Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/ng0S22kifrXUnn6nx95YKijcTxI.roa
File: ng0S22kifrXUnn6nx95YKijcTxI.roa (raw, json)
Hash identifier: NyC9OWbujQtn8N2GpmLZzUQ0edjzNwCqc1TFsHEZoAY=
Subject key identifier: 9E:0D:12:DB:69:22:7E:B5:D4:9E:7E:A7:C7:DE:58:2A:28:DC:4F:12
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 018CC64B427943C22218F94E624FC044E749
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/ng0S22kifrXUnn6nx95YKijcTxI.roa
Signing time: Mon 01 Jan 2024 18:31:10 +0000
ROA not before: Mon 01 Jan 2024 18:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8917
IP address blocks: 91.230.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:42:79:43:c2:22:18:f9:4e:62:4f:c0:44:e7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Jan 1 18:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e0d12db69227eb5d49e7ea7c7de582a28dc4f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:f7:4b:94:0f:7c:2e:df:96:6c:08:20:09:
49:50:ce:b4:d7:60:97:a9:4c:3c:a7:29:3f:dd:04:
bb:67:4a:9a:3e:01:01:31:ad:16:c2:df:a3:71:60:
83:0d:05:c3:77:c2:b6:93:bf:05:c5:34:39:9c:1b:
21:82:62:cb:9b:32:87:23:27:d3:4d:e5:89:3a:fd:
32:1f:8e:98:f2:1f:a0:be:c9:02:0e:72:fd:16:dd:
7a:4c:38:52:9c:a8:50:f6:03:70:61:4f:db:d1:7e:
8e:52:b0:ef:55:4f:64:59:5e:65:0f:cb:63:36:bb:
ca:1f:34:59:6f:7a:8b:e1:47:85:55:79:a6:62:f2:
a2:e0:ef:b4:f8:08:7e:18:69:ea:ae:6b:51:73:c7:
8f:ca:9c:56:63:e6:78:c3:ef:44:b2:93:d3:44:a9:
9c:66:52:3f:f4:a1:8a:80:14:75:c7:1d:52:34:59:
87:ef:72:0c:26:50:55:00:ad:04:c6:4a:06:2e:1a:
be:a9:6b:a8:83:fe:f2:bf:3b:f0:38:9f:61:df:88:
ee:08:f4:e7:50:93:a5:34:19:1a:31:ee:ac:ee:6d:
5a:04:34:47:ba:f0:71:60:f6:b3:6c:8e:2a:de:9d:
42:b8:ec:68:56:1e:df:54:65:e6:f3:53:40:ad:f9:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0D:12:DB:69:22:7E:B5:D4:9E:7E:A7:C7:DE:58:2A:28:DC:4F:12
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/ng0S22kifrXUnn6nx95YKijcTxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ef:25:76:2f:b8:88:8d:6e:34:46:20:d9:75:59:ef:a5:cd:
54:6b:5f:82:27:4f:94:81:f9:7c:6d:a5:34:54:f8:1f:3b:ac:
6f:f9:67:cf:af:99:e2:4b:42:79:7d:6c:1d:fa:5a:a2:97:25:
93:30:97:f2:75:d4:bf:bb:7f:ef:3a:36:7c:15:61:53:37:a9:
41:69:4b:59:12:03:b4:1b:54:cc:f2:86:d2:8e:8d:47:bd:8c:
4a:62:d6:fe:52:d8:b6:32:94:7a:8d:8b:dd:05:80:94:e3:4f:
60:3f:bb:63:1f:25:c0:e0:76:b5:05:f5:33:20:f3:e6:35:48:
45:b8:8f:b1:9a:ff:30:7e:2a:83:4d:9a:88:49:5c:14:3a:74:
05:64:9f:a2:27:aa:b8:12:d9:2a:e6:36:84:02:60:86:df:f6:
f2:15:d6:f5:48:7f:74:fd:6d:72:00:68:99:0b:20:e3:e9:45:
ba:68:a1:a7:25:f3:93:ff:6d:b4:ba:25:25:39:17:8a:12:f8:
c0:c1:1d:27:5c:8a:d5:83:cc:1e:59:51:3e:7b:e7:08:f4:6f:
15:2c:c4:b1:31:38:23:5c:62:e5:2c:8c:90:14:6a:3f:44:a7:
49:b5:29:59:fa:20:6f:bf:c8:0e:ce:f2:81:24:67:73:99:ad:
6f:ea:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:45:57 2025 by rpki-client