Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/oYSlRO_sF-PWLFjxQHdEFXg1qvo.roa
File: oYSlRO_sF-PWLFjxQHdEFXg1qvo.roa (raw, json)
Hash identifier: W1ZeASeIjy9mI/4wmR2Nn7lWEu1/oQ/csuhOohWNeb4=
Subject key identifier: A1:84:A5:44:EF:EC:17:E3:D6:2C:58:F1:40:77:44:15:78:35:AA:FA
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 018CC4251A5D88FA00D3ECA7D31DE8272E33
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/oYSlRO_sF-PWLFjxQHdEFXg1qvo.roa
Signing time: Mon 01 Jan 2024 08:30:15 +0000
ROA not before: Mon 01 Jan 2024 08:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.228.74.0/24 maxlen: 24
91.228.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1a:5d:88:fa:00:d3:ec:a7:d3:1d:e8:27:2e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Jan 1 08:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a184a544efec17e3d62c58f1407744157835aafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:8f:f1:fd:7d:f6:b4:6a:51:d1:5b:67:4b:
f1:a7:e1:0a:63:ba:ef:21:cd:53:ea:05:92:c7:68:
a7:39:ed:b7:b9:c5:04:9f:ce:ec:62:13:5b:95:ce:
02:dd:26:dd:0a:85:83:e7:fb:ce:7e:d9:1c:fc:89:
28:f2:b1:dc:04:a6:a8:76:9f:14:75:9b:a6:6d:54:
06:ab:65:39:e1:1a:35:93:6f:11:77:3d:b0:c3:42:
0d:e3:4f:ba:ea:53:87:af:a8:7b:df:9f:43:1b:c7:
c4:bc:a0:20:f5:87:bd:2e:97:62:45:14:2a:96:ba:
e7:6d:d4:1a:14:3b:b6:70:c2:80:7a:a3:fe:17:51:
72:26:05:74:4a:bd:bb:7f:d1:bf:0f:41:4f:3b:06:
da:21:5c:d4:e0:a4:0f:25:db:7c:71:17:2a:6f:aa:
85:17:bc:1a:92:79:54:d0:53:39:61:9b:b9:6c:8b:
e0:46:b1:dc:6e:bf:87:bf:13:4d:e8:df:0c:d8:e4:
a0:53:f4:2e:cd:b9:4d:d0:f0:06:1c:bd:7e:ed:c6:
ac:75:e9:65:7a:81:59:5c:25:88:1c:5c:79:7a:04:
6f:5e:01:1a:c7:4d:e3:0d:f9:62:c3:e2:b2:99:50:
b4:53:4e:57:54:0a:2c:b3:00:4b:d5:4e:f8:d2:e0:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:84:A5:44:EF:EC:17:E3:D6:2C:58:F1:40:77:44:15:78:35:AA:FA
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/oYSlRO_sF-PWLFjxQHdEFXg1qvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.72.0/24
91.228.74.0/24
Signature Algorithm: sha256WithRSAEncryption
89:14:17:79:6b:e4:cc:21:91:86:76:b6:b0:4b:e1:71:4b:5e:
57:63:d5:cc:54:ec:e1:bd:fa:3e:42:b5:e3:3f:1e:9d:bd:68:
d5:92:a4:53:16:4f:ee:34:a3:14:2b:27:10:1d:21:e3:7f:35:
b4:3f:d7:3e:0d:68:48:d4:45:91:ac:17:a6:bf:e6:46:7c:d1:
cc:50:c4:c0:cc:01:47:ac:4e:ca:b2:b0:59:06:e7:6f:31:95:
f1:b6:ed:c4:57:a3:62:b1:f5:a0:6f:db:a6:df:53:83:5b:6d:
1d:33:bf:9b:b6:6c:f7:4b:0f:4b:20:b8:b1:36:38:eb:1d:5b:
d8:54:8a:fc:71:24:7b:07:2e:35:e4:66:a1:3a:29:84:64:d7:
10:60:e1:22:c1:17:f5:2f:ac:23:20:05:34:36:31:28:4b:ec:
90:7d:17:87:e1:15:d6:b9:16:db:c6:19:75:e9:d3:60:06:4a:
fb:ed:8e:75:91:16:fd:65:7d:11:ad:86:ae:17:c3:39:b4:10:
95:ee:35:f9:cf:88:4a:c1:2b:0f:55:ad:d8:d4:97:a6:cb:02:
9a:1c:dc:9c:0a:b3:06:dc:03:d4:0c:f6:ad:67:9e:83:b6:b1:
64:a8:7b:bd:0a:75:9c:62:56:4b:f0:6f:c6:6b:9e:4b:c7:aa:
c2:4e:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:45 2025 by rpki-client