Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/U5hzwciDHIZPz5LbLAQQj4mPaLo.roa
File: U5hzwciDHIZPz5LbLAQQj4mPaLo.roa (raw, json)
Hash identifier: A9CDmLH9SGWXWsOb7X/cVdtpTLJlPOuoq4kxRMSCYTY=
Subject key identifier: 53:98:73:C1:C8:83:1C:86:4F:CF:92:DB:2C:04:10:8F:89:8F:68:BA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 01941FFA135434113A2A9554440A88704E48
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/U5hzwciDHIZPz5LbLAQQj4mPaLo.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208091
IP address blocks: 91.247.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 11:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:13:54:34:11:3a:2a:95:54:44:0a:88:70:4e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=539873c1c8831c864fcf92db2c04108f898f68ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:d7:dc:a8:1d:e0:a6:2f:5c:99:1c:59:69:
ff:51:3a:87:23:32:4e:64:a9:c1:5b:58:1d:14:6e:
77:ce:6b:39:fa:01:7a:64:31:a4:65:84:e0:1e:b1:
90:15:30:70:cc:e2:b7:82:3c:ad:68:59:fe:69:37:
fe:33:b0:cc:93:45:5c:e4:73:6d:c2:39:75:1f:c9:
7b:a0:35:c8:b2:c6:50:0a:d7:8f:2f:72:3a:2c:fd:
6b:12:e2:e7:03:c9:72:31:b6:24:2d:d6:af:99:13:
ee:7d:c7:58:44:15:30:3a:23:67:3f:cc:15:7b:49:
47:31:d3:c4:bd:f3:8d:70:31:19:93:35:a3:29:6f:
26:ec:2f:6c:14:ce:9a:1e:b9:47:c1:e6:ee:7c:9b:
09:0d:f9:86:9e:cd:1e:c8:06:6a:c9:28:e1:46:73:
c8:0c:75:59:83:9d:71:31:cb:98:0b:07:5d:63:23:
bc:e1:3f:b9:22:98:92:1b:bd:8c:1b:23:3f:ea:b2:
fe:92:4a:81:95:06:f1:d8:4b:09:6a:12:76:b4:dd:
39:b5:68:2e:ea:8e:3b:58:65:37:4b:64:35:24:91:
ca:55:33:97:10:b8:82:b1:85:22:d7:7d:bb:0f:d7:
9f:b4:6d:11:29:21:81:e4:e6:2b:e5:0a:e3:79:c2:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:73:C1:C8:83:1C:86:4F:CF:92:DB:2C:04:10:8F:89:8F:68:BA
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/U5hzwciDHIZPz5LbLAQQj4mPaLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.38.0/24
Signature Algorithm: sha256WithRSAEncryption
67:05:10:0c:67:2e:59:4b:09:13:a3:b0:20:e0:37:47:29:c1:
b1:c9:21:ee:d6:2f:b7:79:16:59:34:bb:4d:b1:9a:f5:57:a0:
29:bc:6a:ae:44:cf:48:c7:9c:11:55:67:06:aa:d1:8e:0f:58:
bf:a0:45:75:df:ce:4b:55:c6:f5:f7:b4:83:69:df:ef:af:f9:
e4:1d:9c:bc:b2:af:40:ff:f7:d6:e7:2f:79:8b:68:f4:26:44:
fd:fa:8c:d6:0d:9c:f4:65:89:df:45:7b:9e:01:79:b7:6b:69:
ae:f9:53:eb:42:b7:f2:23:e8:8f:6f:7a:8e:80:7c:56:95:33:
a3:3f:c6:5b:23:d7:e2:3a:1b:3c:45:95:5e:6a:e8:ee:d5:f0:
f4:54:54:1f:40:96:b7:16:9f:64:f5:69:1b:1e:94:40:77:df:
7e:92:99:d3:2a:5f:2d:50:d1:c9:79:0e:1a:82:4a:8a:38:b9:
38:4f:02:59:74:7a:ef:9c:31:d0:9e:4c:77:44:8a:65:6a:99:
52:3f:f5:61:a1:dd:17:8b:a2:50:40:34:e6:23:e8:f3:ed:44:
c4:df:b7:be:07:f0:f6:cf:c9:48:41:24:83:a3:7f:c3:9c:ff:
13:63:06:f7:31:77:98:83:87:3b:1d:bd:d6:a2:45:c7:81:a0:
84:34:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:41 2025 by rpki-client