:9a:
34:4b:a8:26:f3:bd:2c:24:cf:f6:13:e6:09:5e:d8:
b0:de:92:26:e0:4b:5b:cf:b1:86:14:63:84:1d:e0:
f3:1b:f2:2c:4a:67:89:7a:7a:50:3b:23:fe:56:83:
d6:fd:27:46:2a:de:25:33:0b:0a:6d:b5:3f:46:cd:
25:b0:b1:b4:53:33:70:d6:48:09:df:4c:79:94:33:
b6:7f:f9:55:56:60:08:ee:ce:4a:04:1a:0b:ca:57:
ff:fb:21:ad:7d:c9:20:87:58:fe:e1:36:cd:a9:4d:
47:b1:11:c4:52:45:f0:21:51:af:68:2d:bb:bb:92:
0d:e4:12:5a:0a:c7:0b:4f:eb:e0:33:23:1d:a4:e9:
84:98:4a:1c:96:2d:d1:13:7c:bf:77:49:27:fe:1d:
14:01:79:54:09:6e:e6:ca:02:73:17:ae:56:09:1d:
bd:38:64:f9:fd:f4:9c:16:c7:a4:77:9b:ae:3a:f7:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:97:3C:49:2E:20:64:37:DB:0E:5A:CC:CA:13:94:EB:FB:30:68:B2
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/bZc8SS4gZDfbDlrMyhOU6_swaLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.92.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:65:3e:69:38:55:23:9e:63:d2:5e:2c:70:d1:10:9e:9f:46:
2a:f4:88:02:0f:96:f1:9c:98:20:ca:54:e8:a4:0b:0f:11:13:
0c:3c:2a:fb:f1:2a:bf:ab:87:dd:5f:ae:e3:ac:1d:84:bc:d4:
17:fc:f7:00:2c:69:61:81:be:b0:4c:9e:47:93:98:8e:e1:11:
b4:53:08:56:c3:bb:b0:e1:97:7f:19:6c:60:90:88:5a:95:fd:
90:ab:03:d2:67:3a:4c:a9:a3:87:94:2f:e9:a8:f8:a0:86:b1:
aa:da:e6:75:be:3d:86:67:22:1e:22:8d:ac:5c:2b:15:d7:89:
6a:0f:4a:a9:67:9e:2d:e5:4e:47:b2:30:43:af:99:f8:79:32:
cb:4c:46:1a:04:b4:6b:c8:8f:ed:eb:53:e8:fe:8c:0a:db:76:
0b:73:2a:af:66:c6:99:b6:52:c9:c3:e1:35:bc:a1:b0:df:39:
58:27:f2:48:7f:7f:db:25:a2:a6:9c:f9:89:56:1e:b0:bf:84:
ba:58:2e:15:4c:5d:14:e8:84:9a:25:73:4e:19:49:2d:20:5b:
bd:11:e4:9e:53:2c:e0:8d:e6:9e:dd:15:11:11:60:de:f9:75:
77:30:91:7b:e0:cf:28:ba:40:13:45:3c:a3:f0:f2:2c:2f:97:
e0:26:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:54:34 2025 by rpki-client