Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/btRXDptl-u4JxJDuu7OCXatRqps.roa
File: btRXDptl-u4JxJDuu7OCXatRqps.roa (raw, json)
Hash identifier: HMC/EfG0+oQi1DQc5+TqpM6+BdoT0SMknZFVJQqy6tI=
Subject key identifier: 6E:D4:57:0E:9B:65:FA:EE:09:C4:90:EE:BB:B3:82:5D:AB:51:AA:9B
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 0193E7EAB990E2D9142BB478643319143ECB
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/btRXDptl-u4JxJDuu7OCXatRqps.roa
Signing time: Sat 21 Dec 2024 06:32:20 +0000
ROA not before: Sat 21 Dec 2024 06:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395374
IP address blocks: 91.237.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e7:ea:b9:90:e2:d9:14:2b:b4:78:64:33:19:14:3e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Dec 21 06:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ed4570e9b65faee09c490eebbb3825dab51aa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:6c:6a:43:24:51:0c:18:bd:40:19:5a:f7:
a6:1c:f4:b9:36:65:fa:33:9e:dd:7d:20:4e:f5:c2:
da:3c:43:62:f5:3b:0d:e0:68:55:e7:fa:45:25:f4:
0d:aa:5f:23:3f:f4:50:ca:85:15:43:ce:d3:8d:31:
88:5d:b0:2a:69:bd:ff:e8:09:bd:92:6d:55:66:40:
99:89:d2:eb:9c:1f:b0:ed:16:ff:4a:c9:6e:2e:90:
fe:ea:f9:5a:29:09:cf:81:7a:6d:59:f0:72:eb:8e:
a4:f5:0a:3a:35:7d:44:33:14:4b:79:25:ba:f2:e9:
24:1b:61:70:00:fb:19:de:6e:b8:fa:f7:50:44:54:
6a:a6:b3:51:b0:b9:80:91:87:69:e8:99:d1:ba:85:
7f:2a:f0:d9:54:20:08:0c:6f:57:cd:66:2f:59:92:
10:11:70:75:d3:ce:86:91:57:84:96:51:81:48:29:
5a:ca:67:b7:04:c0:6b:a0:74:22:e7:3c:aa:26:8c:
9e:3d:f0:59:f4:7c:9d:5b:94:3b:c3:5e:c3:e1:49:
6e:63:14:22:86:2c:ca:d1:9f:28:b3:52:b7:ea:59:
3c:b5:4c:b3:f1:52:c3:30:11:8a:4d:29:38:73:5e:
b9:f5:2c:06:31:97:65:f0:08:5c:51:0f:b5:2e:1e:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D4:57:0E:9B:65:FA:EE:09:C4:90:EE:BB:B3:82:5D:AB:51:AA:9B
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/btRXDptl-u4JxJDuu7OCXatRqps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:1b:5e:97:a1:0b:da:be:3c:79:55:39:8a:05:1c:8b:bb:9f:
7c:c0:05:2c:87:a6:fe:29:19:b6:c7:47:0e:8f:e6:db:5d:42:
42:b5:a6:88:7e:20:6e:74:a0:e7:fd:de:88:4f:5e:e5:47:26:
fc:2c:a4:bd:70:4d:09:d3:5b:b8:d0:10:68:8f:ea:c4:52:31:
dd:cb:90:a3:db:00:4a:5f:9f:5a:83:64:7f:78:58:95:c4:86:
73:43:8c:47:91:2f:48:a1:2c:4c:11:f8:6d:09:50:ca:c1:a6:
8f:c3:8b:3b:07:e5:5b:13:6c:09:d9:a4:b7:a9:a1:d9:a7:1a:
5c:66:41:67:25:0f:5a:f5:10:64:65:2b:6e:f4:fe:cc:4c:ba:
5c:c3:5d:17:15:6f:0f:ca:8b:63:c6:96:18:a7:e7:50:68:3a:
28:25:7e:41:f2:0b:e7:5a:d8:ad:79:54:87:b0:8e:52:f6:c8:
a9:8c:dd:76:db:f6:3e:92:e7:4b:cd:24:82:17:2e:bb:b6:02:
b9:af:b1:a5:26:7b:e2:be:35:48:3d:26:b3:f8:9a:2a:ed:f5:
5e:4c:b4:e6:7f:2f:fd:c0:37:e7:7b:ee:72:a6:ba:92:cf:09:
1e:52:bd:08:2d:eb:cb:45:0d:17:40:47:da:82:40:e2:38:6e:
27:10:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:07 2025 by rpki-client