Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/hRucyQAT3ggvXyJiRNRenJCD8J4.roa
File: hRucyQAT3ggvXyJiRNRenJCD8J4.roa (raw, json)
Hash identifier: cNEhhnhv9+hEsTCFwq+62SkRyc3hg1spIQ2lyKZ3N+Y=
Subject key identifier: 85:1B:9C:C9:00:13:DE:08:2F:5F:22:62:44:D4:5E:9C:90:83:F0:9E
Certificate issuer: /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
Certificate serial: 0193923AD55DD7859BD84B828607065724D7
Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/hRucyQAT3ggvXyJiRNRenJCD8J4.roa
Signing time: Wed 04 Dec 2024 15:12:29 +0000
ROA not before: Wed 04 Dec 2024 15:12:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 91.199.44.0/24 maxlen: 24
2a0d:b700::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:3a:d5:5d:d7:85:9b:d8:4b:82:86:07:06:57:24:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
Validity
Not Before: Dec 4 15:12:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=851b9cc90013de082f5f226244d45e9c9083f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:5d:ac:d3:83:54:e1:0a:c0:0d:f1:82:35:
ad:74:27:3f:95:4c:ae:f2:fa:84:f6:63:ac:28:e1:
c3:ea:d3:43:d9:3a:5e:59:f5:58:08:18:f8:55:dc:
66:21:36:46:13:48:86:e6:80:fa:98:eb:2b:73:40:
80:b9:c6:2c:6a:9d:65:05:d3:91:be:b1:a9:05:e0:
56:bd:65:7c:d4:99:4d:fa:2e:39:5a:aa:bd:b1:bf:
93:e2:59:51:fa:56:41:44:f8:31:33:5e:d2:6d:16:
0e:ac:3a:b9:f8:9c:f7:0f:ce:e6:5e:32:d5:32:21:
b5:ed:9a:61:0c:fc:c8:ba:90:4e:7f:8f:88:ac:c1:
15:ef:03:c2:d2:9b:19:98:b2:ef:6a:bb:e6:04:2c:
59:66:f9:52:f2:32:1d:29:05:34:b0:22:e0:9e:b1:
fd:20:5e:88:1a:98:60:4d:20:dd:20:93:62:0b:2b:
e0:a9:25:cd:59:e2:20:97:31:34:4c:4f:75:3b:fc:
3c:78:0d:d4:76:57:20:5d:1c:cc:48:d9:90:ec:28:
d9:f0:97:0d:fa:5f:5c:a9:fb:07:78:23:72:f9:9c:
d8:54:9b:d7:fb:3d:de:6b:30:e9:e8:6a:eb:72:fd:
8b:9b:2d:77:31:49:70:69:6f:bd:cf:4b:cd:26:e9:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:9C:C9:00:13:DE:08:2F:5F:22:62:44:D4:5E:9C:90:83:F0:9E
X509v3 Authority Key Identifier:
keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/hRucyQAT3ggvXyJiRNRenJCD8J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.44.0/24
IPv6:
2a0d:b700::/32
Signature Algorithm: sha256WithRSAEncryption
24:82:2b:71:cb:34:5d:09:14:03:59:a7:2a:05:f4:d3:f0:9d:
0f:14:37:2a:f4:b0:c5:0a:b7:7a:73:7a:22:c8:25:f4:2c:e7:
28:d9:a1:55:39:76:0a:01:a0:4c:5e:39:71:05:96:38:ef:67:
e3:6a:3a:e5:88:b5:1a:a4:73:1b:8c:91:d7:b4:ed:3a:b1:02:
25:1d:f1:18:83:43:02:a9:ce:5a:56:fd:64:7e:13:de:12:77:
4c:66:bb:09:fb:cc:cd:f3:07:23:d5:03:58:5e:ac:a3:99:5e:
0d:f3:88:8b:89:82:34:40:37:87:19:8e:0e:d4:62:61:6f:fa:
9c:c5:3d:f4:ef:75:bf:14:60:4a:f3:64:21:14:74:83:4f:01:
e2:19:f2:4d:a5:07:53:9f:d3:b3:8b:b0:61:c8:d5:8d:ba:0d:
48:6d:ce:9b:14:86:ab:a0:7b:13:99:50:cf:c4:23:25:55:1f:
bf:7e:fd:2c:ce:ed:76:08:0f:2d:ad:a3:c0:97:58:0a:e7:bd:
27:6a:75:f7:7b:0f:2a:3b:a8:b4:c1:8d:c3:24:8b:88:1e:e5:
a0:73:60:76:d4:b7:0a:e4:06:ea:c6:00:43:db:fc:4d:0f:b6:
49:e9:4a:ad:c2:db:ce:07:42:41:f0:2f:55:fb:bc:71:18:12:
a0:e6:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:24:33 2025 by rpki-client