Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/SDOYWfR_wtwo93VI4-jE3Ma7cX0.roa
File: SDOYWfR_wtwo93VI4-jE3Ma7cX0.roa (raw, json)
Hash identifier: l64IiRsRnVN8AYYiigqr1O3EJdTKb9Ufb8KGchhgjao=
Subject key identifier: 48:33:98:59:F4:7F:C2:DC:28:F7:75:48:E3:E8:C4:DC:C6:BB:71:7D
Certificate issuer: /CN=98752d18667dbff8422f97e1e3890e99381d09d4
Certificate serial: 0192ADEE1F523FEC139B62FAACFBCA5C6AEF
Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/SDOYWfR_wtwo93VI4-jE3Ma7cX0.roa
Signing time: Mon 21 Oct 2024 07:15:16 +0000
ROA not before: Mon 21 Oct 2024 07:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43582
IP address blocks: 91.198.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:ee:1f:52:3f:ec:13:9b:62:fa:ac:fb:ca:5c:6a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4
Validity
Not Before: Oct 21 07:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48339859f47fc2dc28f77548e3e8c4dcc6bb717d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:57:50:ab:52:56:19:ea:6d:11:aa:c5:31:
c5:7c:cb:f6:66:14:12:33:dd:f7:12:6d:0b:70:89:
b9:9e:28:c5:b7:ff:3e:1b:57:e6:ff:b3:79:42:0b:
e9:a3:63:38:80:39:3e:9c:be:c1:4c:4d:1f:c6:eb:
f5:b6:23:e4:29:5e:c5:41:8b:b6:b0:c1:a8:0c:8d:
98:1c:68:4b:36:68:5d:f8:80:7f:71:31:b6:88:7f:
da:f3:82:eb:57:64:d8:b2:c3:0b:e5:b6:08:5f:56:
43:02:aa:e4:4d:a2:28:9d:05:62:37:01:dd:ba:0f:
51:ef:77:28:52:8a:7e:5d:c9:26:4e:8d:43:9b:ff:
a3:70:f8:da:b6:21:11:0e:49:ee:a9:1b:52:56:66:
a5:0f:b4:2f:33:e6:fa:ac:11:d2:40:95:82:c1:23:
fb:12:30:5e:70:b8:70:de:26:b7:a2:64:f7:4c:15:
2b:ae:ee:ec:75:1b:61:53:f6:80:80:3b:c3:38:e2:
27:53:bf:05:42:4b:f2:3c:b6:89:dc:dc:e3:d4:44:
c2:77:ba:24:ac:83:ab:52:c7:bb:70:a7:52:9c:d0:
d5:58:ce:eb:3c:ca:39:f7:7c:d2:13:ce:13:09:ef:
4a:4b:a6:e3:af:fc:dd:88:41:e7:1a:9f:6a:1b:20:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:98:59:F4:7F:C2:DC:28:F7:75:48:E3:E8:C4:DC:C6:BB:71:7D
X509v3 Authority Key Identifier:
keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/SDOYWfR_wtwo93VI4-jE3Ma7cX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.61.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:56:cb:88:12:e0:2e:8e:5a:65:21:d4:2b:fa:3a:b9:34:b8:
4c:77:f1:88:74:24:1f:3b:0d:53:cb:c0:3f:8f:b3:aa:04:fb:
09:1f:be:85:69:8b:10:7e:22:57:dd:06:9b:3e:d2:73:4c:40:
8f:41:87:aa:b8:a9:16:7c:65:7d:c1:f7:1d:bd:00:db:aa:a5:
4a:7b:b8:df:33:ef:3b:b0:a5:d2:ca:95:ab:4a:fa:b3:e9:6f:
c2:dc:c9:b2:8c:99:c1:1d:37:b1:cf:ac:54:6a:67:85:c3:31:
0e:19:41:6a:18:fe:ff:e9:b4:88:17:3d:0d:44:a0:64:b1:02:
df:21:0b:01:f1:a8:f3:bf:13:fb:a0:ba:db:87:e8:80:26:03:
2b:67:dc:22:ef:6d:3d:0e:43:29:5c:6c:a5:2d:9c:15:fc:8e:
eb:74:ac:21:e0:06:90:2f:ba:01:c6:cb:e3:bc:e6:1a:80:ca:
b0:4f:78:c7:18:b1:68:f7:5a:4d:7e:06:be:82:a2:d3:1b:df:
21:9c:57:7f:04:fe:a7:4d:93:d5:c3:70:8a:8c:e5:34:3f:b1:
63:f6:e3:b4:37:ad:db:ce:4b:7a:ef:7f:28:0d:21:c0:94:86:
86:e7:39:af:c1:ee:d7:df:2c:a9:bd:d7:e4:4e:bb:5b:34:31:
82:7f:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:11:45 2025 by rpki-client