Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/u2NFJvJkc9eDEj_NM6T9Tr2cERM.roa
File: u2NFJvJkc9eDEj_NM6T9Tr2cERM.roa (raw, json)
Hash identifier: +NqQHA66hrLazw+W/fhfGzJ/SewL0YDDpRnrKatdXQk=
Subject key identifier: BB:63:45:26:F2:64:73:D7:83:12:3F:CD:33:A4:FD:4E:BD:9C:11:13
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 018CC801BC1A4B3567C11D9BAEBAC48D47C0
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/u2NFJvJkc9eDEj_NM6T9Tr2cERM.roa
Signing time: Tue 02 Jan 2024 02:30:06 +0000
ROA not before: Tue 02 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212755
IP address blocks: 91.233.197.0/24 maxlen: 24
2a0a:b440::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:bc:1a:4b:35:67:c1:1d:9b:ae:ba:c4:8d:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Jan 2 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb634526f26473d783123fcd33a4fd4ebd9c1113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:24:a9:b8:66:db:e8:20:a9:1e:b2:74:6a:
c4:c8:84:9d:63:78:d9:96:98:d7:ca:9f:0f:51:56:
85:66:29:1e:4a:06:05:32:20:b0:0d:bd:2e:94:63:
5d:c7:bf:8d:04:18:95:55:f2:30:c7:f4:13:e0:87:
0b:1c:77:0f:3b:62:bf:c5:78:af:0b:aa:35:db:88:
e6:99:1a:99:09:46:88:a3:3d:dd:6f:14:ce:f6:44:
cc:20:21:78:30:95:ce:72:6e:1f:0e:2f:3d:15:c0:
e0:6f:9f:21:df:50:b0:78:5b:de:0b:be:4e:19:5e:
43:0b:c7:b3:ab:9b:24:9d:d7:80:19:fb:25:c3:fc:
19:a1:4a:0b:f6:d2:56:d7:60:f4:81:04:09:64:cf:
a0:41:6c:65:ef:65:50:ba:cd:d7:55:48:29:c6:e1:
c5:bf:b3:cb:f8:45:57:ce:8f:24:cd:90:70:f2:1e:
b4:e0:5a:71:93:65:a5:5b:3d:ba:12:93:5d:10:52:
13:32:4b:39:1a:2f:62:b1:83:d9:d3:8e:6b:11:cc:
47:bc:26:ee:0f:66:51:b3:9d:87:4a:88:d0:a8:e8:
97:6f:2e:65:b5:32:62:59:f2:50:d8:5e:f2:e7:a8:
42:01:45:9d:ca:98:6a:5d:05:aa:d8:5f:39:cb:d5:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:45:26:F2:64:73:D7:83:12:3F:CD:33:A4:FD:4E:BD:9C:11:13
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/u2NFJvJkc9eDEj_NM6T9Tr2cERM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.197.0/24
IPv6:
2a0a:b440::/29
Signature Algorithm: sha256WithRSAEncryption
42:96:b7:3e:3c:9d:7e:4b:da:c2:8b:18:97:6e:af:09:21:04:
b5:34:93:65:fd:29:6e:45:82:b4:f5:48:2e:00:df:5b:f3:b2:
c9:9e:29:68:1f:44:94:32:9c:80:a8:16:b3:cb:a6:73:61:bc:
f6:bb:b0:b9:b6:62:ee:b3:e9:5d:41:c1:90:b3:2b:2d:fc:d1:
3b:9d:43:33:ba:93:f0:a8:2b:71:c1:10:6b:f1:35:24:e5:4f:
5f:3b:8b:2e:11:e0:51:71:50:f3:ab:0b:7e:6a:a0:a2:5c:0e:
b1:93:44:a7:c6:f9:79:99:75:ab:6a:b3:b2:a6:69:d6:a5:a0:
bb:91:91:37:68:18:de:04:19:27:94:cb:b5:12:0e:23:02:6b:
52:64:df:d9:83:1d:b3:8e:cc:ea:97:14:e5:ce:43:f4:45:24:
4c:30:2d:81:5f:b2:8c:7c:04:c3:43:91:1c:a3:e0:4b:17:81:
20:9e:9f:0d:46:55:58:98:05:49:4e:0e:4c:07:fa:4e:eb:92:
c5:6e:33:a2:13:b0:e3:b1:d6:80:29:07:4e:99:5b:f5:8b:37:
1c:82:69:c8:fa:3b:e4:6d:3d:30:2a:b6:97:76:c6:ad:9f:50:
ce:85:bf:7e:e2:c1:d2:7e:8f:54:2f:ff:ba:b5:46:e9:a0:49:
10:f5:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:15 2025 by rpki-client