Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/V-RQatMmXEQ8B4EVtPbvPEv2EOM.roa
File: V-RQatMmXEQ8B4EVtPbvPEv2EOM.roa (raw, json)
Hash identifier: WSWTlhBtcyenp22CA9hG970ARcisAfMDjCJqEGCzwag=
Subject key identifier: 57:E4:50:6A:D3:26:5C:44:3C:07:81:15:B4:F6:EF:3C:4B:F6:10:E3
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 019077E33AD4C2E8DF8C4437A24AFB3F8D64
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/V-RQatMmXEQ8B4EVtPbvPEv2EOM.roa
Signing time: Wed 03 Jul 2024 09:18:18 +0000
ROA not before: Wed 03 Jul 2024 09:18:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201089
IP address blocks: 91.220.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:e3:3a:d4:c2:e8:df:8c:44:37:a2:4a:fb:3f:8d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jul 3 09:18:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57e4506ad3265c443c078115b4f6ef3c4bf610e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:7c:73:b8:21:81:50:3e:52:d7:d2:29:fc:
00:57:15:d9:a6:37:42:f4:04:9a:f4:65:16:dd:41:
86:7c:23:25:9e:5b:60:f3:9a:c7:11:32:e6:9a:72:
10:0e:9f:a6:a8:c5:40:6e:3f:ec:35:c6:c2:92:18:
06:ae:dd:be:2e:18:49:c7:73:30:6d:86:b3:77:91:
65:04:5d:1b:d9:93:70:0a:4e:ab:0a:c1:18:02:f0:
f0:b5:37:ed:ec:90:99:53:80:c9:b9:2e:c1:b4:8d:
fa:09:c9:18:98:87:51:d0:46:81:47:ae:24:73:19:
50:ea:74:52:62:fd:14:08:a4:29:fd:d7:7d:51:c8:
7c:35:40:3d:38:2e:0b:dc:90:68:b5:00:fb:b3:e1:
68:54:0c:2b:bc:30:23:02:d6:90:ae:bf:e6:c6:8b:
ea:cd:00:64:af:3a:92:da:17:85:3c:a4:77:2b:75:
49:43:63:c5:e4:35:8b:29:a5:37:1e:bf:f9:ab:ae:
ca:a8:df:f8:c6:b5:42:34:48:fd:90:96:11:6e:9a:
4a:6b:43:f8:e3:df:c6:d4:03:17:02:15:c1:ff:49:
f3:11:9e:24:65:01:2e:a2:09:69:07:d3:6c:41:0a:
b1:d2:8c:8b:e5:fe:d3:59:df:b2:f4:11:48:6e:a2:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E4:50:6A:D3:26:5C:44:3C:07:81:15:B4:F6:EF:3C:4B:F6:10:E3
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/V-RQatMmXEQ8B4EVtPbvPEv2EOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6a:8a:9f:ef:23:bb:25:44:b4:bd:76:07:7e:40:99:7a:8e:
0b:60:a0:72:e0:f9:87:ce:de:70:e6:a6:50:1b:70:d0:7d:b5:
9f:e9:70:74:d5:99:d3:46:42:02:a9:e0:8b:99:47:e2:d7:c7:
17:2d:a7:80:30:ea:49:90:3c:62:f7:d7:74:1c:1d:32:76:cb:
6d:a3:4c:9a:da:87:ee:b8:dc:c4:bd:72:ae:bc:e2:1a:ac:0e:
99:8d:fe:09:50:e6:6a:c3:e0:e8:56:5a:28:9b:1b:0f:b3:b8:
fb:c3:e4:94:ac:05:7b:55:fa:5e:87:15:88:77:ef:1f:bc:47:
06:fd:a5:9c:9b:9a:61:35:a1:b4:b3:e4:ea:2a:71:a8:6f:66:
33:47:2b:7d:aa:62:ca:83:ec:67:f1:57:ef:7c:40:72:b7:f9:
19:9d:67:d4:07:08:c9:92:ec:ef:92:73:6a:f6:52:1e:ec:f0:
79:80:00:e2:fb:35:55:c7:c8:68:ce:ef:45:b2:ca:51:77:36:
0f:f3:09:82:b7:ee:2d:bd:86:ae:e7:4d:c6:1a:39:bf:dc:72:
ec:e4:2c:e8:e0:f5:b1:43:05:b4:6d:ef:e1:78:1a:a5:ae:9b:
ef:ad:11:04:23:f9:32:29:a5:87:56:c7:9a:4a:c4:7b:66:ff:
9c:45:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:21:45 2025 by rpki-client