Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/gUT1Ve-2ijpgk9h82PC38tb544g.roa
File: gUT1Ve-2ijpgk9h82PC38tb544g.roa (raw, json)
Hash identifier: lpli7X8e8Ga4Rj4cWe2MtTrb5u3bKu7BXjfDueYl6kI=
Subject key identifier: 81:44:F5:55:EF:B6:8A:3A:60:93:D8:7C:D8:F0:B7:F2:D6:F9:E3:88
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0195764EA31853334C91584658FA0E36B3F3
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/gUT1Ve-2ijpgk9h82PC38tb544g.roa
Signing time: Sat 08 Mar 2025 15:10:19 +0000
ROA not before: Sat 08 Mar 2025 15:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 91.108.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 11:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:76:4e:a3:18:53:33:4c:91:58:46:58:fa:0e:36:b3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Mar 8 15:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8144f555efb68a3a6093d87cd8f0b7f2d6f9e388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:37:8c:2d:58:cd:dc:8e:b7:52:a1:38:b9:20:
a2:4f:64:d9:7d:8f:ab:77:b1:96:b0:4b:de:72:4f:
12:f5:8c:ba:97:e2:3c:d2:a9:9f:d8:32:6b:8a:91:
31:05:a0:ea:6b:93:77:81:62:c3:71:eb:6d:3b:34:
4b:a4:dc:ee:48:1d:b4:48:9f:b7:ef:f1:36:10:60:
db:de:19:5b:d5:9e:93:ad:6d:fb:4a:50:1f:08:e4:
06:8c:a4:6f:7f:3d:57:b9:45:5c:85:bd:f8:c6:13:
7b:e4:0c:a9:8a:f5:f9:60:5a:26:63:1d:14:2e:f2:
53:7c:92:73:76:f2:fc:1f:9d:24:3e:3a:35:a6:d6:
59:ab:0f:42:15:1c:38:b5:ae:5a:c6:f7:16:4a:5d:
e8:8e:6e:5f:90:16:97:f2:71:a7:a7:86:e1:75:51:
2d:47:15:98:9d:a6:2d:38:c5:a9:04:7f:04:82:1a:
2f:64:50:f0:a7:8c:ad:6d:63:c0:2e:13:7f:39:cf:
c2:d4:a6:9d:c7:9a:65:89:d2:e3:09:d0:ae:89:9b:
71:8f:20:da:d0:6b:88:f3:a2:9e:20:1b:c8:df:6b:
aa:48:09:85:69:4b:0c:dd:4d:e1:7b:ca:31:39:c6:
80:37:45:20:11:40:ed:b2:bc:bc:97:78:4d:a2:2a:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:F5:55:EF:B6:8A:3A:60:93:D8:7C:D8:F0:B7:F2:D6:F9:E3:88
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/gUT1Ve-2ijpgk9h82PC38tb544g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b9:f6:4b:6e:dd:0d:76:83:ae:c6:ec:1f:49:ae:66:af:11:
72:0f:5b:42:ab:f9:92:02:94:5a:48:85:dc:e8:b0:be:32:37:
d9:42:85:1c:04:d6:e4:eb:d9:d7:4a:0d:13:e7:22:ca:f9:bc:
11:64:0b:95:72:82:8f:0f:17:ab:45:f9:98:74:88:23:69:fc:
a8:8d:25:c3:2a:16:6b:f0:a3:d1:03:e6:96:21:19:55:e1:8a:
81:de:21:34:49:20:82:c4:55:19:1d:1b:1c:b3:79:7e:0a:9a:
ca:8d:c1:b7:56:bf:a5:19:85:8c:2d:be:5f:b9:96:73:c5:f0:
dd:87:4e:1d:a8:c7:b1:fe:92:98:1d:b5:56:d6:a9:40:94:ed:
3d:60:0d:16:a9:e0:61:63:6a:ab:67:80:fd:ea:b0:9b:37:38:
45:3d:de:b4:72:bc:65:b4:40:c2:8d:e4:4d:7c:4c:5f:4e:ce:
71:80:36:1d:0b:0c:e3:88:c2:53:f7:5f:e3:e1:cb:87:89:95:
be:18:42:27:a0:7c:37:fd:bc:45:87:e5:63:f1:ff:03:c0:58:
8f:d9:87:dd:83:fb:c7:97:a4:66:6d:41:33:8b:4f:94:32:40:
a7:88:51:20:c3:42:27:53:57:54:1c:fc:8b:70:f9:32:16:71:
22:ed:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:11 2025 by rpki-client