Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_14UI2g3BqKnLNzfJm0N8fSPg2U.roa
File: _14UI2g3BqKnLNzfJm0N8fSPg2U.roa (raw, json)
Hash identifier: E56+XB6YoYcOX14d2HmQoXWgXyvc+u7SrBmRwfuIYkE=
Subject key identifier: FF:5E:14:23:68:37:06:A2:A7:2C:DC:DF:26:6D:0D:F1:F4:8F:83:65
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBD1B25BC808D50C7562C1F08C5762
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_14UI2g3BqKnLNzfJm0N8fSPg2U.roa
Signing time: Tue 02 Jan 2024 10:32:58 +0000
ROA not before: Tue 02 Jan 2024 10:32:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51843
IP address blocks: 91.120.250.0/24 maxlen: 24
91.120.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:d1:b2:5b:c8:08:d5:0c:75:62:c1:f0:8c:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff5e1423683706a2a72cdcdf266d0df1f48f8365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:1f:9c:bf:e4:6a:d4:34:5b:8e:4f:0c:a8:
55:93:20:da:4f:71:d0:6c:d5:24:81:24:b2:71:6d:
94:31:9b:40:6e:f8:29:db:f4:92:79:2e:c0:7b:0e:
54:71:46:05:f9:8a:d5:e2:3c:27:5f:fa:c9:db:88:
25:45:fd:0b:7b:46:65:af:ac:ce:85:c0:86:99:87:
a9:21:7b:5e:f1:f2:b1:d5:86:a7:70:1d:f6:97:68:
b5:1f:9d:84:9c:a0:37:8d:3d:2d:da:6d:36:32:41:
0a:1b:88:97:34:e7:67:b9:a4:14:13:48:0b:c5:af:
77:22:79:47:56:90:c3:1b:12:ce:c3:78:4f:55:01:
47:11:c2:4d:1f:e0:3e:80:bc:59:66:e9:4b:d3:8f:
4e:ac:a3:37:83:dc:ee:23:ed:7a:59:2f:5f:1b:04:
2e:e4:4d:33:e5:d2:d4:8c:a8:7f:03:d2:f4:b9:5a:
df:c8:a2:8a:f9:3d:e3:43:14:9f:13:0d:4b:46:b7:
59:24:d3:79:d3:57:25:37:52:a9:c4:84:50:20:aa:
63:09:e3:35:76:f6:89:bc:38:9a:bf:41:31:1c:f4:
c4:96:3f:1a:a6:0d:c8:6e:7d:bf:a8:48:a4:cd:38:
f7:9e:6f:7a:70:e1:9b:38:f2:34:54:31:25:95:45:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5E:14:23:68:37:06:A2:A7:2C:DC:DF:26:6D:0D:F1:F4:8F:83:65
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_14UI2g3BqKnLNzfJm0N8fSPg2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.250.0/23
Signature Algorithm: sha256WithRSAEncryption
85:c3:81:dc:4b:8e:73:9b:f6:2e:1a:4f:bd:34:02:1e:da:fe:
72:67:9c:c8:b5:1a:8d:0a:ea:0e:9e:64:c9:85:a1:20:b4:0c:
cf:ba:c6:69:7f:ec:b0:51:2d:68:d1:54:42:06:35:47:9a:ba:
42:6b:4b:37:75:89:5b:e0:6c:ca:a7:88:93:bc:c1:72:ac:f4:
06:ed:78:88:f5:cb:80:38:9e:48:de:a8:1f:bc:44:45:74:ba:
3f:f6:a1:5a:c6:68:e8:41:37:f8:7d:43:9d:7f:c1:a2:d1:c4:
72:f1:4c:4a:97:23:b1:62:d3:8f:ed:a6:71:7b:8d:a2:19:f3:
09:05:85:c8:ba:72:bc:da:36:a4:fe:3c:8a:7d:4a:0e:71:d7:
7c:93:20:7a:5d:08:c6:2a:7e:ad:8b:99:67:b5:03:96:31:69:
d4:f6:e7:c7:59:0e:de:a1:6e:92:9e:79:c9:35:5a:1c:77:ef:
af:95:57:1b:bd:5f:c9:e1:47:38:e2:d2:a0:5f:e6:bf:07:01:
53:f7:69:d7:f2:7f:50:22:d1:67:61:8b:c1:cb:16:c0:3e:f2:
2a:3a:14:42:f1:f5:b0:98:a1:80:38:6d:f4:00:91:1e:50:f5:
1b:f3:02:6a:c2:fb:76:9d:d9:1d:b7:e3:62:d5:82:4b:91:d0:
3d:c0:04:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:30:59 2025 by rpki-client