Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/7t1Z9kGMsIPD3UlQLIq7MGFTUKY.roa
File: 7t1Z9kGMsIPD3UlQLIq7MGFTUKY.roa (raw, json)
Hash identifier: 29zkGKnZqwScnleLg4Q9O3A8bIV3vyNyvarzLgcvb18=
Subject key identifier: EE:DD:59:F6:41:8C:B0:83:C3:DD:49:50:2C:8A:BB:30:61:53:50:A6
Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial: 0194228DEB438CA7080EE34ACD60F3C17135
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/7t1Z9kGMsIPD3UlQLIq7MGFTUKY.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 91.223.95.0/24 maxlen: 24
2a0e:9640::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 06 Jan 2025 18:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:eb:43:8c:a7:08:0e:e3:4a:cd:60:f3:c1:71:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eedd59f6418cb083c3dd49502c8abb30615350a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:51:b5:c9:17:10:87:03:e1:95:51:27:f7:
a7:6a:47:8f:43:9f:fa:d3:b3:59:4b:e2:ca:f3:b5:
03:59:48:76:70:44:e9:7c:7d:1d:03:45:ff:5a:c2:
83:a2:63:9c:f5:1a:17:70:04:29:bf:52:6a:1e:9e:
d1:dc:4e:55:0d:d1:ad:17:07:38:20:e7:70:4d:cb:
a3:57:b4:75:b1:0b:8a:0e:75:ae:54:ea:60:75:d6:
6d:d7:d6:b7:ea:7c:11:af:9d:a3:45:84:6f:ba:5c:
0f:7f:3e:8b:63:2c:96:d4:96:d7:09:58:e4:f4:ef:
63:4d:68:70:f5:40:8d:55:e9:2c:24:35:a6:4f:3a:
c9:d5:e3:7f:4f:44:66:fa:38:ff:4c:56:9a:68:e5:
c6:b4:6c:a3:2a:40:0f:7e:09:94:78:e4:78:8e:f1:
e8:c6:2f:59:9b:b8:26:7b:bb:37:80:75:ce:9b:55:
56:90:6f:c0:01:a4:1e:fb:14:57:a5:72:8f:1a:9d:
8c:58:7f:a8:bd:9a:4b:dc:61:49:2b:08:68:f0:6b:
72:4e:e5:ec:bb:61:12:c6:56:ef:a3:38:52:66:22:
c2:ab:b3:2d:0e:bd:c3:62:08:11:96:31:c9:22:30:
0b:12:b9:a1:66:09:a6:b2:ff:a9:d8:10:a1:e6:a5:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:59:F6:41:8C:B0:83:C3:DD:49:50:2C:8A:BB:30:61:53:50:A6
X509v3 Authority Key Identifier:
keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/7t1Z9kGMsIPD3UlQLIq7MGFTUKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.95.0/24
IPv6:
2a0e:9640::/29
Signature Algorithm: sha256WithRSAEncryption
8d:0e:cd:7f:3b:25:82:80:ba:6d:2c:ca:4d:4c:71:9c:87:69:
b8:73:7e:12:88:24:d9:98:89:dd:dd:d0:81:31:d1:06:eb:8c:
74:69:59:66:6f:e1:ce:85:18:06:79:09:89:b4:bc:2c:04:37:
2a:18:3e:81:f8:82:ee:31:2c:3f:bb:96:3f:50:df:9f:14:3e:
38:ed:0c:13:08:a0:43:2d:ab:83:b1:21:c2:b9:9b:fc:e3:9c:
bc:b3:85:19:82:22:72:12:ee:47:4e:1c:58:22:22:63:a2:c9:
2b:8f:38:3d:06:4c:a6:cc:a8:6a:f3:ab:2e:92:96:dc:c0:94:
04:bc:2a:5f:6a:84:11:c7:91:8b:72:23:57:96:63:73:1e:4d:
c2:4f:3d:fe:b9:36:44:e0:b8:c2:a3:19:28:56:44:b1:d2:79:
7b:e0:3d:dc:9b:2f:6d:40:49:d6:01:6f:b2:66:2a:31:91:ad:
00:d2:5f:16:9b:9e:3a:43:73:71:71:2f:d2:60:e7:e8:33:af:
86:3e:67:c4:50:2e:18:ab:0e:d7:f9:04:7a:68:81:0c:e0:76:
48:6b:af:d2:54:fe:14:8d:28:e4:1e:d7:eb:80:9c:c4:af:50:
7a:4b:00:66:50:7f:f9:5f:be:d2:a7:30:21:10:04:e4:e5:dd:
67:19:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:48 2025 by rpki-client