Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/dQx1mYcj_2y8T5JuqrTxKK0xY7g.roa
File: dQx1mYcj_2y8T5JuqrTxKK0xY7g.roa (raw, json)
Hash identifier: iTibcYmIv3jvOAJ/mTLanXbzPAbWofNd/mVdN0YukyM=
Subject key identifier: 75:0C:75:99:87:23:FF:6C:BC:4F:92:6E:AA:B4:F1:28:AD:31:63:B8
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 018FE4920BF888E9B6C4A6F16F534E970BB2
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/dQx1mYcj_2y8T5JuqrTxKK0xY7g.roa
Signing time: Tue 04 Jun 2024 18:45:27 +0000
ROA not before: Tue 04 Jun 2024 18:45:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 91.226.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 14:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:92:0b:f8:88:e9:b6:c4:a6:f1:6f:53:4e:97:0b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jun 4 18:45:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=750c75998723ff6cbc4f926eaab4f128ad3163b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:8c:7a:9b:95:27:bf:07:56:e2:2e:45:40:
09:d4:79:1b:58:f6:fa:37:04:4b:25:29:af:d5:f5:
87:51:7c:9f:12:5f:cc:85:a9:f5:de:8a:e8:00:a3:
1d:7d:32:78:3a:3b:b1:4f:13:20:1b:ac:dc:44:60:
3a:c7:a0:db:8c:59:64:1c:6a:37:6d:a9:d2:d0:d2:
19:6c:b9:96:de:6a:da:a3:42:c7:06:76:53:af:f9:
c4:58:e8:6f:8c:8c:4b:10:51:ec:06:40:41:94:5c:
be:5f:73:2a:45:6e:37:f6:18:78:73:c6:69:a1:81:
d4:df:99:3f:c4:39:50:e8:26:b5:0c:e5:82:a7:43:
03:ea:fd:9a:bf:4f:6e:01:9b:bc:84:9d:88:62:5a:
3c:44:64:5a:a1:05:6e:1d:f5:10:df:03:0c:2f:54:
16:c5:02:83:0a:f8:c3:1f:16:dd:a3:e6:79:00:83:
b2:32:1e:5f:f3:4c:cc:ce:8b:b4:79:dc:48:f7:69:
54:db:c6:8f:1a:74:58:ee:36:d0:e9:ac:62:09:f4:
f3:72:21:ee:40:60:a0:cb:dd:87:41:11:36:33:83:
b9:61:2d:0c:a1:25:ad:3e:8b:4c:d1:53:10:41:bc:
86:f5:e1:29:2a:ec:a9:15:30:5a:d6:98:4b:41:32:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0C:75:99:87:23:FF:6C:BC:4F:92:6E:AA:B4:F1:28:AD:31:63:B8
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/dQx1mYcj_2y8T5JuqrTxKK0xY7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.224.0/24
Signature Algorithm: sha256WithRSAEncryption
39:00:e3:33:01:07:cf:71:83:14:d0:2c:09:76:30:ca:f6:69:
1b:6d:fc:3f:aa:44:6a:d7:4e:b9:b6:43:2f:90:f7:65:84:be:
32:79:50:ac:ee:01:a1:55:93:b1:fe:2a:ce:69:e4:04:ad:bc:
9f:32:7f:88:59:18:9c:5b:e9:ca:8a:c9:58:2b:a3:a6:c9:b1:
b8:68:2d:40:e8:33:88:05:32:03:57:ad:86:a1:8e:22:2f:bc:
2f:9e:19:64:e9:9c:14:ec:b1:09:db:1d:54:31:32:37:7b:e2:
f5:03:40:58:8c:33:91:ec:c8:03:2a:2f:b5:1c:b4:80:64:e8:
b1:af:24:f4:ed:ba:d0:cf:6b:b7:0d:90:8a:62:8b:a6:22:86:
36:85:a0:71:5a:73:b4:0d:36:84:db:0a:f0:c3:c3:3b:0d:88:
b7:74:8c:94:d2:26:46:b8:97:23:63:46:32:c3:86:44:6a:98:
59:b7:8b:41:a9:22:1a:f6:ca:06:c0:49:65:ed:6c:a9:a7:9b:
ac:67:f8:01:ae:94:4f:40:c9:3a:a1:d1:34:2b:e4:40:77:ca:
eb:dd:7e:6f:30:4d:e3:a0:05:e3:1c:7e:be:14:33:dc:d7:80:
12:94:da:35:30:cd:2d:55:94:54:7c:a5:2b:6e:95:8a:bc:a6:
e3:e5:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:13:38 2025 by rpki-client