Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/oqbQvdl9I84PDzNaggUm88q8M7U.roa
File: oqbQvdl9I84PDzNaggUm88q8M7U.roa (raw, json)
Hash identifier: 1joXN3GA8HZfGh6BQ/u3WSnMxSIe+k8ZUko9PJ+yi1A=
Subject key identifier: A2:A6:D0:BD:D9:7D:23:CE:0F:0F:33:5A:82:05:26:F3:CA:BC:33:B5
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01942445A707C788FDC4E58F24579A430129
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/oqbQvdl9I84PDzNaggUm88q8M7U.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 91.237.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 12:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a7:07:c7:88:fd:c4:e5:8f:24:57:9a:43:01:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2a6d0bdd97d23ce0f0f335a820526f3cabc33b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:e9:a2:d6:ba:ba:28:11:f3:34:ab:4c:c2:
e3:4f:99:cc:d8:c7:44:f5:4a:fa:f5:b8:50:46:ae:
a4:cf:89:a1:af:85:89:1f:aa:f2:9b:e9:da:dd:96:
b4:d2:92:e2:ae:c9:a3:66:69:64:b5:03:ad:58:af:
0e:64:d5:0c:cc:f9:bf:26:4a:78:d7:55:11:64:8a:
e4:07:f6:af:40:a7:04:4c:75:80:ab:14:d5:1d:22:
c0:59:f3:24:4c:44:b6:de:3a:a6:48:29:6f:8b:e3:
89:aa:58:31:ab:68:e5:81:a9:6b:e9:f9:94:aa:14:
01:24:f4:66:9d:6c:7c:74:f7:cd:e0:84:fe:fc:7d:
b3:5f:35:b8:c2:08:a0:23:77:08:44:a0:fd:a3:fb:
7d:a4:4c:f0:02:44:7b:68:0b:04:36:03:37:85:10:
4c:9a:9e:df:c1:53:56:7c:f8:aa:5e:fc:f0:07:0a:
95:09:bf:3e:75:c3:56:b1:e7:5c:40:ae:99:6c:0e:
01:86:eb:6e:c8:3a:6f:b6:a7:d5:26:5b:5f:33:b3:
9c:34:6b:e3:3a:84:17:d9:8b:4f:9c:d9:f6:70:7f:
dd:f3:13:13:49:15:e8:ca:7b:15:28:34:ab:fd:2a:
53:7e:e8:a5:81:c6:a2:c5:53:36:04:bd:85:0c:bb:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:D0:BD:D9:7D:23:CE:0F:0F:33:5A:82:05:26:F3:CA:BC:33:B5
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/oqbQvdl9I84PDzNaggUm88q8M7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.119.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c3:23:3d:6e:d6:72:34:3e:ec:67:e9:0e:47:0e:ee:a0:32:
74:e8:ce:44:ee:54:85:cb:a8:8b:81:dc:34:30:9a:4d:7c:84:
85:75:5b:97:b8:11:86:15:63:9f:cf:49:69:e8:cb:45:d6:06:
a6:c4:18:0a:42:7e:2d:3a:de:b3:4a:4e:0d:17:2f:da:6e:3a:
09:4f:70:4d:0f:93:0b:36:0d:87:0b:18:ea:4b:a3:f7:d9:9e:
77:53:ef:b2:da:df:d5:6c:03:08:b8:50:3c:dc:cd:e1:b6:87:
3c:28:68:b9:cd:10:7d:d5:cd:7b:11:2a:83:16:0c:c9:76:be:
cf:58:a2:c8:f3:50:bf:50:48:5b:82:f5:7f:41:81:e9:a3:49:
e6:38:f3:83:f7:7b:67:73:64:f0:1e:78:6c:22:5b:23:8e:36:
9e:e0:b4:f5:3b:5f:de:f3:5a:2e:2c:b7:db:d8:3d:44:a8:04:
26:8e:79:90:b1:f1:b2:c3:09:6c:95:4f:c6:be:1c:56:de:90:
a8:5c:11:6f:8e:b9:bb:7b:3b:4f:e5:c8:21:43:61:f4:9d:b8:
be:d0:3a:17:70:75:c8:3d:31:01:28:66:97:84:e7:92:4f:a9:
69:ec:1f:67:e5:9c:f2:61:c9:2c:df:4a:52:ce:92:ed:f7:c5:
16:bd:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:58 2025 by rpki-client