Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/91E7O_05SydyhX_OAdaYhpMSmx4.roa
File: 91E7O_05SydyhX_OAdaYhpMSmx4.roa (raw, json)
Hash identifier: Vs5JutPn551t0MEf3Ah8sIVHtecWZPXyqzqAvTklS/U=
Subject key identifier: F7:51:3B:3B:FD:39:4B:27:72:85:7F:CE:01:D6:98:86:93:12:9B:1E
Certificate issuer: /CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Certificate serial: 01932A4F2453761842BA96D368E1A802B7D7
Authority key identifier: 4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/91E7O_05SydyhX_OAdaYhpMSmx4.roa
Signing time: Thu 14 Nov 2024 10:54:09 +0000
ROA not before: Thu 14 Nov 2024 10:54:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56721
IP address blocks: 91.227.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:4f:24:53:76:18:42:ba:96:d3:68:e1:a8:02:b7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Validity
Not Before: Nov 14 10:54:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7513b3bfd394b2772857fce01d6988693129b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:41:c3:85:ac:01:d5:7a:a5:b3:52:4c:01:
5c:92:8c:a9:b2:01:15:9a:87:78:8c:ac:e7:47:6e:
ee:33:2b:b8:20:44:a7:0e:03:f2:a4:0a:59:1b:07:
ad:89:81:ca:ca:77:57:2a:43:7e:dd:d9:d1:84:23:
db:14:9f:8e:ea:25:4a:6c:fd:98:9d:ad:d8:93:d8:
c7:c7:cc:42:5a:60:af:da:55:af:29:96:ba:bd:ee:
a3:bb:99:ba:d3:44:2f:09:57:5f:18:50:33:38:89:
48:0e:b1:39:de:58:b3:48:06:8d:c5:8c:c1:27:e9:
87:08:da:5e:20:b5:ca:33:9d:d3:b0:d1:fc:2a:f5:
e7:35:de:9a:25:55:27:14:6f:f8:36:c0:96:cd:44:
a6:a4:5e:8a:d5:f5:06:3e:2e:f4:30:49:8b:b5:d2:
4e:ff:15:84:f6:77:60:4e:8b:74:da:f6:d0:a8:3a:
25:42:c9:ab:9c:62:63:4c:75:57:1b:9b:5a:7c:1b:
ff:d9:15:3e:0d:47:26:0e:17:de:53:a9:8e:2f:b1:
40:8f:24:e0:79:b4:b3:fe:49:75:67:d3:7b:b6:77:
b7:4b:09:74:dc:19:9a:87:b9:97:74:da:4f:61:87:
98:aa:83:38:87:83:c6:e0:bc:ae:15:dd:bc:d9:15:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:3B:3B:FD:39:4B:27:72:85:7F:CE:01:D6:98:86:93:12:9B:1E
X509v3 Authority Key Identifier:
keyid:4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/91E7O_05SydyhX_OAdaYhpMSmx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.23.0/24
Signature Algorithm: sha256WithRSAEncryption
67:61:1e:29:9e:66:37:28:9b:16:e7:dc:45:e2:f5:43:60:74:
38:10:63:bc:61:50:8f:e3:9d:fc:df:0a:cd:55:4c:b3:1b:7e:
f0:c2:6b:32:70:f2:b0:f3:7e:bd:a1:b4:b8:8f:19:23:01:aa:
ce:3e:be:e3:96:7d:b8:aa:93:43:f7:de:c6:5a:f4:fe:89:7f:
ce:66:de:4d:b8:a7:c9:b7:ee:a7:97:d1:44:d9:51:d7:c5:0f:
52:d0:1f:36:62:b2:00:14:2b:c7:eb:66:94:34:e2:b9:23:0c:
d3:eb:df:1a:71:2a:be:d1:84:3d:87:b7:61:8d:cb:29:d4:68:
51:b4:5b:89:a3:6b:a1:d1:8b:b5:36:cb:a8:d6:b1:4e:f9:96:
90:12:6a:85:8b:e2:97:3a:d4:0f:b8:0c:9d:3a:74:fb:f8:b9:
12:ff:ac:7c:98:dc:8f:d9:86:22:07:78:36:9a:0d:dd:bd:b0:
5b:c7:7d:03:f7:ab:70:85:f3:7c:47:09:a8:ef:80:a8:47:bd:
45:d0:d4:39:1e:78:f1:b8:1a:05:07:2b:64:45:4c:98:84:e7:
86:41:c9:ec:c7:bb:7a:de:be:f1:7b:de:6d:36:39:30:1c:1f:
b2:79:62:61:b7:94:64:a2:49:12:a7:d2:ed:8b:76:34:ed:c9:
39:3b:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:29:01 2025 by rpki-client