Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/i1bripdMq5lhuDC3-sv4aFxcovY.roa
File: i1bripdMq5lhuDC3-sv4aFxcovY.roa (raw, json)
Hash identifier: GpIENZq0Ytb5RlhOKxgLqjCxqJcs7eD+6TsqrjLH8Ok=
Subject key identifier: 8B:56:EB:8A:97:4C:AB:99:61:B8:30:B7:FA:CB:F8:68:5C:5C:A2:F6
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 018CC8DE72CC0DB4FA59C4E1BF8C72863661
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/i1bripdMq5lhuDC3-sv4aFxcovY.roa
Signing time: Tue 02 Jan 2024 06:31:10 +0000
ROA not before: Tue 02 Jan 2024 06:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48385
IP address blocks: 91.229.66.0/23 maxlen: 23
91.209.139.0/24 maxlen: 24
193.105.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:72:cc:0d:b4:fa:59:c4:e1:bf:8c:72:86:36:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Jan 2 06:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b56eb8a974cab9961b830b7facbf8685c5ca2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:71:0c:4c:ba:bd:7d:3a:32:45:92:2d:39:94:
30:27:7a:0f:e8:84:5e:cf:d5:c1:db:f2:84:ea:04:
c5:da:5e:2e:cf:f8:3d:ce:38:51:a6:af:9a:14:9d:
d6:02:02:1b:9a:4c:da:f5:95:82:dd:0e:01:b8:21:
ed:77:fe:00:0f:a1:5b:cf:5b:4d:b6:a1:96:11:63:
28:77:77:00:67:43:cc:49:67:f5:d5:30:3d:25:b1:
1a:0b:2c:8f:23:13:83:fe:05:35:05:18:ec:0d:c8:
18:f1:8a:42:fe:48:e1:d9:8a:25:0d:9a:aa:dc:90:
45:a9:a7:03:52:62:ed:b4:25:d1:59:f9:26:32:36:
92:b6:4b:8f:83:15:49:95:46:11:0b:f5:73:f9:f5:
ac:6b:fa:93:c5:c8:f5:9a:a7:2d:d1:1a:d7:cf:5a:
4b:85:89:93:12:a9:56:e1:4e:65:52:8c:3f:a4:bd:
0a:9d:82:f5:71:12:e8:ab:2e:15:5a:8c:48:17:32:
fd:c5:94:ea:6d:cc:8f:e2:14:9b:93:bc:44:e7:14:
34:44:eb:80:b2:42:b6:a4:11:26:b1:7b:be:63:f1:
07:d1:f0:a5:3f:b3:b9:6c:5c:13:09:4e:6e:05:0d:
6b:f8:6a:c9:a0:fc:b0:cb:d5:ac:cc:37:2b:b2:f8:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:EB:8A:97:4C:AB:99:61:B8:30:B7:FA:CB:F8:68:5C:5C:A2:F6
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/i1bripdMq5lhuDC3-sv4aFxcovY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.139.0/24
91.229.66.0/23
193.105.41.0/24
Signature Algorithm: sha256WithRSAEncryption
59:23:7b:a8:a9:66:7a:39:b1:b2:ef:a8:1e:1e:43:46:35:18:
fe:04:1e:3d:55:11:df:29:34:78:2f:bb:59:85:43:85:74:0c:
6c:a4:32:42:62:41:f3:45:77:c9:a9:ea:9a:67:3b:14:f8:22:
0e:b6:c4:59:61:df:a6:d2:1c:8a:8f:5d:cc:d2:8f:14:b4:29:
f5:be:38:c7:2b:1a:64:92:b4:a5:4e:c9:70:26:34:ca:eb:29:
97:a5:be:ea:34:d8:11:d9:cc:7a:40:0d:01:e7:21:82:13:60:
52:07:de:02:fd:6e:ba:76:9f:5f:e2:f3:7e:ee:5a:49:72:7b:
c9:11:d7:a2:5b:5b:b1:bd:ec:91:16:5a:f8:35:d2:01:8e:84:
e8:fc:7a:3b:cb:2e:2e:9b:95:76:b6:76:c8:4d:69:6e:26:1d:
84:12:7e:3f:5c:08:c6:f0:6c:4a:d6:ff:8c:24:36:b6:eb:bb:
12:e8:95:e4:8c:57:c0:ba:f1:f9:b8:51:6d:c7:c9:09:8c:a1:
cb:c0:21:05:c5:d4:fe:77:93:d5:00:eb:b0:73:d5:23:85:d7:
60:b4:73:9f:85:e5:8c:02:31:4c:1f:6f:43:28:1d:c8:d7:e0:
05:06:33:83:01:01:7b:9e:f1:d0:58:c5:7f:77:de:c4:bb:00:
73:a2:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:23 2025 by rpki-client