Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/rDCX2nGnRgZTI1b80IivD4CfRUE.roa
File: rDCX2nGnRgZTI1b80IivD4CfRUE.roa (raw, json)
Hash identifier: ka19wnrDwj4LQAP11FpxBYSHnqRWnDEkzPV/S9Z/UWs=
Subject key identifier: AC:30:97:DA:71:A7:46:06:53:23:56:FC:D0:88:AF:0F:80:9F:45:41
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 018CC492E18123E62949940C2ADC90B30ACE
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/rDCX2nGnRgZTI1b80IivD4CfRUE.roa
Signing time: Mon 01 Jan 2024 10:30:09 +0000
ROA not before: Mon 01 Jan 2024 10:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15664
IP address blocks: 91.213.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e1:81:23:e6:29:49:94:0c:2a:dc:90:b3:0a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac3097da71a74606532356fcd088af0f809f4541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:48:78:63:1f:18:78:56:97:8e:22:56:ec:
7e:c4:07:3b:1c:3e:2d:21:06:a5:0e:9f:e6:45:3b:
72:bc:dc:db:4c:42:ee:d9:f3:4e:3d:42:53:84:7d:
46:d8:25:24:09:f9:56:57:fc:d4:85:f7:59:40:93:
0a:d0:a7:2e:c1:40:e5:fe:3f:59:cb:e0:61:59:33:
07:73:bb:4b:25:ce:7a:e5:59:39:3d:67:4b:e4:3b:
1e:dc:5a:a6:8c:ef:7a:48:f1:50:a9:d6:21:f4:64:
59:1d:30:05:4b:53:6d:a9:51:86:9a:8b:c9:2e:19:
b7:6e:14:fd:5f:41:50:ad:ec:ac:85:81:0e:56:36:
7d:5d:b9:b1:03:92:ac:68:ae:68:5c:3c:12:de:a1:
1b:4b:42:18:99:35:27:16:d8:2a:25:1c:fd:60:6c:
21:76:48:53:27:2f:c6:be:60:d3:84:d9:56:b0:30:
9e:94:f6:93:3b:c5:2e:d0:f4:e4:0a:12:9e:bd:81:
d2:08:c7:09:d1:90:b8:13:13:58:65:ff:37:28:a9:
94:b5:52:95:bf:b5:cc:75:5b:28:d4:f4:db:77:82:
1f:39:70:6c:1f:f3:55:9d:63:65:a8:72:a4:68:46:
f3:fc:8f:23:f4:ba:31:4f:3f:5e:6e:8a:55:33:c3:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:30:97:DA:71:A7:46:06:53:23:56:FC:D0:88:AF:0F:80:9F:45:41
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/rDCX2nGnRgZTI1b80IivD4CfRUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.89.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0f:7c:1f:e8:48:b6:a7:11:b8:19:05:d1:20:54:cd:18:aa:
0c:99:e9:c4:24:bb:d8:49:c2:ae:be:0a:47:d8:fc:de:15:12:
7b:e5:f9:fd:bd:c9:16:95:39:c5:dc:63:54:2c:5a:75:ff:32:
f4:f6:ad:f0:f4:6d:f0:02:0a:54:e3:40:25:a3:e5:7f:d0:b5:
bb:5c:f6:c9:b3:78:ff:a3:b7:13:e3:bd:3d:b2:bd:f5:b0:78:
61:6e:23:46:c6:0a:04:ee:79:92:18:18:9e:0e:00:1f:e8:8c:
cb:5b:d2:b1:e9:28:4b:ba:23:9a:77:20:db:77:db:06:aa:d8:
db:17:cb:12:7c:84:ea:7a:77:f7:36:e2:60:01:57:b0:f3:ea:
c1:65:07:a8:93:c0:37:fc:f7:dc:e8:be:b1:64:30:56:6a:ce:
30:09:0e:ec:8d:50:4d:af:6a:bd:c3:8c:0a:75:12:ab:54:67:
d7:16:d5:94:2f:99:03:49:79:5b:9d:ca:3d:f6:2a:52:fe:0a:
3a:79:f2:26:f9:05:86:c0:92:cc:2f:a7:db:81:69:2a:a7:94:
46:10:7f:96:c4:c1:92:8e:f9:c1:e0:4f:15:1d:ce:16:9d:68:
5a:af:99:c7:27:28:f8:16:99:2c:52:20:e9:32:56:ee:9d:74:
f6:09:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:27 2025 by rpki-client