Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/CQEueXT5h2Aw_LoLAoSNj-ilzYA.roa
File: CQEueXT5h2Aw_LoLAoSNj-ilzYA.roa (raw, json)
Hash identifier: 5HLPPwNCxoZcbFvCviLdkOa6AUE4T0mLR3lqLjZwbTI=
Subject key identifier: 09:01:2E:79:74:F9:87:60:30:FC:BA:0B:02:84:8D:8F:E8:A5:CD:80
Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial: 0193960A7D3DDA9E021B8324ABAB0B0B2545
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/CQEueXT5h2Aw_LoLAoSNj-ilzYA.roa
Signing time: Thu 05 Dec 2024 08:58:10 +0000
ROA not before: Thu 05 Dec 2024 08:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57269
IP address blocks: 91.232.81.0/24 maxlen: 24
185.105.36.0/22 maxlen: 24
185.239.200.0/22 maxlen: 24
195.135.248.0/22 maxlen: 24
2a0c:5a80::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 05 Dec 2024 10:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:0a:7d:3d:da:9e:02:1b:83:24:ab:ab:0b:0b:25:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Validity
Not Before: Dec 5 08:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09012e7974f9876030fcba0b02848d8fe8a5cd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:3e:5c:2c:ee:a3:3a:43:21:1e:63:6a:56:
39:db:a2:99:51:65:1e:a7:80:e3:1c:f7:a8:6e:2a:
85:7c:7d:39:18:3f:0d:c9:a6:c0:20:3c:9d:60:45:
ce:0c:e0:58:83:71:c1:ac:e4:d9:4a:73:ae:ac:6b:
06:8c:0f:db:e4:cc:8f:e6:9a:73:3f:26:ed:74:f3:
5d:79:d7:ee:28:f5:f2:1d:ec:50:aa:ae:ca:c7:11:
33:d5:47:ba:fd:15:0f:49:22:d0:5d:92:3d:05:d4:
ba:c1:09:c5:3e:ed:4e:07:d4:a0:03:5b:aa:01:c5:
29:4b:2c:3f:9d:72:6c:1c:69:54:50:28:48:79:bd:
22:c0:11:c9:c0:b2:83:22:22:7f:51:ef:fe:2c:a3:
a5:dd:3d:4b:7b:aa:e3:26:b2:36:fe:b2:d2:19:1e:
42:61:d8:cb:ef:29:a2:6d:a1:e8:9d:36:a3:15:80:
d5:a2:8d:48:68:54:ae:0b:a8:3f:a4:e1:a9:ac:1f:
89:f8:6e:3d:79:ad:c5:e0:22:a6:c1:14:d8:ac:9c:
ae:9d:3e:4c:2f:ee:8f:42:29:53:cd:c1:0d:c3:06:
9d:fc:18:23:bf:71:3e:65:e7:29:31:3a:45:9f:d0:
c2:d7:15:e1:eb:bd:0f:c4:c0:95:b7:ad:4f:52:bf:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:2E:79:74:F9:87:60:30:FC:BA:0B:02:84:8D:8F:E8:A5:CD:80
X509v3 Authority Key Identifier:
keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/CQEueXT5h2Aw_LoLAoSNj-ilzYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.81.0/24
185.105.36.0/22
185.239.200.0/22
195.135.248.0/22
IPv6:
2a0c:5a80::/29
Signature Algorithm: sha256WithRSAEncryption
7f:4d:26:52:56:b4:09:52:49:90:7c:3f:0d:6d:7c:6f:f9:1d:
da:97:45:4e:5b:e2:79:0b:0c:12:35:4a:aa:11:ed:42:2a:bc:
36:ca:50:1e:1d:85:dd:5b:2e:fc:2f:e7:c2:bc:90:33:9f:f4:
24:12:e2:19:0d:32:f5:e5:40:2c:c3:24:67:a9:30:6a:79:d7:
68:d3:ee:0e:ab:48:23:02:3d:49:67:7b:7d:6d:ee:50:cd:75:
4c:17:8c:ef:15:57:bd:ee:9c:8c:b8:d6:25:00:e9:1e:67:7c:
51:82:b4:52:d0:d7:25:56:72:b8:f0:0f:ca:ae:a8:c5:98:b0:
6d:57:f7:e5:c6:a9:f4:19:26:f5:eb:b3:c9:6f:88:f8:b3:fd:
58:14:5e:75:7e:b9:0b:d8:3b:7a:33:9f:5d:64:20:fb:2b:a2:
56:46:ea:d4:b0:8d:3f:fa:22:f8:30:ff:a7:c6:6c:2e:31:5b:
18:93:6f:4f:49:0b:89:48:0d:93:f4:c3:d9:d9:57:7f:bf:d8:
e2:9f:af:8f:fd:9c:7a:2f:b1:15:8c:41:70:a1:23:13:82:c1:
8b:38:40:07:37:f2:d4:73:80:aa:88:78:23:da:73:a2:33:10:
27:db:5e:12:ee:fa:e1:83:dc:9e:e5:a7:fd:6d:4b:e6:33:62:
1d:73:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:07 2025 by rpki-client