Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/5hk6Nuxb0K6l-EMcnoAAJgFPvs8.roa
File: 5hk6Nuxb0K6l-EMcnoAAJgFPvs8.roa (raw, json)
Hash identifier: Az1G7rrhnyDKTnL9EOTohQWepC6Z2RrWrTPR5iEu8vM=
Subject key identifier: E6:19:3A:36:EC:5B:D0:AE:A5:F8:43:1C:9E:80:00:26:01:4F:BE:CF
Certificate issuer: /CN=9bae428ee8cd4604c1fbc141278ef0d75376282a
Certificate serial: 0194228D24F8CB25160B30089F3F491891A7
Authority key identifier: 9B:AE:42:8E:E8:CD:46:04:C1:FB:C1:41:27:8E:F0:D7:53:76:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m65CjujNRgTB-8FBJ47w11N2KCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/5hk6Nuxb0K6l-EMcnoAAJgFPvs8.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61213
IP address blocks: 91.123.48.0/20 maxlen: 20
91.123.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:24:f8:cb:25:16:0b:30:08:9f:3f:49:18:91:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae428ee8cd4604c1fbc141278ef0d75376282a
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6193a36ec5bd0aea5f8431c9e800026014fbecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:c2:34:3b:e6:e2:f7:66:ad:b3:e5:13:44:
d0:08:87:e6:c8:cb:a8:e2:af:36:f7:e5:d1:a3:53:
fb:79:95:2e:86:56:1b:86:21:f5:39:89:16:03:36:
50:1e:e0:de:9b:f2:7a:3e:7b:00:93:37:0f:0a:34:
95:51:8a:44:85:e9:e4:63:97:8e:7f:e4:a9:1e:dc:
7d:e4:d1:2f:f6:fa:fd:06:41:83:62:55:18:24:77:
db:6a:06:0c:46:23:f1:cb:2f:48:b9:9c:58:be:84:
5a:17:c3:e8:a6:ab:71:42:a4:8e:71:cb:c3:1a:ac:
48:31:94:7c:dc:66:f5:bc:4f:a6:5a:88:4f:5f:26:
f2:63:56:47:1d:85:87:e6:0a:3a:a1:f6:92:ff:f2:
16:c1:08:dd:ec:2a:28:8e:0b:83:0a:55:c2:ad:4c:
10:db:e0:37:a0:44:09:41:36:34:60:5a:0a:80:b7:
f4:07:e7:81:6a:77:11:ba:cf:45:29:af:0d:7b:77:
73:7c:43:51:1a:51:71:46:03:2a:15:93:0a:d2:4a:
50:08:5c:3d:9e:28:e3:7e:65:cf:80:23:1f:d3:d8:
60:41:d9:b3:8c:ff:d7:59:12:02:6b:1a:e5:49:8a:
c0:b6:e7:0c:00:d9:56:f8:5d:6d:c4:7d:25:cd:3d:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:3A:36:EC:5B:D0:AE:A5:F8:43:1C:9E:80:00:26:01:4F:BE:CF
X509v3 Authority Key Identifier:
keyid:9B:AE:42:8E:E8:CD:46:04:C1:FB:C1:41:27:8E:F0:D7:53:76:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m65CjujNRgTB-8FBJ47w11N2KCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/5hk6Nuxb0K6l-EMcnoAAJgFPvs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/m65CjujNRgTB-8FBJ47w11N2KCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.48.0/20
Signature Algorithm: sha256WithRSAEncryption
89:1c:30:1b:fa:e7:d1:31:3f:79:ce:b8:a5:17:ee:bd:03:30:
8b:dd:2e:97:6f:68:d5:6f:41:18:da:6a:d9:89:34:9d:2f:5c:
bb:6a:03:6e:b7:ee:aa:da:67:f8:59:91:14:5c:a2:0c:5e:02:
49:72:c9:bd:6b:00:c3:b7:0e:c2:4f:8d:57:16:9c:02:28:46:
c0:1b:5d:37:58:a1:6e:01:75:aa:d6:1c:44:90:3c:c6:85:d7:
ac:5e:d8:ce:00:0f:df:21:2c:15:f4:12:be:f0:20:5c:12:58:
a1:12:89:77:97:69:de:06:bd:4a:28:2e:a8:d6:2a:06:80:a2:
46:a5:8b:34:00:00:75:40:a6:79:86:4e:65:fe:c0:e1:26:ab:
b1:31:e6:8d:8e:3b:6d:29:6f:b8:cf:c1:34:49:e3:60:a5:33:
d0:05:8c:eb:ef:f5:44:a8:35:b8:99:30:74:26:fd:e9:3e:18:
a4:55:13:46:ae:79:1c:d5:c8:5a:01:20:05:76:cc:b8:81:7d:
f8:37:7f:32:75:43:d1:ca:52:0c:af:be:2b:de:59:a6:b5:e1:
d6:bd:57:c4:b5:53:35:9f:69:31:c0:79:99:e4:a7:a5:99:8a:
79:0f:00:89:5a:1a:64:04:48:3c:a2:7a:93:fe:8e:3d:36:85:
61:55:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:34 2025 by rpki-client