Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/rFZhRryeUIcFwvqzeTjCU0GJIEw.roa
File: rFZhRryeUIcFwvqzeTjCU0GJIEw.roa (raw, json)
Hash identifier: AIEBw6kqJQhP0wtpRiwQQisRJShTNBaqcMtSnPZdsRY=
Subject key identifier: AC:56:61:46:BC:9E:50:87:05:C2:FA:B3:79:38:C2:53:41:89:20:4C
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 018CC348FACF632F12E0A1424F0BF4BEFC4C
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/rFZhRryeUIcFwvqzeTjCU0GJIEw.roa
Signing time: Mon 01 Jan 2024 04:29:49 +0000
ROA not before: Mon 01 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12732
IP address blocks: 91.199.214.0/24 maxlen: 24
2001:67c:27fc::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fa:cf:63:2f:12:e0:a1:42:4f:0b:f4:be:fc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac566146bc9e508705c2fab37938c2534189204c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:b8:37:36:7b:ae:00:af:97:e4:ab:19:b8:
d5:c7:a0:df:ce:02:dc:8a:f9:25:b1:3d:fa:4a:5c:
f5:fc:1e:bd:95:4d:06:fd:4c:4d:4f:25:77:01:04:
82:fa:89:78:a0:78:92:41:95:60:de:fe:e3:97:2c:
86:e1:8b:c5:3d:dc:a8:d8:3f:23:f2:b3:6e:9f:02:
4b:f1:fe:2a:d5:87:7a:bf:eb:26:49:89:d5:68:39:
65:2e:de:1a:6a:b6:d3:f5:5f:b1:dc:d2:e9:33:95:
83:17:47:01:56:cf:8b:57:a3:b2:ac:99:79:1f:fc:
aa:a8:2b:d8:a7:81:25:17:62:89:fc:31:01:76:bc:
2d:61:a9:11:07:23:ca:88:3d:76:5a:02:5c:05:44:
f7:b5:ed:a5:cb:2c:a4:be:97:48:4a:62:71:9c:2b:
d3:f9:a4:79:ec:0d:ed:91:99:c7:09:43:c8:d5:f9:
10:83:3c:4d:af:02:ee:64:8b:22:8d:3b:43:62:6c:
00:91:1e:88:f3:8b:d5:74:e4:7a:a2:85:40:01:e8:
d6:b0:58:59:90:d1:00:d9:6e:25:25:08:6a:22:33:
d0:db:9a:fb:b4:41:02:1d:c7:83:77:38:ef:21:00:
9e:d8:77:93:de:a7:05:6c:58:d2:a5:3e:44:c4:a3:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:56:61:46:BC:9E:50:87:05:C2:FA:B3:79:38:C2:53:41:89:20:4C
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/rFZhRryeUIcFwvqzeTjCU0GJIEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.214.0/24
IPv6:
2001:67c:27fc::/48
Signature Algorithm: sha256WithRSAEncryption
bb:53:c4:7a:8f:69:28:0e:60:ca:3a:11:45:94:e9:97:70:a0:
6a:c4:0c:1c:ee:97:84:c5:c6:b9:7e:df:20:ea:15:29:2d:d7:
47:0c:33:8d:50:f8:84:55:c6:40:8e:31:6e:b1:dc:d5:12:8b:
10:cd:e9:dd:ac:0c:80:d0:89:7f:e4:3b:32:94:15:e8:91:b4:
36:b7:2f:7d:ca:ad:bc:06:5f:54:82:ae:2e:df:c3:84:cc:d7:
5d:6d:f8:2e:f3:8e:8e:e8:d6:1e:9a:6c:a9:70:56:73:af:f3:
68:34:3d:cb:e8:e5:bc:e7:73:5e:1d:75:ae:d3:5d:5b:4f:78:
ff:86:2b:9b:87:2d:94:6a:bf:62:50:b2:2b:53:8d:52:05:90:
f2:fe:54:7f:33:86:55:11:a5:0b:d1:ac:a2:35:a0:7d:aa:01:
09:43:3e:69:4c:c7:20:50:64:df:21:2f:64:6d:bc:56:e0:80:
b4:cc:ac:36:46:9c:8a:65:02:d3:e2:be:75:cb:fc:ab:2f:b6:
d1:a3:be:51:d6:7d:20:ca:49:21:89:05:49:d8:da:ca:75:fa:
48:e8:d9:d6:9a:7d:11:ee:5d:a0:43:d7:e7:12:6e:a6:b4:66:
0f:69:20:59:5a:52:d0:4a:7c:fb:55:31:9d:00:33:c9:67:4a:
c6:19:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:27 2025 by rpki-client