Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/rA4S8XtChTqgQtC2T_yn16VcgjI.roa
File: rA4S8XtChTqgQtC2T_yn16VcgjI.roa (raw, json)
Hash identifier: 3939g0326mjJvaEjiAlTIOBlZxIdC9TtTAAjFEYLcm0=
Subject key identifier: AC:0E:12:F1:7B:42:85:3A:A0:42:D0:B6:4F:FC:A7:D7:A5:5C:82:32
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 018FED15EBED9D82400BBE69D5AE4F72F9B0
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/rA4S8XtChTqgQtC2T_yn16VcgjI.roa
Signing time: Thu 06 Jun 2024 10:26:27 +0000
ROA not before: Thu 06 Jun 2024 10:26:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 91.227.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jun 2024 05:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:15:eb:ed:9d:82:40:0b:be:69:d5:ae:4f:72:f9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Jun 6 10:26:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac0e12f17b42853aa042d0b64ffca7d7a55c8232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:8e:9b:26:80:f0:90:55:93:b0:ec:af:55:
46:2d:9c:7c:61:4a:71:20:3a:1e:2d:00:97:35:c2:
51:13:00:02:4e:0b:a8:73:11:38:8e:4e:54:da:fa:
ef:1b:d0:45:18:af:63:c7:1d:d7:b4:23:d0:91:f3:
03:30:1d:45:c5:27:9c:74:ed:c8:10:a8:d1:f1:80:
3f:18:0b:92:d3:e9:91:9f:56:7f:02:7e:5a:8b:f3:
2d:03:69:2d:a9:3e:10:30:8f:a8:32:f8:03:47:8f:
73:34:8a:04:8a:2e:00:be:4d:3f:76:31:c7:a9:1a:
85:76:4b:f4:75:01:71:19:9b:ed:74:e3:91:f6:8e:
e6:aa:50:6e:d4:db:19:98:42:6d:51:14:53:3e:14:
fe:83:f4:9b:18:24:f9:a2:92:81:77:38:48:58:7c:
90:89:df:1e:47:d0:11:53:3e:1a:5c:b1:31:8a:9a:
06:f7:b8:c9:f1:4a:8d:f4:16:61:0d:8e:f1:1d:2c:
34:4c:c4:24:f9:54:38:58:39:8f:e6:0d:15:58:f7:
a2:4e:37:8b:a2:52:83:17:48:8a:56:ab:b8:e1:d8:
7e:91:4b:72:9d:d9:ff:09:c7:7b:50:74:ae:cb:87:
e5:b9:56:e4:9d:66:f4:cf:d2:c0:9e:7e:4f:0f:54:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0E:12:F1:7B:42:85:3A:A0:42:D0:B6:4F:FC:A7:D7:A5:5C:82:32
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/rA4S8XtChTqgQtC2T_yn16VcgjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.247.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:13:98:65:dc:2a:79:ec:09:4f:c5:f7:65:09:77:7f:60:3e:
bd:24:f6:9b:11:01:35:cb:0c:1e:9f:68:52:f9:49:2b:0a:bd:
32:1b:87:88:1f:04:8e:51:4c:62:57:29:97:56:0a:0a:9a:44:
6a:ff:18:fb:ab:08:27:b2:ae:d2:aa:a6:b5:ed:25:d8:a3:58:
86:3d:1b:5e:38:62:90:10:91:23:7f:37:e4:4c:2d:39:cb:2f:
f9:3b:b4:96:99:8d:4b:39:4f:be:dc:57:c3:48:55:8f:c0:07:
a7:52:0a:e6:ad:7f:5b:e2:44:1b:e9:65:d1:40:6f:e8:c3:81:
ee:bc:f2:dc:ed:96:8d:73:ce:60:9b:fa:be:d3:e9:18:db:a1:
15:cc:4e:85:26:1a:96:48:ee:99:e3:10:60:08:07:0c:ea:51:
f4:f6:1c:9a:30:31:d4:bb:09:e0:0c:f4:40:4a:3c:45:f0:7d:
cd:5c:3c:19:ef:ef:4e:46:81:68:c8:a2:32:a5:9f:09:aa:be:
45:d8:cc:78:e7:8e:ab:25:e3:51:3e:b6:93:2e:41:2d:90:80:
97:fa:1d:44:b8:92:ba:db:97:8b:82:3b:1d:f2:a0:cc:dd:e9:
84:a2:bb:c1:03:20:89:da:9d:3d:ef:cb:be:a9:c8:5c:19:e3:
5d:26:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:58 2025 by rpki-client