Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/W73UbYi3woD2TOKbvLcSzTES5Po.roa
File: W73UbYi3woD2TOKbvLcSzTES5Po.roa (raw, json)
Hash identifier: 6uTWp54UBIfEnxWheyPIJ7QzlJ3jD9AJ+fjmc4IwfMA=
Subject key identifier: 5B:BD:D4:6D:88:B7:C2:80:F6:4C:E2:9B:BC:B7:12:CD:31:12:E4:FA
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0192B38366A89A4293C9A625D8FCF8E30A84
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/W73UbYi3woD2TOKbvLcSzTES5Po.roa
Signing time: Tue 22 Oct 2024 09:16:25 +0000
ROA not before: Tue 22 Oct 2024 09:16:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 91.234.202.0/24 maxlen: 24
176.105.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:83:66:a8:9a:42:93:c9:a6:25:d8:fc:f8:e3:0a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Oct 22 09:16:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bbdd46d88b7c280f64ce29bbcb712cd3112e4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:87:12:2f:cc:37:70:b0:36:eb:08:70:f2:
e4:2d:f6:8d:68:a2:75:02:02:79:ac:78:5b:e0:98:
8a:24:49:6b:cc:c5:92:84:e9:61:58:45:3f:25:9b:
f6:83:f8:38:bf:8d:78:cd:8f:10:1e:d3:3b:f6:90:
9f:88:1a:40:4a:dc:d7:6f:7f:e3:0c:8d:68:3a:cb:
c3:95:33:df:f0:93:b5:86:15:ed:75:7e:eb:c3:c7:
b3:eb:93:dc:74:27:be:c8:02:97:8a:df:0e:c2:d5:
9c:f0:49:83:4b:eb:04:ae:43:72:24:9c:46:de:12:
14:7b:6e:cc:7c:5d:47:69:27:81:8f:a4:9c:3e:73:
ae:f1:80:e4:31:9b:fa:4e:c3:e3:d2:4a:be:33:24:
7c:9d:8f:f6:2e:79:62:11:59:25:16:c8:db:52:38:
7f:cb:ca:27:51:7a:48:d0:fc:69:0f:db:19:15:c6:
67:df:ab:6a:52:0d:1b:03:ba:be:d6:02:34:d6:88:
b9:b5:d6:f5:f8:dd:f4:2d:08:db:a6:46:0c:60:28:
09:8e:d7:68:b5:50:8e:b1:77:40:7e:96:63:04:39:
04:a5:a0:df:28:07:15:d7:9e:1a:57:0b:a9:9e:84:
71:48:06:f1:b3:68:d3:74:70:85:e6:e6:0f:b2:69:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:D4:6D:88:B7:C2:80:F6:4C:E2:9B:BC:B7:12:CD:31:12:E4:FA
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/W73UbYi3woD2TOKbvLcSzTES5Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.202.0/24
176.105.244.0/24
Signature Algorithm: sha256WithRSAEncryption
13:59:a9:2d:13:46:ab:35:f0:f8:30:79:1f:01:dc:6a:9b:03:
8e:e1:af:45:f0:a6:57:7f:97:6e:41:bf:4b:b3:93:37:13:55:
b1:ff:10:54:41:83:c3:98:e3:5c:5a:44:d6:a8:c8:b4:2a:32:
e1:a2:e1:0c:6e:0e:09:f2:c7:2c:fc:7c:dc:a2:a9:3b:a3:16:
ce:b1:7d:29:e5:aa:98:37:32:62:a5:08:19:65:17:a1:0d:ed:
8f:5d:69:a2:41:02:dc:30:fd:e1:41:f9:9e:51:ba:d3:c6:65:
10:35:be:66:56:71:ef:60:50:0d:11:0d:80:bc:3a:38:98:59:
fa:3b:2c:76:b6:3c:dd:ef:65:6a:07:33:cf:49:44:2b:37:d9:
be:0b:b1:ce:ca:57:ab:ec:50:b9:25:d0:fb:b4:61:ab:31:de:
0c:a1:a9:20:81:ea:fc:da:74:50:88:8c:4a:19:8f:6d:e5:38:
38:00:b1:28:d4:2c:77:33:15:ed:5e:52:dc:2e:8e:a3:37:15:
d0:71:34:9a:b8:55:a8:d5:7f:bd:5e:63:ab:40:62:a5:af:8b:
98:e9:c7:62:63:f3:f4:5a:61:01:39:3c:aa:a7:f2:e7:9b:d9:
a5:15:78:0f:9d:1a:69:d7:a0:89:83:04:d6:90:ee:eb:f8:86:
42:3e:34:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:20:18 2025 by rpki-client