Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/u77HFdNmvtWmdLHOuEMXDM2MwNg.roa
File: u77HFdNmvtWmdLHOuEMXDM2MwNg.roa (raw, json)
Hash identifier: IMPzyWb71tyukxIwrx1hEkTBciBn9J5bkRLjW75JTYw=
Subject key identifier: BB:BE:C7:15:D3:66:BE:D5:A6:74:B1:CE:B8:43:17:0C:CD:8C:C0:D8
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 018D803073DC786D05A316B58944A8A93EFD
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/u77HFdNmvtWmdLHOuEMXDM2MwNg.roa
Signing time: Tue 06 Feb 2024 20:51:15 +0000
ROA not before: Tue 06 Feb 2024 20:51:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50833
IP address blocks: 91.224.59.0/24 maxlen: 24
193.150.128.0/24 maxlen: 24
193.150.129.0/24 maxlen: 24
2a10:24c0:6c2::/48 maxlen: 48
2a10:24c0:ada1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 May 2024 23:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:80:30:73:dc:78:6d:05:a3:16:b5:89:44:a8:a9:3e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Feb 6 20:51:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbbec715d366bed5a674b1ceb843170ccd8cc0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:af:27:37:2c:2e:90:8b:0e:78:84:79:c0:
cf:17:2c:b8:14:e4:11:ec:89:6c:2e:f3:96:88:56:
92:c3:ea:56:19:5e:6b:65:3a:09:ed:f6:ce:a0:a4:
1f:e2:13:82:a7:df:81:f1:d4:39:b0:ac:cd:e9:41:
74:6d:f9:31:aa:8a:01:1b:b2:93:e3:c0:cf:66:18:
50:9d:8f:f1:d0:53:f5:69:d3:ec:df:24:06:cb:89:
de:2b:8f:95:4c:2d:50:d0:f7:dc:ca:30:72:05:e1:
6c:c1:b0:f9:09:f5:d7:a6:33:fc:8c:4a:00:47:db:
dc:61:82:e6:e1:ad:26:0e:fa:c5:42:07:96:32:09:
07:92:62:ed:63:1b:51:4b:28:fe:67:65:7f:f3:07:
65:6b:73:67:11:bf:37:a9:99:a0:51:e1:75:88:72:
19:22:ab:9b:d1:f5:28:9b:30:c7:fd:ee:10:19:64:
fb:c1:cb:4d:e5:40:3a:9f:ae:04:aa:3b:4f:78:1b:
ef:ef:02:96:b2:13:9e:ec:c2:d6:34:7b:fd:14:a8:
9a:62:85:e2:33:84:77:e1:4b:2f:e5:05:ae:65:a3:
f6:8c:a6:16:ad:8a:ed:c0:8e:f2:ed:51:4c:f7:e8:
30:fc:47:4f:61:f8:88:cc:48:9c:12:96:07:4f:b4:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BE:C7:15:D3:66:BE:D5:A6:74:B1:CE:B8:43:17:0C:CD:8C:C0:D8
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/u77HFdNmvtWmdLHOuEMXDM2MwNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.59.0/24
193.150.128.0/23
IPv6:
2a10:24c0:6c2::/48
2a10:24c0:ada1::/48
Signature Algorithm: sha256WithRSAEncryption
48:09:9a:ed:4e:38:84:4a:6b:6d:a8:ac:01:92:46:89:c1:62:
8d:5c:d8:bd:60:89:d7:43:43:a9:32:02:a2:f3:90:db:50:1f:
1b:93:5c:13:3b:78:64:f8:23:21:c7:43:4a:6e:ef:92:55:3d:
28:7a:ea:f5:10:9a:93:79:4a:84:3e:41:44:9a:4a:55:87:0a:
8a:e5:59:ce:d9:9d:25:41:d8:94:48:a7:0b:80:46:57:ee:9e:
b6:61:95:d4:b8:de:13:3e:d6:54:e9:c8:46:4f:bd:b7:2a:36:
1c:cd:88:73:ae:d5:c3:11:b4:e1:16:db:4d:b2:44:02:b6:d0:
e1:14:4c:d6:bf:91:74:e8:01:5d:bd:01:7b:db:4c:81:69:4b:
42:a5:6f:44:bc:6e:51:c4:1e:1e:6b:56:1e:c1:60:80:03:66:
32:6c:1e:d4:20:9c:fa:06:55:f0:6a:4e:92:2b:30:82:87:13:
91:d2:93:4a:cd:eb:d2:66:eb:6b:86:7d:f1:0c:42:15:71:8d:
b2:65:70:b3:9e:c2:ab:01:e7:f8:32:fd:1b:40:d4:a1:8c:11:
4e:2e:4f:1f:37:13:1e:8e:a0:19:ea:f2:c1:91:fb:78:d0:11:
33:95:f8:18:05:15:b4:d9:85:be:d4:b1:ec:6b:a2:27:b4:16:
69:38:4f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:13 2025 by rpki-client