Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/mHRLh6jtBTfS5gXFDJPYQX91dxs.roa
File: mHRLh6jtBTfS5gXFDJPYQX91dxs.roa (raw, json)
Hash identifier: S/VkxIanY6DxxXLpEWgrVKuAXP8Ol97ey3OaX393Rjg=
Subject key identifier: 98:74:4B:87:A8:ED:05:37:D2:E6:05:C5:0C:93:D8:41:7F:75:77:1B
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019580A483D8698777FCFCA2D32F27E22C9A
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/mHRLh6jtBTfS5gXFDJPYQX91dxs.roa
Signing time: Mon 10 Mar 2025 15:20:20 +0000
ROA not before: Mon 10 Mar 2025 15:20:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201032
IP address blocks: 80.91.74.0/24 maxlen: 24
80.91.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 16:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:a4:83:d8:69:87:77:fc:fc:a2:d3:2f:27:e2:2c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Mar 10 15:20:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98744b87a8ed0537d2e605c50c93d8417f75771b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:cb:3f:c5:1e:e8:8a:68:20:5a:8f:0e:ee:
c2:9c:a4:4c:7b:34:1e:c8:68:58:e7:8b:f5:09:3f:
f1:55:d1:57:25:a4:3a:35:13:a9:61:04:34:21:28:
24:e8:13:72:29:58:35:d0:e7:16:fc:d0:bd:c7:da:
cb:6f:9f:c9:bc:a9:9e:f1:19:ec:7e:7b:00:83:04:
c7:82:de:d8:15:7c:7b:f5:84:82:0f:49:e1:ea:1a:
97:cd:87:60:4d:53:c2:7c:84:be:90:1c:fd:63:fa:
c2:11:09:8e:e2:eb:cd:48:0f:4e:0a:f2:15:d1:ab:
cc:9a:f1:82:39:1a:30:6f:29:02:06:10:46:df:24:
c4:79:bc:3d:31:a5:61:67:b1:ba:9b:97:cc:7d:58:
8c:4d:40:e4:75:b0:2b:f9:6a:fa:5d:35:91:bd:67:
b3:18:96:b1:fc:f2:b0:18:25:1a:a8:28:cb:72:d3:
fe:9a:c3:22:f4:5b:58:fc:01:6f:75:38:4a:68:6a:
46:a3:58:f2:16:bd:61:00:48:e0:2d:3d:2b:06:53:
5e:9e:dd:89:8f:73:4e:7f:c1:35:50:09:57:0e:e7:
a6:6f:d8:08:f6:fe:a9:4e:5b:74:bb:b6:25:83:7c:
50:74:6b:e9:9d:17:42:c0:92:2f:bf:e8:cc:eb:02:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:74:4B:87:A8:ED:05:37:D2:E6:05:C5:0C:93:D8:41:7F:75:77:1B
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/mHRLh6jtBTfS5gXFDJPYQX91dxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.74.0/24
80.91.79.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d8:25:c9:14:26:ae:ba:3b:9c:fd:35:82:27:eb:9e:4c:2d:
8e:c6:ee:9d:2b:0a:a4:60:46:47:f9:fc:1f:ea:ee:cc:ac:d1:
9c:c5:78:6d:e6:c6:93:01:ff:c6:5a:10:84:e5:32:62:87:55:
85:07:08:7b:04:c1:fb:74:15:4f:00:32:ab:23:de:3d:a3:10:
04:20:e3:31:07:6c:74:a7:99:c4:e4:f7:ad:8e:09:49:15:db:
1f:98:fb:47:fd:9b:99:e3:c1:26:cd:56:b6:d7:a7:7a:4a:34:
99:4e:af:46:35:26:26:5b:16:87:12:05:1f:83:32:26:d5:7f:
a2:36:e6:b7:77:88:eb:cc:12:ad:33:bd:db:78:d6:8e:59:08:
b5:15:81:0c:14:9a:29:82:02:30:b7:b1:bf:9b:0c:92:88:e4:
76:4c:77:03:72:26:6a:fa:de:5e:68:8d:69:1d:28:f7:6d:dd:
7c:49:72:bd:30:e1:ad:5e:e4:74:f3:cb:ea:da:55:3a:d1:c2:
b4:a2:b0:7a:8b:a8:96:a0:80:3c:6e:91:19:f6:b8:89:a0:7d:
ed:91:21:7e:0d:6c:be:9c:fb:26:a7:78:6c:3b:25:96:6b:cf:
da:8e:9a:fe:9e:52:0d:12:25:62:f5:71:ce:a8:c7:76:44:02:
57:ca:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:07:12 2025 by rpki-client