Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eRP0hijsl-N1Fh2OqIU1MZOQqK4.roa
File: eRP0hijsl-N1Fh2OqIU1MZOQqK4.roa (raw, json)
Hash identifier: G3qMEi21GZRX5T3VDPIhoica95BPS0fdlY69zwd0UfU=
Subject key identifier: 79:13:F4:86:28:EC:97:E3:75:16:1D:8E:A8:85:35:31:93:90:A8:AE
Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial: 018CC3B7233A6FD4307639705717AFD33509
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eRP0hijsl-N1Fh2OqIU1MZOQqK4.roa
Signing time: Mon 01 Jan 2024 06:30:08 +0000
ROA not before: Mon 01 Jan 2024 06:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31229
IP address blocks: 91.202.101.0/24 maxlen: 24
91.202.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:23:3a:6f:d4:30:76:39:70:57:17:af:d3:35:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7913f48628ec97e375161d8ea88535319390a8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:a6:84:e5:e8:bf:06:e2:2e:6c:ec:40:f4:
cc:57:92:7b:13:77:c0:c9:b9:52:30:22:7f:17:7c:
ba:85:dc:bf:b5:66:76:20:d8:a3:b2:4d:49:d2:98:
4b:fd:67:27:c6:7a:81:82:f3:42:0d:87:26:a9:c4:
53:f4:ea:69:d1:50:f5:ec:68:cc:8c:a9:60:eb:29:
59:b7:81:70:98:8f:8e:74:43:98:d8:78:e5:16:e5:
b6:90:fb:ff:41:bd:0c:90:88:08:34:b9:8a:82:9f:
bc:b0:17:a3:37:a2:23:f4:87:2d:41:ec:4f:e6:b4:
93:f7:0f:df:5d:84:4e:0f:ac:09:96:e3:6b:25:d3:
c4:2f:d6:1a:4a:1f:9a:a8:dc:d9:5f:c6:70:35:db:
69:ae:7d:6b:13:09:5a:54:16:b5:70:22:8d:84:f4:
4f:6d:f9:62:25:80:88:f3:b6:ce:b4:50:c2:56:b6:
6e:3f:62:1a:99:a9:18:e5:bb:d6:40:37:c3:64:dd:
d1:78:84:3a:0b:d6:a4:17:33:8c:74:1e:1f:68:c3:
c1:e4:1b:4d:fa:38:a7:33:22:a1:28:82:a7:72:a4:
5c:0f:d6:49:1b:40:4b:93:76:55:f5:50:c1:8a:16:
28:97:c1:62:8a:a9:5f:7a:0a:6f:c2:c5:f1:fb:cd:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:13:F4:86:28:EC:97:E3:75:16:1D:8E:A8:85:35:31:93:90:A8:AE
X509v3 Authority Key Identifier:
keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eRP0hijsl-N1Fh2OqIU1MZOQqK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.100.0/23
Signature Algorithm: sha256WithRSAEncryption
70:4a:12:67:ff:22:4c:db:0a:62:fd:94:0f:de:1c:84:06:2a:
1c:39:9d:32:51:6a:97:dc:9d:1d:ab:28:10:da:af:23:6b:b2:
70:17:5f:45:b7:25:87:f6:03:42:04:9f:11:cd:c0:47:e1:b4:
38:47:a5:04:c4:07:c2:8d:fa:0d:88:c5:f4:19:f1:0b:c7:fd:
c2:d7:5a:97:18:0b:67:40:e7:93:42:40:ab:d1:bc:53:0d:e4:
6c:e6:85:42:6b:45:6b:98:18:f5:fe:eb:0f:f5:53:81:76:c8:
cc:68:b7:45:c9:af:e9:8f:1c:ef:c5:a5:86:85:dc:38:9d:0a:
28:19:af:1b:55:b2:83:01:7d:85:bc:9b:bb:72:7e:cc:ab:c0:
42:e2:48:a5:39:15:dc:e9:f6:f8:6f:a3:68:bd:c0:9c:63:ef:
ca:9d:f0:40:b9:e6:02:42:86:c9:58:85:d4:5e:93:f3:fe:5a:
12:be:2b:b2:bf:8a:ea:06:fc:28:88:b2:33:c6:85:2c:a2:5a:
0f:9f:89:eb:ce:8e:d0:ad:38:ca:d7:90:cf:5f:18:76:51:fc:
ff:7e:f4:b7:48:7a:06:e9:5b:d4:e6:ab:c0:ab:21:a3:41:4c:
2b:04:0e:9e:1d:67:ab:e9:f4:12:24:01:78:e1:b7:6a:25:64:
ae:af:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:11 2025 by rpki-client