Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/2txo4SOwjxVEaZJfy68h4RSGGyE.roa
File: 2txo4SOwjxVEaZJfy68h4RSGGyE.roa (raw, json)
Hash identifier: iGRzUz9houcn9tEfeJsdr+4kKbpMzCw6WfvpMdSevRc=
Subject key identifier: DA:DC:68:E1:23:B0:8F:15:44:69:92:5F:CB:AF:21:E1:14:86:1B:21
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01900D8405EFDE781B1A65099B48980541D0
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/2txo4SOwjxVEaZJfy68h4RSGGyE.roa
Signing time: Wed 12 Jun 2024 17:34:34 +0000
ROA not before: Wed 12 Jun 2024 17:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198981
IP address blocks: 91.108.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 12:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:84:05:ef:de:78:1b:1a:65:09:9b:48:98:05:41:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jun 12 17:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dadc68e123b08f154469925fcbaf21e114861b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:41:a6:76:5f:4c:5b:30:bf:8e:fc:73:60:
b6:3e:c9:78:e8:2d:90:06:ab:76:f8:e8:f9:ea:7a:
30:c0:e2:90:f8:8e:d4:c0:b3:f5:60:37:21:99:8d:
b4:c6:4f:25:39:7c:32:7e:62:56:8a:cd:e8:b4:44:
a0:6a:43:c6:f4:13:1f:21:cd:14:62:9f:c3:5a:a3:
52:a7:ce:8b:8d:52:be:d0:51:cd:9d:05:37:bd:f4:
bb:77:6f:8d:02:b3:42:02:c7:f0:2d:a7:58:c6:bf:
50:78:d4:a3:13:b6:ef:fb:81:c5:25:01:cd:62:4e:
c7:8b:20:e8:a9:cc:1a:55:fe:2f:67:d5:d4:b7:91:
fe:bb:de:7e:2e:11:23:92:aa:ed:ee:1b:a3:ad:9d:
36:dd:44:73:0a:e4:dc:69:ed:8b:31:07:4f:34:03:
57:1a:4a:8d:c8:c8:d1:32:6a:f7:9e:2f:2d:9a:51:
e3:31:b1:88:46:d4:8b:d0:a5:e1:15:d4:d8:c3:77:
88:84:99:7e:a4:47:b9:8e:2c:39:53:ee:29:16:b7:
b5:fc:2f:b1:33:2e:33:91:07:df:3b:19:e9:a0:9e:
06:c9:6e:fc:7f:fb:dc:b0:8f:5d:bb:ac:d6:e8:68:
31:44:ca:ff:ae:39:4f:07:80:19:08:52:6c:4e:f3:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:68:E1:23:B0:8F:15:44:69:92:5F:CB:AF:21:E1:14:86:1B:21
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/2txo4SOwjxVEaZJfy68h4RSGGyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:f0:b6:5d:a6:dc:51:ac:d8:ef:f6:b2:15:67:99:86:42:c7:
1b:b9:a1:66:44:b7:f0:bf:a2:04:3b:35:e9:ba:fa:d4:20:74:
7e:19:81:fe:db:b4:84:17:97:21:30:d6:6a:d8:23:13:08:f0:
fb:8b:4b:ae:3d:fd:c1:6f:82:b9:bf:18:91:18:46:b7:46:89:
30:bd:8e:29:ae:98:09:72:77:b2:d5:90:1a:6c:2b:b8:75:b6:
f6:f6:e9:51:65:14:fd:c5:32:c1:cd:94:ad:3b:18:a2:96:16:
35:26:df:f0:43:72:ba:49:e7:c3:b3:e0:b6:f6:d7:bd:8c:b7:
96:42:92:15:24:6d:ea:b0:1f:64:2d:7b:0a:ac:eb:ab:d4:17:
1d:66:e6:6c:ea:c1:c7:5c:f1:3f:50:b3:f8:0e:da:38:ba:a4:
d6:0c:e6:6f:32:25:87:2b:4a:52:3e:e3:91:df:11:dd:4c:7f:
26:20:d1:8f:ee:a5:5e:14:bc:ca:ca:85:0e:4c:61:93:30:ec:
c4:fd:38:76:15:70:26:cc:43:f6:f2:ab:9f:95:9d:56:4d:5e:
ce:81:48:13:2c:aa:8d:5b:78:97:ea:93:65:98:4b:bf:a8:b6:
d4:f6:ef:c6:2d:61:ea:2c:bc:8c:d7:90:0b:dd:29:88:c5:b8:
d3:5f:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:29 2025 by rpki-client