Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/_C6uo5bttBB4GIQvrIXqZn9gI98.roa
File: _C6uo5bttBB4GIQvrIXqZn9gI98.roa (raw, json)
Hash identifier: 27DtKk790z3RXtd6Y19Xan8dAkYdBzq0VotWhYi1Erc=
Subject key identifier: FC:2E:AE:A3:96:ED:B4:10:78:18:84:2F:AC:85:EA:66:7F:60:23:DF
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019424B2B6C6BFEA5B5D36B14554DAEC2519
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/_C6uo5bttBB4GIQvrIXqZn9gI98.roa
Signing time: Thu 02 Jan 2025 01:47:59 +0000
ROA not before: Thu 02 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44050
IP address blocks: 91.196.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 16:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b6:c6:bf:ea:5b:5d:36:b1:45:54:da:ec:25:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Jan 2 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc2eaea396edb4107818842fac85ea667f6023df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:79:f0:96:90:b8:81:da:73:cf:e9:87:cc:
02:0f:0e:fd:90:6b:11:ce:71:39:3c:cb:ad:1b:29:
30:f0:9a:6b:e4:71:57:e1:a9:e2:d9:5e:d4:be:72:
f5:60:62:47:06:0b:57:d7:c9:19:b4:1e:3b:3c:a0:
27:d0:c2:10:e2:9a:29:f1:1c:a5:01:f7:b7:eb:5a:
cd:3b:5b:74:86:b8:06:e2:67:23:9e:e1:05:49:83:
5a:6d:4e:a4:03:c1:c0:d1:b3:f9:b7:d4:31:a9:56:
a1:5b:4a:47:25:e7:8c:52:2d:7c:33:74:8e:f0:96:
0c:e3:be:c7:8c:d2:2f:3f:3a:5b:66:ce:b2:fa:87:
2e:15:c8:bf:7f:3b:9b:56:5a:b7:6e:5c:47:21:ba:
52:a9:a4:f3:4e:02:75:83:52:d7:bd:ba:bd:61:20:
60:fb:9f:72:e9:14:d9:f8:a4:d2:b9:c2:1f:48:25:
f8:41:8d:82:fd:30:93:e2:31:d9:04:36:4e:af:44:
06:af:de:6a:dd:e1:a4:52:a7:03:31:5c:ac:f4:48:
0c:6d:d4:26:e9:73:30:5b:90:db:01:a5:b3:be:99:
eb:b1:dc:5d:0a:5d:59:4c:09:a3:46:fc:81:de:ea:
81:7d:c6:71:8b:66:e8:9b:05:6c:88:4a:66:9c:0c:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2E:AE:A3:96:ED:B4:10:78:18:84:2F:AC:85:EA:66:7F:60:23:DF
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/_C6uo5bttBB4GIQvrIXqZn9gI98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.255.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d3:90:15:66:4c:28:54:09:bc:fc:e0:53:e0:35:44:33:8b:
8a:c1:c4:2b:6f:25:08:fc:6c:3b:42:11:ef:4b:1d:c9:a5:38:
55:64:d4:d1:07:50:1f:f9:ba:78:1a:30:56:a3:74:1e:85:ff:
e7:f1:0c:57:c1:3c:7f:e9:3f:8d:61:df:6a:31:64:c2:2c:d9:
2b:60:8b:12:c9:32:c9:e3:58:dc:8e:92:0b:67:ad:90:4a:39:
15:37:5e:91:30:c6:c5:fd:5a:ea:bc:dd:77:69:bd:15:e0:a7:
f3:6b:f3:6a:01:bc:79:31:03:7f:9e:0b:35:7b:c5:db:13:84:
45:76:1a:5d:e8:06:12:28:f5:78:1d:27:7f:85:a4:60:b5:b8:
46:07:93:a0:59:c8:3a:66:f2:2b:50:b4:c1:12:dc:77:1b:27:
5c:4f:c3:20:02:3d:43:0e:81:9f:87:e7:76:d0:8a:9c:88:d3:
81:16:45:e6:b0:55:09:22:1c:25:63:dc:17:a3:5a:48:c9:20:
2e:27:bf:6d:4f:b6:24:dd:53:ed:74:0d:db:af:63:42:81:8a:
02:15:56:b7:5e:da:8e:68:5e:bb:2c:63:5e:a0:ae:c4:29:66:
88:f2:f1:ed:cb:e3:d8:75:f5:4e:32:9e:97:95:db:47:5c:46:
ee:f8:d8:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksrbGv+pbXTaxRVTa7CUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NWQ0ZTYzMTdjNjJhMWE2OWRhYzMxZjRmMTQzZTNiYzI4
MGJhNjIwHhcNMjUwMTAyMDE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzJlYWVhMzk2ZWRiNDEwNzgxODg0MmZhYzg1ZWE2NjdmNjAyM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT958JaQuIHac8/ph8wCDw79kGsR
znE5PMutGykw8Jpr5HFX4ani2V7UvnL1YGJHBgtX18kZtB47PKAn0MIQ4pop8Ryl
Afe361rNO1t0hrgG4mcjnuEFSYNabU6kA8HA0bP5t9QxqVahW0pHJeeMUi18M3SO
8JYM477HjNIvPzpbZs6y+ocuFci/fzubVlq3blxHIbpSqaTzTgJ1g1LXvbq9YSBg
+59y6RTZ+KTSucIfSCX4QY2C/TCT4jHZBDZOr0QGr95q3eGkUqcDMVys9EgMbdQm
6XMwW5DbAaWzvpnrsdxdCl1ZTAmjRvyB3uqBfcZxi2bomwVsiEpmnAyWEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwurqOW7bQQeBiEL6yF6mZ/YCPfMB8GA1UdIwQY
MBaAFLVdTmMXxioaadrDH08UPjvCgLpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTRmMzYtYWM1YS00MjkyLTgxNDAt
NTM0ZDc4ODk4ZDZiLzEvX0M2dW81YnR0QkI0R0lRdnJJWHFabjlnSTk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NTRmMzYtYWM1YS00MjkyLTgxNDAtNTM0ZDc4ODk4ZDZi
LzEvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8T/MA0G
CSqGSIb3DQEBCwUAA4IBAQA005AVZkwoVAm8/OBT4DVEM4uKwcQrbyUI/Gw7QhHv
Sx3JpThVZNTRB1Af+bp4GjBWo3Qehf/n8QxXwTx/6T+NYd9qMWTCLNkrYIsSyTLJ
41jcjpILZ62QSjkVN16RMMbF/VrqvN13ab0V4Kfza/NqAbx5MQN/ngs1e8XbE4RF
dhpd6AYSKPV4HSd/haRgtbhGB5OgWcg6ZvIrULTBEtx3GydcT8MgAj1DDoGfh+d2
0IqciNOBFkXmsFUJIhwlY9wXo1pIySAuJ79tT7Yk3VPtdA3br2NCgYoCFVa3XtqO
aF67LGNeoK7EKWaI8vHty+PYdfVOMp6XldtHXEbu+Nj0
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:07 2025 by rpki-client