Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/9p-KMc3BFbUHCUPPC_QFLR5vdJQ.roa
File: 9p-KMc3BFbUHCUPPC_QFLR5vdJQ.roa (raw, json)
Hash identifier: qCnE6iMBw7CuFs985xkiAMCIS4X7qD85arjCKfWjI/4=
Subject key identifier: F6:9F:8A:31:CD:C1:15:B5:07:09:43:CF:0B:F4:05:2D:1E:6F:74:94
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 0196CEE3517650241CF94E04B3E97E72A208
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/9p-KMc3BFbUHCUPPC_QFLR5vdJQ.roa
Signing time: Wed 14 May 2025 13:02:06 +0000
ROA not before: Wed 14 May 2025 13:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31019
IP address blocks: 91.228.151.0/24 maxlen: 24
2a05:9280::/29 maxlen: 29
2a05:9280::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 15 May 2025 13:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e3:51:76:50:24:1c:f9:4e:04:b3:e9:7e:72:a2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: May 14 13:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f69f8a31cdc115b5070943cf0bf4052d1e6f7494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:24:d9:14:3b:c9:2f:88:c9:70:93:ec:3f:
0c:ea:f4:c0:f6:b3:18:fc:e9:5c:84:08:d0:ca:67:
2b:c8:c6:c7:d5:15:28:22:cb:a0:25:a6:cc:78:aa:
0f:82:bb:a8:52:e3:12:82:4b:9b:c3:58:b7:1a:c6:
bf:7a:01:48:58:bf:f5:d5:04:f4:65:8d:ab:ba:b9:
92:71:97:d4:dc:48:82:99:17:b0:6c:c4:39:d9:16:
a9:c3:72:0a:9f:0a:1e:1e:a1:b0:0c:06:01:c9:75:
9c:5c:04:8a:1f:26:02:4e:3c:dc:8f:81:74:da:b3:
4d:89:f2:b4:b3:03:2a:45:36:bb:a7:4f:d8:3a:39:
2a:23:df:e9:95:cf:6f:c6:6a:8a:1e:ce:c0:cf:e5:
4b:a9:a1:99:74:14:78:36:4f:da:18:7a:1c:46:33:
3e:f5:07:eb:1d:2e:3f:85:13:0a:62:13:96:d8:6c:
f7:02:f2:4b:9a:23:49:ee:4f:03:1b:0a:fa:4c:6a:
19:0d:c3:04:9b:b1:65:11:bc:a5:1c:9e:14:1f:6d:
8c:b2:39:71:c4:4d:2b:46:c0:87:91:7e:e7:aa:8b:
d7:be:41:ec:32:76:1c:e6:34:78:30:f7:81:77:53:
33:26:d8:77:36:05:2a:8e:95:2b:ca:17:43:b3:54:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:8A:31:CD:C1:15:B5:07:09:43:CF:0B:F4:05:2D:1E:6F:74:94
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/9p-KMc3BFbUHCUPPC_QFLR5vdJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.151.0/24
IPv6:
2a05:9280::/29
Signature Algorithm: sha256WithRSAEncryption
4e:29:7d:52:e6:94:7a:18:86:f2:78:0f:36:88:ef:b9:78:34:
18:a9:98:2f:e2:62:ed:c0:7a:69:39:c9:f1:d2:da:89:5e:a3:
2f:17:f7:ec:db:23:d8:76:81:42:67:c1:e9:b1:3d:d8:26:dd:
ce:21:e1:c3:17:37:41:fb:6f:ee:58:26:f5:0e:a1:81:cf:c9:
61:c7:21:c7:84:9a:d6:0f:a7:bd:22:82:7a:f7:5c:e7:24:49:
dd:64:ca:4a:22:56:ed:8e:1f:6a:e0:d7:33:5a:3a:d3:7e:ba:
2a:1a:0d:44:b7:c3:91:39:61:37:b2:69:73:d9:0a:fd:d7:58:
ad:47:13:8b:e7:78:4a:77:58:16:05:0d:93:72:29:70:48:40:
d6:48:1b:e9:8e:c7:68:d3:dc:08:cc:1d:26:41:e2:02:f7:54:
a5:37:3e:96:6f:a0:f1:b0:77:33:47:b7:56:2d:c4:f3:fd:4c:
f8:98:5e:d8:3b:8f:6e:2d:ee:9d:a8:c5:fa:f2:7b:2e:e9:9f:
9b:36:a0:96:78:c2:15:4c:20:58:5b:73:46:a7:70:8e:db:f2:
45:50:4c:70:c9:27:cb:74:84:78:45:be:e3:ba:a2:41:14:c7:
76:37:cf:d6:99:4d:84:5c:98:92:5d:2e:e2:46:3a:f7:75:38:
fd:52:81:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:15 2025 by rpki-client