Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/aBXJaFqpDAporcjUibZKJC5pc-4.roa
File: aBXJaFqpDAporcjUibZKJC5pc-4.roa (raw, json)
Hash identifier: gFi9QzJB5gGedW2DmEDhkYilnmE+wqYCFXPq0yPuswE=
Subject key identifier: 68:15:C9:68:5A:A9:0C:0A:68:AD:C8:D4:89:B6:4A:24:2E:69:73:EE
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 0193F00CCC63DB0D0A61C64E1B80A783933E
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/aBXJaFqpDAporcjUibZKJC5pc-4.roa
Signing time: Sun 22 Dec 2024 20:26:30 +0000
ROA not before: Sun 22 Dec 2024 20:26:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57897
IP address blocks: 91.236.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:0c:cc:63:db:0d:0a:61:c6:4e:1b:80:a7:83:93:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Dec 22 20:26:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6815c9685aa90c0a68adc8d489b64a242e6973ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:5d:ae:2c:e7:f7:38:4e:0f:0d:12:01:33:
ad:d9:5f:39:48:10:b6:07:64:23:7c:f8:38:2a:20:
e4:d9:5b:cd:3b:6c:fb:1c:2c:f6:76:ad:22:ec:d1:
28:0c:4e:96:90:42:9c:07:64:10:62:dd:39:67:f1:
b4:7a:45:b0:3c:d2:99:52:6a:68:af:31:e0:25:c1:
9c:97:1e:6b:59:0e:77:37:24:b5:11:a3:b9:ac:a0:
17:cb:63:05:34:9a:cf:20:a0:9f:79:29:3a:46:93:
a0:d8:a2:e3:8a:09:6b:8e:2d:7e:94:b6:46:a9:54:
86:44:06:c8:7b:27:bf:b4:1a:4b:19:96:9e:46:ba:
72:e6:25:5a:e9:9a:a9:53:ed:2f:1e:18:80:a4:17:
da:fa:ab:8c:2b:e5:37:36:f3:31:d2:a4:00:46:96:
17:5b:64:4c:18:39:9c:34:1b:54:31:fa:06:2c:17:
5e:29:a8:75:55:03:98:08:02:fe:09:08:94:4a:f5:
be:fb:96:ff:cf:f4:3c:bb:59:af:35:71:e9:51:58:
78:a7:96:c3:a7:2c:9f:b6:09:c6:ed:52:3e:25:e2:
79:d4:8c:74:3a:b0:56:d2:58:35:6e:0f:92:4a:75:
58:d8:94:d0:c7:7e:72:64:33:6e:e0:ae:b2:5a:1c:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:C9:68:5A:A9:0C:0A:68:AD:C8:D4:89:B6:4A:24:2E:69:73:EE
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/aBXJaFqpDAporcjUibZKJC5pc-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:58:e5:98:2c:9d:ea:53:90:0f:44:d8:4d:0f:29:dd:75:59:
c9:d6:9c:39:d4:95:4e:d6:6a:37:74:47:f2:e1:d7:56:c0:4d:
81:9b:01:12:3d:d9:6c:dd:21:33:9b:ed:dc:27:23:92:af:ed:
53:20:62:e1:f7:6d:0d:10:ae:53:9f:d1:d9:85:d0:c0:38:10:
76:d7:96:e1:24:af:6c:e9:3a:f3:93:ff:49:19:a7:d9:da:08:
1e:f9:b5:a2:56:4b:b3:76:a3:1d:00:e0:40:68:9d:3e:64:c3:
28:8a:af:08:dd:82:70:b4:f6:ba:11:8f:62:e9:65:d8:ba:b4:
db:56:ce:e0:af:3b:b2:a7:4f:da:52:8c:cf:f6:5d:e6:31:1f:
0e:6a:3d:77:2b:3b:8a:3f:62:82:c6:8a:22:f3:de:be:88:49:
ed:d1:59:ee:7a:25:11:8c:5c:8e:0e:24:48:20:28:21:d3:c1:
7a:5f:06:19:ed:9d:b4:03:65:bb:6e:9d:38:88:27:c4:ed:05:
7c:3b:ec:a9:62:5a:30:13:7f:3c:dc:15:15:96:65:4b:58:5f:
22:d3:de:0a:8d:7b:0d:e8:df:39:de:c5:a6:a1:9d:16:0b:67:
01:c8:ae:2c:0e:49:c4:86:2c:34:60:d9:03:ae:34:0c:e2:84:
b4:a8:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:09:02 2025 by rpki-client