Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/3MggJndJnyeDl-o3GYtJzT6wTok.roa
File: 3MggJndJnyeDl-o3GYtJzT6wTok.roa (raw, json)
Hash identifier: uTk8G132iAq6J95UuSQUAvVH0f3z/BCg38tlEg3kkM4=
Subject key identifier: DC:C8:20:26:77:49:9F:27:83:97:EA:37:19:8B:49:CD:3E:B0:4E:89
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01955B6D892A576AE7A18D1D2555AC16ED74
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/3MggJndJnyeDl-o3GYtJzT6wTok.roa
Signing time: Mon 03 Mar 2025 09:54:19 +0000
ROA not before: Mon 03 Mar 2025 09:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 91.213.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 10:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:6d:89:2a:57:6a:e7:a1:8d:1d:25:55:ac:16:ed:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Mar 3 09:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcc8202677499f278397ea37198b49cd3eb04e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:fb:e5:84:57:37:f5:68:ca:62:0c:a5:51:
89:f7:0e:68:31:ec:bd:f7:89:a1:47:64:8a:b0:76:
0b:44:ac:41:5a:74:dc:77:a3:89:8f:d0:04:f5:3e:
f1:62:c6:14:e6:92:ad:b9:1d:6e:43:5f:54:d5:d0:
3e:b1:26:5c:83:31:d0:5f:a4:bd:0d:0c:b9:62:d1:
dd:b1:08:bc:b2:51:4f:d8:c0:3d:62:27:5d:9b:c5:
fb:25:2f:5b:a1:1f:28:c3:62:b9:94:a2:8d:10:59:
1e:12:c5:49:a5:6a:b2:88:c3:ee:ba:e1:2c:dc:24:
ca:fc:4a:ba:5a:7d:ed:62:27:a5:07:b4:66:aa:a3:
f9:66:1c:c5:98:56:4c:a5:23:a9:0c:d8:b1:6f:99:
b4:9d:8d:15:38:05:46:02:0f:6a:8d:c4:07:3d:9a:
e0:e4:a6:90:3a:c3:d9:57:92:cb:8b:cf:88:ff:a3:
ae:d6:77:a1:c6:2e:5c:7a:55:6d:6d:da:fb:e6:40:
9a:fa:a1:a9:24:97:44:ab:67:77:c4:31:86:7b:0a:
c7:6f:da:d6:dd:e3:c8:99:50:83:92:47:7a:85:b1:
4c:c1:ad:5e:2a:75:4a:0a:ee:db:cf:3c:ff:7e:d2:
0c:17:35:2a:87:f6:83:6f:3a:42:e3:2d:f3:d7:4a:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C8:20:26:77:49:9F:27:83:97:EA:37:19:8B:49:CD:3E:B0:4E:89
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/3MggJndJnyeDl-o3GYtJzT6wTok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.126.0/24
Signature Algorithm: sha256WithRSAEncryption
16:62:5f:33:2c:05:be:ac:b3:cc:1c:65:27:dc:b6:d2:eb:a0:
50:a1:1d:d8:9f:97:12:c8:12:3b:73:89:06:a0:8f:7f:88:55:
3a:27:55:bd:ef:5d:9d:de:7c:84:b6:87:27:b9:f3:0d:da:2c:
84:67:c9:5b:ad:90:bd:50:4e:3e:8c:10:bf:3a:8a:30:14:45:
2d:45:e1:61:a4:c6:7d:d3:4d:69:8d:d7:ee:78:8c:c7:5c:6a:
3d:5a:dd:51:fa:89:6c:8f:83:09:43:6d:89:b5:37:dd:65:48:
df:e5:df:50:bb:18:5a:f2:66:3e:f9:b1:b7:e6:da:94:1a:4f:
24:6a:ad:54:a3:97:33:25:a2:b7:63:6f:f4:58:9a:53:18:c4:
38:96:e0:e6:7e:4b:94:44:84:92:44:35:1a:e1:fb:a3:9a:5b:
5e:1e:81:5c:3b:84:6b:ef:6e:9a:8e:2e:77:e9:e2:d5:31:64:
f5:bc:59:f0:56:24:f8:90:00:7d:1f:e4:0e:09:e9:f4:29:58:
7f:06:5a:68:de:b7:5b:51:15:c2:64:fc:aa:22:60:e8:06:12:
71:62:c6:69:76:78:da:9f:f0:62:ad:30:b9:ee:04:ff:eb:ab:
e9:eb:0d:c8:87:22:16:4c:c7:a6:17:5a:cc:29:6d:9a:12:e8:
33:f1:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:11 2025 by rpki-client