Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/4PJnGHJEEVCiOiBkKmR2u6Gs-hY.roa
File: 4PJnGHJEEVCiOiBkKmR2u6Gs-hY.roa (raw, json)
Hash identifier: XOQp87ox8q8ZIYttmf3Ui4C0TKI4I7NAAdbU1vwFBTw=
Subject key identifier: E0:F2:67:18:72:44:11:50:A2:3A:20:64:2A:64:76:BB:A1:AC:FA:16
Certificate issuer: /CN=9bae428ee8cd4604c1fbc141278ef0d75376282a
Certificate serial: 0194654868CCDBC81BAA11CF9C0A2C7E7C4D
Authority key identifier: 9B:AE:42:8E:E8:CD:46:04:C1:FB:C1:41:27:8E:F0:D7:53:76:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m65CjujNRgTB-8FBJ47w11N2KCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/4PJnGHJEEVCiOiBkKmR2u6Gs-hY.roa
Signing time: Tue 14 Jan 2025 14:47:11 +0000
ROA not before: Tue 14 Jan 2025 14:47:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61213
IP address blocks: 91.123.48.0/20 maxlen: 20
91.123.57.0/24 maxlen: 24
91.123.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 15 Jan 2025 07:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:48:68:cc:db:c8:1b:aa:11:cf:9c:0a:2c:7e:7c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae428ee8cd4604c1fbc141278ef0d75376282a
Validity
Not Before: Jan 14 14:47:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0f2671872441150a23a20642a6476bba1acfa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:16:37:e1:c3:70:00:4e:b8:03:62:ea:53:
73:86:27:55:03:be:96:dc:59:53:1a:49:ec:ec:86:
3e:40:ae:71:51:dd:db:18:57:d2:45:35:61:47:f7:
7d:00:f8:72:e1:e7:f6:cc:9d:0f:85:e1:8d:36:53:
8c:85:90:d9:0d:6e:58:6e:dc:fb:ee:66:cb:5e:be:
cb:cc:3d:14:3d:35:3b:ae:44:b7:e1:f9:e5:de:38:
60:d6:c0:4f:37:7d:b0:91:a2:98:71:4f:46:99:05:
29:76:b8:81:96:71:b9:b3:8e:6c:bb:e2:7d:79:84:
ef:15:88:77:4c:7f:d1:5b:05:e8:2d:29:bb:d5:32:
db:68:0c:13:ab:d0:e1:20:1e:cd:b6:1b:e2:a4:b8:
6f:b6:54:fd:20:30:20:c0:73:bc:a2:d3:08:a1:58:
a1:a3:32:39:e1:af:1d:7a:dd:1b:cb:1b:93:06:92:
c2:e4:25:fd:22:39:58:c1:09:67:15:3b:a0:f2:87:
41:9a:98:b1:1b:5b:90:f5:a6:82:b5:c1:7f:ff:14:
cf:6a:f1:e5:d3:ce:4c:1a:8b:75:15:60:e4:90:20:
22:bf:b1:ce:19:98:8a:db:69:25:fd:3f:69:9a:5e:
9b:ed:b9:fa:24:38:df:30:f7:94:48:ea:e0:42:59:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:67:18:72:44:11:50:A2:3A:20:64:2A:64:76:BB:A1:AC:FA:16
X509v3 Authority Key Identifier:
keyid:9B:AE:42:8E:E8:CD:46:04:C1:FB:C1:41:27:8E:F0:D7:53:76:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m65CjujNRgTB-8FBJ47w11N2KCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/4PJnGHJEEVCiOiBkKmR2u6Gs-hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/m65CjujNRgTB-8FBJ47w11N2KCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.48.0/20
Signature Algorithm: sha256WithRSAEncryption
18:7d:65:0b:6a:f3:c1:4a:2f:63:09:b3:28:cd:39:78:45:f1:
8c:49:fd:ad:4b:6f:e8:3c:ba:49:53:a1:f0:a0:bb:27:3d:91:
90:02:96:46:b3:fb:c4:a4:ca:99:60:49:06:04:e2:7e:23:c6:
bb:95:8c:81:77:ab:01:b2:ff:80:a0:d9:8c:9b:7e:db:d6:a9:
fb:c2:8d:69:19:33:1f:48:9b:72:78:fa:02:49:1e:80:a4:10:
bd:ef:df:62:48:8f:93:68:d2:69:f1:36:19:58:53:2f:47:fa:
87:78:11:00:61:92:43:46:19:f8:46:99:5f:6c:c8:4a:79:00:
1d:ec:a5:b4:9b:e7:24:63:be:fc:f0:b0:53:4c:cf:4c:69:cd:
0f:3f:c9:cd:18:6e:c6:72:f5:ca:fa:c4:2f:d8:84:54:c9:78:
7c:fa:d5:9c:eb:c1:0d:c4:2c:d7:65:b7:18:1d:09:2a:11:c7:
6e:71:46:9b:e6:a6:98:63:d6:dd:95:c7:31:82:1d:33:2f:a0:
81:21:99:04:30:b5:18:0d:01:a8:54:c6:33:14:ea:10:83:1a:
e6:74:2d:e6:1a:f9:08:25:b9:64:d8:ed:8c:d0:60:91:f9:ad:
5f:4a:20:2d:4f:1a:25:cf:7a:1f:51:b5:a3:55:66:4b:6d:5a:
6b:a1:b6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:35 2025 by rpki-client