Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/aR3N02-3JZjW81Bx80n7cHtKv7k.roa
File: aR3N02-3JZjW81Bx80n7cHtKv7k.roa (raw, json)
Hash identifier: X4xtbopRqi5gyB4wnHhdgEU14+BdZ3vt8d93PVedMmk=
Subject key identifier: 69:1D:CD:D3:6F:B7:25:98:D6:F3:50:71:F3:49:FB:70:7B:4A:BF:B9
Certificate issuer: /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial: 0192821030C1E1CFCD02505B077AD1A32A63
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/aR3N02-3JZjW81Bx80n7cHtKv7k.roa
Signing time: Sat 12 Oct 2024 18:49:11 +0000
ROA not before: Sat 12 Oct 2024 18:49:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49499
IP address blocks: 91.213.27.0/24 maxlen: 24
193.169.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:82:10:30:c1:e1:cf:cd:02:50:5b:07:7a:d1:a3:2a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Validity
Not Before: Oct 12 18:49:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=691dcdd36fb72598d6f35071f349fb707b4abfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0c:30:36:11:c2:b6:63:c0:55:c0:3a:65:ee:
5e:6c:72:0b:5a:fb:81:43:2d:0f:7a:cb:b3:52:a8:
cb:fd:d6:c8:f7:85:a9:56:e2:f0:33:2b:cb:e8:c7:
4a:39:9e:a0:f6:a2:97:e3:78:8f:aa:b9:26:d1:a6:
4f:5b:cd:31:87:b1:d3:c3:7a:6b:d3:bc:80:3e:48:
d7:12:9a:08:ac:1a:6f:7b:35:20:04:67:b2:e0:bc:
8d:8d:0c:3a:d0:b6:5e:26:03:1f:a2:8b:f4:45:43:
71:dc:75:5d:95:aa:a7:b5:4f:5d:75:fe:b3:6d:8b:
ab:f2:06:ff:d2:c0:59:d7:e9:7c:f3:39:ab:57:77:
98:cc:81:59:b5:a5:54:8d:dd:2d:f4:46:92:4b:22:
4e:c5:ca:28:77:a1:21:59:c8:bd:3f:43:0a:a4:34:
d0:1a:29:ee:21:49:58:ff:ac:80:d1:e2:f4:13:ee:
eb:79:d7:1f:3a:8f:c9:63:2f:21:5b:19:2e:82:52:
e6:b0:4b:c3:d4:a0:9a:21:17:1c:f8:a8:ec:ef:ed:
3a:3a:ac:71:08:3f:50:5e:86:f1:9f:a2:f9:3d:0a:
ad:a1:7b:c4:a2:92:7b:36:f8:e3:6b:10:a0:4b:1a:
4a:52:a1:e4:d6:ce:3a:28:4c:91:92:9b:d9:65:f8:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1D:CD:D3:6F:B7:25:98:D6:F3:50:71:F3:49:FB:70:7B:4A:BF:B9
X509v3 Authority Key Identifier:
keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/aR3N02-3JZjW81Bx80n7cHtKv7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.27.0/24
193.169.94.0/23
Signature Algorithm: sha256WithRSAEncryption
25:82:0b:2b:04:87:11:fc:26:0c:43:ac:67:e2:11:e2:00:fa:
01:5c:5a:bb:d4:c4:a2:eb:ee:2c:a8:35:08:f0:45:1d:61:35:
91:cb:25:f8:d9:9d:b3:57:3f:10:95:c0:e4:24:73:69:e4:72:
2c:ee:e8:45:af:8d:c8:3f:58:63:25:c7:7c:48:13:c4:18:bc:
bf:b1:9d:28:a4:df:5b:7b:85:ab:a8:00:d8:70:c0:c1:8d:cd:
82:7d:5a:1d:11:b4:6e:00:6b:cd:f5:d2:ff:d0:ba:d1:8e:e2:
81:4b:13:98:90:f8:52:b5:02:2d:c6:c7:34:45:53:81:23:bb:
63:76:ab:4d:85:7b:45:6d:70:bb:a3:fc:ec:05:2a:ec:49:81:
53:38:b3:fc:58:f0:22:19:c6:26:94:77:ae:b1:2e:92:56:c8:
55:63:b5:e5:00:cb:d4:34:a7:55:2b:08:b2:00:87:b5:85:b6:
3a:1c:8f:e8:51:45:10:27:2a:42:34:2d:c7:9a:99:7b:f7:a0:
ce:2c:14:8d:16:b3:7b:f7:29:19:6f:64:f1:4a:a5:1f:94:cd:
47:88:5f:4a:c9:64:f3:38:37:68:61:55:a3:a3:79:01:72:e9:
d7:53:84:9a:7e:8d:1b:97:44:0c:77:35:be:60:ff:8d:a6:a1:
86:0d:7e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:26 2025 by rpki-client