Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/EkNOs9szgYT6w3CuDVDD3rc2mEQ.roa
File: EkNOs9szgYT6w3CuDVDD3rc2mEQ.roa (raw, json)
Hash identifier: FuckcyDp/kMNnFT0WVd5BKlp930iscc+v9fK7PWNxCU=
Subject key identifier: 12:43:4E:B3:DB:33:81:84:FA:C3:70:AE:0D:50:C3:DE:B7:36:98:44
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 0191FAF24C10220AF52A18522C0AE8113672
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/EkNOs9szgYT6w3CuDVDD3rc2mEQ.roa
Signing time: Mon 16 Sep 2024 13:07:48 +0000
ROA not before: Mon 16 Sep 2024 13:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55752
IP address blocks: 91.206.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:f2:4c:10:22:0a:f5:2a:18:52:2c:0a:e8:11:36:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Sep 16 13:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12434eb3db338184fac370ae0d50c3deb7369844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:46:6f:f9:d8:88:5c:88:7d:c4:05:38:28:
cb:2f:8f:d7:ab:ff:19:db:73:71:65:2e:e2:73:03:
6f:2e:1e:79:0e:2f:fb:96:79:ae:0c:e0:5d:a9:92:
16:42:20:9d:9f:b9:2f:d0:e5:a2:16:d8:d4:30:97:
a7:64:71:11:1c:9c:96:dc:b0:96:4a:a6:8b:9e:bd:
d9:1d:24:ff:71:28:65:77:12:0e:2a:05:4a:5b:54:
67:a0:7f:4f:16:ba:a9:76:c3:a2:4a:c8:29:9f:9c:
e2:73:d5:c8:1e:6c:49:cb:d5:3b:97:df:cb:6a:92:
6d:15:6f:d1:6f:58:83:76:55:e6:64:f8:50:16:1b:
9c:0a:da:08:b9:4e:b6:23:86:8c:8c:8a:9c:05:dd:
f0:92:08:f4:b2:15:61:13:7b:4e:f3:8b:2b:c7:e2:
ee:ff:b5:c9:cd:9e:37:b2:67:61:bb:39:69:e9:21:
df:c7:2b:9a:fc:7f:15:57:ea:00:30:25:17:6f:15:
2f:d6:64:35:6d:20:8b:b3:8f:b5:2f:9f:7d:c4:c4:
a5:72:09:0f:70:c0:8a:03:92:15:e9:e9:2d:de:10:
e5:19:d0:34:cc:ca:e2:7e:59:63:12:d6:a3:6a:d4:
3a:1e:0d:3c:69:c8:79:09:2a:c8:db:ae:61:86:b3:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:4E:B3:DB:33:81:84:FA:C3:70:AE:0D:50:C3:DE:B7:36:98:44
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/EkNOs9szgYT6w3CuDVDD3rc2mEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:eb:cd:14:d9:d8:76:55:5f:fc:fc:c6:42:5d:0c:57:79:78:
eb:67:c0:93:6a:72:e9:52:34:f9:bc:66:21:17:f9:3b:cd:a7:
d9:14:20:8a:e1:6c:33:bf:14:12:78:32:06:9b:35:62:df:57:
5b:a7:31:78:35:df:32:9a:99:d0:0a:dd:de:2a:04:b1:84:06:
73:24:04:0a:7e:61:33:2b:eb:2a:32:c2:5e:b4:0c:2e:f5:af:
b0:78:b9:f5:fc:35:76:6d:b7:b7:21:d1:55:67:5d:6c:06:bc:
76:ed:cf:3a:ab:b2:24:1d:c2:1b:e4:6f:a8:29:16:ab:fd:33:
68:72:d9:42:eb:7a:24:8d:d2:41:0c:d9:2c:26:d5:cb:a3:f0:
51:83:31:e5:f2:24:d9:7e:03:f8:fd:68:71:95:45:12:bf:c0:
bf:3d:bd:37:95:61:cc:b8:dc:02:9c:53:0e:2b:d4:6a:45:1e:
e7:2f:8b:1b:b9:25:d5:d1:c7:a5:4a:2d:1f:8b:e6:67:cf:48:
f8:f8:f7:f6:ff:d3:40:31:4b:bd:ea:cc:32:41:34:00:a9:8b:
ec:54:32:e1:86:48:a2:92:88:e7:d0:51:04:19:dd:73:23:c6:
91:ff:eb:c9:47:0a:88:40:d1:d4:d5:80:c4:f7:72:4e:cb:31:
3d:42:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:19 2025 by rpki-client