Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/1kI0nYts3UQsa392OcxuwC-B1ic.roa
File: 1kI0nYts3UQsa392OcxuwC-B1ic.roa (raw, json)
Hash identifier: dxKiXNggA5t4jnxNNMoaqEE1KV6r6rvFRpXyHbzQsiw=
Subject key identifier: D6:42:34:9D:8B:6C:DD:44:2C:6B:7F:76:39:CC:6E:C0:2F:81:D6:27
Certificate issuer: /CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Certificate serial: 018E0404348423FAEDA93B7CB2451114E061
Authority key identifier: 28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/1kI0nYts3UQsa392OcxuwC-B1ic.roa
Signing time: Sun 03 Mar 2024 11:12:48 +0000
ROA not before: Sun 03 Mar 2024 11:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43911
IP address blocks: 91.195.220.0/23 maxlen: 23
91.195.221.0/24 maxlen: 24
2001:67c:220::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Mar 2024 14:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:04:04:34:84:23:fa:ed:a9:3b:7c:b2:45:11:14:e0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Validity
Not Before: Mar 3 11:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d642349d8b6cdd442c6b7f7639cc6ec02f81d627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:ec:53:8b:27:26:68:3c:0c:1b:db:82:5f:
ba:ff:16:fe:57:24:e5:15:c9:ae:36:16:d2:7e:a8:
a1:96:6f:0f:a8:23:87:42:74:95:e9:95:a2:39:2c:
57:17:3a:5e:fa:88:17:f9:80:e1:d8:5a:f4:fe:a2:
1a:50:8d:52:03:e3:22:20:01:9b:7f:66:10:d5:a5:
ea:7f:b3:ad:b7:2a:53:80:53:c3:d0:e1:93:9a:06:
bd:b7:6d:dc:dc:60:59:9f:6b:7e:e8:92:eb:98:7b:
f5:91:07:d0:ed:58:5a:79:60:34:ae:04:0a:4a:16:
c7:a5:62:b4:f1:f3:83:78:c3:15:f8:24:0d:63:7a:
56:85:7f:99:e1:af:f7:27:e3:b2:23:af:e9:f0:7f:
1a:b4:af:51:54:b3:ae:cd:f4:ff:d1:27:e7:f0:01:
54:d7:5b:e9:61:6b:46:c0:7e:28:6a:a6:e4:f5:35:
52:6f:87:60:ae:20:df:3c:64:2c:be:f4:6a:a9:19:
f8:d6:8b:b1:5f:76:ee:57:1b:c6:8a:53:ea:90:fb:
5b:c7:cc:80:1a:ba:45:1b:e4:cd:89:20:26:2a:13:
0e:7f:11:98:32:5b:a8:2c:df:47:db:1d:c5:04:8e:
8b:51:63:20:cf:43:85:8e:4b:4b:98:56:8f:68:8d:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:42:34:9D:8B:6C:DD:44:2C:6B:7F:76:39:CC:6E:C0:2F:81:D6:27
X509v3 Authority Key Identifier:
keyid:28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/1kI0nYts3UQsa392OcxuwC-B1ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.220.0/23
IPv6:
2001:67c:220::/48
Signature Algorithm: sha256WithRSAEncryption
c4:7b:db:6a:d7:0e:3b:61:26:7c:32:03:74:e1:83:42:26:5f:
fe:b2:e4:30:e3:89:a4:2e:b9:b2:44:bd:a2:00:21:6a:03:d9:
e6:53:8f:a4:28:93:19:01:96:dc:fb:53:82:d8:ee:b4:63:01:
59:25:5c:83:f6:a4:81:14:76:99:ed:6d:fe:b2:f8:c3:a4:86:
a3:3e:97:15:52:89:65:2e:48:f1:ae:d4:c8:db:d8:b4:f6:c1:
cc:69:14:eb:53:6d:af:57:16:37:52:9f:0e:a5:01:61:e0:37:
64:50:bf:a9:94:35:4d:f1:2a:8c:80:4e:0d:a9:df:b6:b6:45:
af:b4:72:7a:d9:45:cf:85:b6:f1:fb:d8:a9:6f:d4:cd:23:d8:
79:36:62:e1:77:34:7d:3f:f1:6b:63:08:d6:6e:3b:e2:50:a5:
1c:31:c3:42:ad:80:47:7a:9c:60:4f:b0:20:ac:bf:52:7d:f8:
01:fe:c3:ad:3a:ef:79:1e:40:be:5f:97:a0:cc:67:b4:e4:19:
69:65:b3:ed:dd:61:43:16:45:b8:a1:fc:9e:a5:18:26:3a:c2:
51:4c:6c:5e:5a:d6:bb:f3:8d:3f:5b:69:57:2f:2c:8b:25:6d:
45:a6:0d:0a:87:f5:58:34:f9:a8:37:00:fb:13:8b:68:d1:3d:
f5:87:63:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:55 2025 by rpki-client