Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/v0JFr3WdQpvHOM9hOLDXKR0Ky8w.roa
File: v0JFr3WdQpvHOM9hOLDXKR0Ky8w.roa (raw, json)
Hash identifier: mOXy4dv1QvpIcvmjzGlbI4Cu+QwyEuzywp6HiBH+L+I=
Subject key identifier: BF:42:45:AF:75:9D:42:9B:C7:38:CF:61:38:B0:D7:29:1D:0A:CB:CC
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 0194228DD8BBFD2A3F218EF5E4D97E052903
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/v0JFr3WdQpvHOM9hOLDXKR0Ky8w.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199124
IP address blocks: 69.30.89.0/24 maxlen: 24
91.218.78.0/23 maxlen: 23
91.218.79.0/24 maxlen: 24
2a09:a380:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 01:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d8:bb:fd:2a:3f:21:8e:f5:e4:d9:7e:05:29:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf4245af759d429bc738cf6138b0d7291d0acbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:27:cb:8e:8b:c2:c2:e8:e8:2b:5a:24:37:
b7:66:e7:7f:de:dc:71:47:56:f5:4e:97:a1:75:04:
38:4d:f4:97:6b:0a:6e:cd:35:ff:87:88:2a:77:c1:
67:8e:6a:e7:98:4a:fd:38:5f:8e:b0:9d:e2:28:95:
1e:a7:2f:bd:9c:f0:15:6a:b4:08:f1:5a:b6:3d:03:
e9:f6:30:cc:d5:29:02:2e:ef:2a:70:0a:dd:fc:35:
ff:c0:86:e2:96:a7:9c:a0:5f:d7:a2:3f:5b:7f:27:
cf:c1:98:72:d9:81:9c:93:60:ea:d4:c3:60:32:99:
06:bb:af:a1:b1:31:81:5e:40:d7:25:9c:7a:9f:69:
5c:fd:07:b0:75:b4:68:22:fb:27:4a:d6:5d:ce:52:
d1:ba:11:3a:41:75:72:62:8e:de:e5:c3:98:2a:2a:
80:9b:f9:7f:68:29:65:7d:b8:d8:49:70:2f:75:ce:
b9:1e:15:e0:30:5a:06:02:ae:ab:fa:a0:a5:26:a1:
f0:44:61:2d:42:1b:82:27:d6:38:85:41:16:13:a1:
ec:a2:59:ed:37:9d:d9:34:a5:b9:5d:34:df:39:93:
ad:54:b6:fc:4b:92:fc:9b:59:7f:5a:e4:2d:ce:53:
4d:92:3d:f1:8f:49:78:10:df:39:38:5d:e3:4f:9c:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:45:AF:75:9D:42:9B:C7:38:CF:61:38:B0:D7:29:1D:0A:CB:CC
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/v0JFr3WdQpvHOM9hOLDXKR0Ky8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.30.89.0/24
91.218.78.0/23
IPv6:
2a09:a380:1::/48
Signature Algorithm: sha256WithRSAEncryption
59:0d:6d:36:a6:bf:43:ca:56:36:67:05:f7:42:5f:a0:1b:78:
27:85:87:9f:9f:4e:60:8b:03:3a:4e:84:12:32:a5:e9:34:9d:
a4:98:15:d9:9d:d2:4f:92:7f:88:df:de:27:92:8d:ef:84:fc:
d3:4d:97:36:fc:98:57:6d:aa:54:6b:5b:9a:77:fa:65:59:62:
ff:e8:09:af:de:ad:9a:af:99:26:64:e9:8c:30:08:32:fe:5f:
21:ca:9b:47:40:da:8f:16:75:cc:93:8e:e1:e5:36:ff:77:17:
f3:5a:50:b2:b2:02:c8:84:20:77:34:41:67:5e:9f:70:fe:5e:
5b:b2:59:83:60:da:7a:6e:e4:dc:b0:c2:a2:a1:7f:51:6d:ec:
ce:9d:d3:a5:d5:b0:c9:df:65:1b:b1:76:5e:6f:9a:74:84:2a:
e2:de:12:29:1b:60:ad:ea:2f:dc:7e:2d:62:f3:f5:fa:3b:bd:
bf:38:1a:7b:9f:d6:55:2f:c8:bc:73:f0:5e:5c:03:b4:3d:64:
26:ea:17:a0:45:23:e8:0e:52:20:ec:7d:fd:e7:ad:c3:31:9e:
29:27:83:f8:12:c8:60:83:a5:01:84:aa:d8:56:7c:d2:5e:95:
82:1a:6f:e7:a0:3d:1e:22:0e:6a:bc:d9:86:90:90:e1:27:08:
0f:fe:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:21 2025 by rpki-client