Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/kaREzjcniBuZEnF8FPK8qPhy3yA.roa
File: kaREzjcniBuZEnF8FPK8qPhy3yA.roa (raw, json)
Hash identifier: w6dKh+GVAVLsKn69hU7zP7BDWk7zbrOOPwvtiWqge2A=
Subject key identifier: 91:A4:44:CE:37:27:88:1B:99:12:71:7C:14:F2:BC:A8:F8:72:DF:20
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 0195587DE373D4AD61794DB7BA56FA12DB73
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/kaREzjcniBuZEnF8FPK8qPhy3yA.roa
Signing time: Sun 02 Mar 2025 20:13:19 +0000
ROA not before: Sun 02 Mar 2025 20:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 91.213.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 22:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:58:7d:e3:73:d4:ad:61:79:4d:b7:ba:56:fa:12:db:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Mar 2 20:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91a444ce3727881b9912717c14f2bca8f872df20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:51:33:b3:06:b1:c5:44:55:95:d3:9d:e9:
33:2d:0f:a5:c5:49:35:6f:eb:48:1f:c6:4f:49:35:
94:6d:58:4b:40:2b:1b:15:96:3f:b0:e2:f1:4b:f2:
82:32:b3:84:44:7a:0e:36:f6:3a:83:84:8e:90:c0:
22:98:d9:d4:0f:42:1e:44:eb:e9:34:07:5c:7c:77:
db:b2:a9:f0:39:87:ba:48:13:43:f3:16:e9:c8:81:
93:7b:f6:b3:97:23:09:5c:64:f6:ed:f1:be:b1:65:
9e:20:17:0e:d2:54:d0:24:db:b6:cf:ea:ae:1f:47:
fd:8c:1a:68:f0:eb:ad:ab:4c:a7:6e:1b:b4:ad:58:
4a:29:20:4f:07:38:68:6f:9a:6f:99:73:60:03:e3:
cd:e0:1d:d3:28:2f:a1:bf:62:c3:12:3a:01:30:9c:
2c:31:2c:2b:74:47:9f:e9:63:48:b9:d3:9c:8b:28:
a9:ec:0f:4c:ad:24:51:fc:06:44:29:ef:32:23:8b:
6a:81:37:e4:2d:37:c5:9c:c6:4c:9c:74:e6:01:fd:
c7:91:2a:4e:29:0f:96:f5:be:7c:19:50:97:97:ca:
b1:2a:8f:a1:29:2c:c6:3e:c6:a9:44:9c:d7:a8:b7:
db:92:6e:e3:fa:76:9d:f5:20:a0:e0:2e:2b:59:0a:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:44:CE:37:27:88:1B:99:12:71:7C:14:F2:BC:A8:F8:72:DF:20
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/kaREzjcniBuZEnF8FPK8qPhy3yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.126.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0e:31:ec:54:24:1f:dc:19:19:09:9a:0b:4c:0d:c3:74:86:
5c:7d:38:be:17:96:e9:72:a1:d2:f0:a0:f3:90:83:48:af:a7:
54:36:bb:6c:24:0a:60:ec:c5:19:45:09:b6:bc:4d:2f:c4:9c:
7f:aa:df:61:70:21:9a:2e:9f:3a:9b:50:09:eb:9d:e4:6b:ec:
6f:3a:04:50:98:85:e9:e6:97:b2:9f:f1:ca:69:9f:6b:5b:2c:
d1:24:c2:cc:4c:0f:f4:b5:b2:c7:71:a4:bf:6c:09:40:df:dd:
59:ce:6e:33:57:90:7a:12:8d:04:4b:6b:1e:68:16:01:53:d1:
85:63:da:16:08:f4:ef:5a:52:8e:63:b4:cc:b6:78:f8:1a:80:
f7:4a:2f:0f:f6:34:0c:c1:22:af:f1:a8:2f:72:02:d2:a0:4c:
2f:47:46:65:6b:6b:06:01:de:05:70:35:08:d5:e0:0e:e6:59:
b9:53:fd:ac:fc:f2:62:a2:53:9b:4f:84:cf:7b:87:f0:ec:59:
12:99:3c:ce:bd:5e:45:5a:61:e6:e9:34:2f:57:e4:24:c5:8e:
13:95:39:50:1f:05:36:40:37:19:b7:db:fe:1d:5c:2c:4e:be:
2e:33:a1:8d:f4:4d:3f:ba:da:be:37:73:4e:99:43:4d:e2:0d:
72:79:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:24 2025 by rpki-client