Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/6iF1pt9zxUAfuGvcG8vQRD0e1K8.roa
File: 6iF1pt9zxUAfuGvcG8vQRD0e1K8.roa (raw, json)
Hash identifier: DZ3FJqMlor38OIx5BqTdbnKJHZlkGGOzz5FlM9HEPCU=
Subject key identifier: EA:21:75:A6:DF:73:C5:40:1F:B8:6B:DC:1B:CB:D0:44:3D:1E:D4:AF
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 019218AC2A11522B491E42D7552524FF032B
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/6iF1pt9zxUAfuGvcG8vQRD0e1K8.roa
Signing time: Sun 22 Sep 2024 07:39:48 +0000
ROA not before: Sun 22 Sep 2024 07:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41152
IP address blocks: 91.227.246.0/23 maxlen: 23
193.148.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 22 Sep 2024 09:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:18:ac:2a:11:52:2b:49:1e:42:d7:55:25:24:ff:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Sep 22 07:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea2175a6df73c5401fb86bdc1bcbd0443d1ed4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:48:5e:04:c8:cd:65:ad:86:5c:5b:ea:f9:85:
4c:f1:c3:93:c5:75:ce:dd:9f:43:68:19:ab:6e:9b:
82:7e:de:8c:08:7d:fc:5b:38:01:3c:d1:6d:54:e2:
a5:6e:4b:1d:ae:a4:66:f0:c7:d0:11:d8:5c:a8:60:
d6:e2:c9:e3:6c:8d:5d:d4:d7:62:20:65:79:ec:7f:
7e:e5:4f:e2:ee:d1:54:59:85:eb:6d:87:f1:e0:34:
43:8b:39:f0:de:37:71:e7:ec:eb:ae:9a:9a:9f:3f:
fc:de:16:b1:da:14:2c:a0:7a:73:3a:62:98:96:da:
cd:7e:f7:85:52:91:f6:16:53:34:eb:99:81:2f:7c:
5c:c2:4c:ee:25:5c:4a:f8:09:77:eb:dd:cf:4a:50:
c0:f6:15:69:7d:0e:82:cd:d8:53:55:a5:21:29:77:
fd:3c:57:63:a7:45:a1:aa:c2:fe:4c:a7:19:22:98:
90:59:53:61:a3:6b:9c:e5:a5:56:da:35:e4:a2:52:
ae:22:6c:1c:18:15:5c:d5:da:0c:b5:f8:2e:c4:63:
92:8d:e3:98:81:89:e1:d9:75:fc:80:85:d6:14:41:
e1:a5:fd:35:5d:ad:04:de:6a:c5:39:3d:38:cf:59:
8b:2f:5d:65:8f:b5:6f:4e:86:07:8f:59:a8:26:cf:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:75:A6:DF:73:C5:40:1F:B8:6B:DC:1B:CB:D0:44:3D:1E:D4:AF
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/6iF1pt9zxUAfuGvcG8vQRD0e1K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.246.0/23
193.148.64.0/22
Signature Algorithm: sha256WithRSAEncryption
86:e5:3b:1b:d1:47:68:51:67:19:61:92:5b:3f:17:46:20:e8:
a6:8f:9a:b2:b9:0c:84:84:4b:4c:ed:7e:64:c0:20:3d:c9:fa:
64:6d:18:c7:73:16:cc:9f:1c:23:ea:a7:5e:61:09:95:f7:b5:
41:21:56:57:7f:87:c8:70:25:0b:c0:67:56:e2:c3:94:5d:e6:
1e:3b:75:0e:89:65:6a:8f:41:19:51:ac:66:e9:73:94:64:ea:
e7:2f:c5:6c:0e:b1:72:5d:ed:7b:32:3b:71:cb:ec:e1:3a:0f:
b0:c7:0d:0e:dd:b8:54:cb:29:a5:e0:90:a5:78:48:d9:18:50:
e6:87:b4:77:be:12:f7:a1:63:aa:c4:fc:b8:1f:11:31:34:66:
1e:e0:95:cc:91:62:27:c5:fd:d6:de:59:eb:c9:1b:89:cd:be:
e1:0c:d2:df:ab:39:5e:9b:bb:b4:be:64:3d:28:98:0b:5b:44:
3c:a9:0b:06:53:c0:c5:c5:dc:57:0d:40:ae:8a:61:dd:1a:0a:
c1:f1:62:c3:dc:b6:b5:bd:9f:6d:13:bc:2b:3c:fe:4d:76:69:
3a:40:a0:4e:73:c5:f6:5c:51:77:1e:41:74:33:c8:dc:55:7d:
79:d9:80:05:93:5f:45:24:e3:9d:f8:cf:52:0d:e8:d2:db:03:
eb:7f:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:50:10 2025 by rpki-client