Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/YBXIkJ6h_W8STrM_i2hO4C86lnA.roa
File: YBXIkJ6h_W8STrM_i2hO4C86lnA.roa (raw, json)
Hash identifier: 5aWCPYqVjBDCEBQobKyTgCBT1dO9pb1qMNRyRW1r9Ow=
Subject key identifier: 60:15:C8:90:9E:A1:FD:6F:12:4E:B3:3F:8B:68:4E:E0:2F:3A:96:70
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 0190023CC9FDE6780ED2C94D39FC82F1E3C8
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/YBXIkJ6h_W8STrM_i2hO4C86lnA.roa
Signing time: Mon 10 Jun 2024 13:00:56 +0000
ROA not before: Mon 10 Jun 2024 13:00:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 91.223.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:3c:c9:fd:e6:78:0e:d2:c9:4d:39:fc:82:f1:e3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Jun 10 13:00:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6015c8909ea1fd6f124eb33f8b684ee02f3a9670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:9d:9d:4b:18:70:cd:3d:f3:be:7b:5c:04:
86:95:e9:97:21:c4:62:3f:fa:72:48:52:4e:29:7d:
03:1d:08:90:cc:a0:b9:2a:ea:01:79:ca:5c:85:e7:
94:e2:70:3f:a5:25:96:4b:a2:87:f1:e3:fa:71:2e:
b0:9a:41:32:0f:1d:ac:97:67:41:5c:0e:09:a4:2b:
7c:78:e9:76:b7:86:a6:f6:d1:12:b7:9f:11:b1:ab:
29:6c:da:3b:3f:7d:32:37:62:6e:bb:0d:3f:98:be:
83:fa:06:a3:5d:75:a5:de:9b:3b:a2:19:e3:60:69:
71:76:28:ee:82:20:aa:4b:72:b4:03:49:0a:66:0d:
7c:a5:91:a1:32:ca:1e:29:c6:d2:c6:88:89:97:8f:
ad:63:14:62:28:8b:c8:2f:38:35:a5:2e:6b:f5:30:
90:1c:41:de:fb:a0:1e:e3:2d:27:30:02:2c:ab:eb:
03:8f:0e:0d:2a:ed:5a:26:db:0e:34:f2:9a:ce:58:
69:76:31:5c:8f:2c:f1:e3:49:cf:af:67:56:19:c2:
53:d1:d6:b5:8f:fb:91:68:cf:2d:fd:b3:05:52:4c:
f3:da:28:f2:1c:df:44:92:e1:e2:cf:dd:f1:9e:a5:
e9:a6:26:84:b7:36:93:f9:e0:89:9a:49:ea:67:32:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:15:C8:90:9E:A1:FD:6F:12:4E:B3:3F:8B:68:4E:E0:2F:3A:96:70
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/YBXIkJ6h_W8STrM_i2hO4C86lnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ea:d4:0e:d2:90:81:88:25:e5:45:e7:b0:44:48:b1:c4:fc:
fd:ac:ce:8e:23:69:4a:bf:d7:b0:84:c7:40:54:0d:74:4f:a5:
24:a6:97:e0:6d:b0:28:7a:3e:1d:8d:33:10:d3:34:be:72:c8:
9a:16:84:00:4c:73:0c:9e:c1:6f:32:62:f2:ad:0c:47:eb:5c:
65:f6:94:9d:55:f3:ca:e3:50:46:f4:14:56:03:a0:21:a5:21:
71:43:36:97:b8:c1:26:f7:63:70:69:85:20:05:34:0b:6a:4d:
9b:7a:1a:8d:27:59:3f:13:ec:fc:de:44:71:d6:61:96:1e:45:
ac:64:b7:0f:27:b5:e8:e6:f7:47:b3:f5:e4:20:5d:7e:e4:54:
0e:ea:bd:18:22:c6:3b:2d:f9:7e:99:1c:76:2f:53:38:94:4c:
92:fa:05:17:b1:28:79:98:26:ec:1d:ae:53:b1:ae:39:92:88:
75:87:03:a0:f3:4e:9a:b1:27:88:b6:e4:f8:fc:97:2a:bd:1f:
bc:eb:dd:88:14:43:ea:16:f9:4e:4c:bc:2b:63:9c:61:7d:d3:
94:73:01:25:ad:12:ea:4a:5f:a4:be:a0:b9:78:9f:10:d5:de:
f3:2b:68:14:45:6d:5f:c3:b2:c6:9b:2c:6e:ee:cc:31:d5:e7:
d9:9b:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:36 2025 by rpki-client