Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/i5JICsJ5QS7J6M-iEflCu1XVTF8.roa
File: i5JICsJ5QS7J6M-iEflCu1XVTF8.roa (raw, json)
Hash identifier: qXmgkikNY+LIYgNObokECmEf09t1qQWJg+ctQg6S270=
Subject key identifier: 8B:92:48:0A:C2:79:41:2E:C9:E8:CF:A2:11:F9:42:BB:55:D5:4C:5F
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0194F9211687BACC3275852B28CBCAB47DE6
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/i5JICsJ5QS7J6M-iEflCu1XVTF8.roa
Signing time: Wed 12 Feb 2025 07:48:02 +0000
ROA not before: Wed 12 Feb 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11174
IP address blocks: 91.108.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 12:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:21:16:87:ba:cc:32:75:85:2b:28:cb:ca:b4:7d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Feb 12 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b92480ac279412ec9e8cfa211f942bb55d54c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:12:6d:f6:40:d4:95:f1:cf:0c:d1:cc:95:
ea:fe:3f:67:0c:7f:be:21:9e:ca:5e:e0:8a:bc:9c:
63:8d:ec:3a:b2:39:a0:4f:ff:23:ea:3e:eb:e9:28:
d1:92:a1:2d:0d:17:d1:b0:34:c4:5c:d3:62:83:ce:
43:33:1f:0a:c1:80:07:ab:e5:d6:43:ad:66:79:b8:
5c:e2:5a:15:0a:be:fb:40:09:73:b0:ca:64:8c:bd:
9f:dd:41:62:7d:78:70:ef:91:c3:ff:fe:f4:50:a8:
ec:9f:31:ce:5c:85:9f:89:82:0c:4d:ae:d8:81:7d:
78:bc:4c:39:f4:33:21:17:a3:8d:08:84:53:72:5e:
94:85:20:11:55:6b:e4:6e:d6:7e:e8:95:76:35:1b:
dc:77:5c:79:06:bc:2c:93:66:3a:57:a6:f9:c3:96:
af:b8:39:7a:26:01:02:2d:ff:81:63:77:cc:90:c2:
30:c9:fa:69:63:53:6e:5e:52:2d:c6:46:23:b2:f5:
24:4c:be:6f:97:85:6b:ea:78:51:a7:5c:51:fe:ed:
61:6f:b5:fa:82:3f:5e:65:f5:18:ab:bb:52:69:67:
0b:ae:ee:a7:66:7a:7c:be:12:92:b0:4f:bc:ed:85:
8d:11:1b:db:e6:4e:18:68:41:ca:a1:3d:32:92:6f:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:92:48:0A:C2:79:41:2E:C9:E8:CF:A2:11:F9:42:BB:55:D5:4C:5F
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/i5JICsJ5QS7J6M-iEflCu1XVTF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.242.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b2:90:cf:20:cc:e7:8d:84:4e:a2:d0:63:c3:a7:66:0f:b3:
8c:60:e5:b6:fb:b4:e7:fd:3b:c6:60:47:dd:c9:7d:41:ae:39:
73:99:8a:7a:fb:b0:35:3d:93:97:0d:2b:7c:40:eb:c6:fd:a3:
b5:5a:b9:60:f0:0a:a1:0e:df:2b:bc:ac:d1:9d:80:15:90:f9:
25:e3:87:62:1d:18:d1:44:72:43:ff:31:da:de:a9:b6:a2:50:
f3:d9:bb:99:17:47:6d:60:54:14:0d:21:8b:72:11:bd:67:97:
06:d0:fc:01:4b:94:28:ea:08:9e:d0:a1:5d:85:3e:50:f2:12:
ff:d5:19:9c:f6:9b:1a:82:08:8f:8e:11:27:0b:8a:88:fa:de:
2e:d9:2d:8b:b0:32:72:0d:96:71:2b:f1:8a:66:c2:84:f9:06:
d7:52:be:c2:af:99:e3:06:aa:55:2b:a2:5a:11:79:4e:32:8c:
db:fb:b5:c9:a7:8b:5c:9f:9b:16:87:79:b0:f5:ff:21:f6:1f:
4c:9f:33:a5:36:87:e0:17:55:5c:3f:60:21:8f:1c:ae:dd:42:
42:82:74:1b:08:e8:33:92:f6:13:a8:07:45:47:6e:e0:c6:44:
11:30:10:1e:a2:1f:36:6e:01:cf:09:3c:5b:f3:ed:a0:a4:ea:
48:af:13:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:49 2025 by rpki-client