Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/5uTF4xsZ8s319GBMEJY5aLim-5U.roa
File: 5uTF4xsZ8s319GBMEJY5aLim-5U.roa (raw, json)
Hash identifier: H61T8JDOCJQ0I8FDr9SkM/wwAAMGCrgYFht7OYmZxqQ=
Subject key identifier: E6:E4:C5:E3:1B:19:F2:CD:F5:F4:60:4C:10:96:39:68:B8:A6:FB:95
Certificate issuer: /CN=9bae428ee8cd4604c1fbc141278ef0d75376282a
Certificate serial: 019468D00763E110741405743BC4063E9A56
Authority key identifier: 9B:AE:42:8E:E8:CD:46:04:C1:FB:C1:41:27:8E:F0:D7:53:76:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m65CjujNRgTB-8FBJ47w11N2KCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/5uTF4xsZ8s319GBMEJY5aLim-5U.roa
Signing time: Wed 15 Jan 2025 07:14:11 +0000
ROA not before: Wed 15 Jan 2025 07:14:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61213
IP address blocks: 91.123.48.0/20 maxlen: 20
91.123.56.0/24 maxlen: 24
91.123.57.0/24 maxlen: 24
91.123.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 15 Jan 2025 14:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:d0:07:63:e1:10:74:14:05:74:3b:c4:06:3e:9a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae428ee8cd4604c1fbc141278ef0d75376282a
Validity
Not Before: Jan 15 07:14:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6e4c5e31b19f2cdf5f4604c10963968b8a6fb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:5e:9d:2f:96:39:4c:92:47:af:9b:4a:24:
dc:9a:05:14:cd:89:17:34:74:69:1e:fc:0a:a3:a0:
bf:62:5a:27:e5:a1:15:a0:7d:75:c8:fb:a6:50:3a:
32:56:90:1f:cf:dd:f7:b2:b7:c4:50:8a:d9:14:1b:
7f:04:92:13:49:71:1d:33:f0:57:a3:24:9e:89:ea:
ed:6e:aa:47:b4:5d:55:7f:04:e1:2d:dd:3b:f5:9e:
38:30:26:22:8a:39:1f:5d:97:f9:7b:89:9f:12:14:
51:39:31:33:79:b2:74:c2:24:6f:82:8b:58:b8:b1:
d0:96:a1:32:f4:91:9e:9f:32:f6:9e:65:5b:30:fc:
56:58:18:ac:20:9f:f2:8d:7c:7d:b8:44:d2:eb:15:
3d:c9:80:be:ed:b6:84:8b:85:71:e9:5e:6f:b7:8f:
83:93:02:da:2d:85:cd:3a:c7:29:06:22:5a:59:fe:
c7:dc:01:10:ae:34:25:80:a0:45:e5:f7:d8:81:57:
84:d3:68:8c:54:03:5e:3f:28:60:6e:de:4e:dc:dd:
13:56:71:31:a3:67:2f:74:06:6a:e3:a3:2f:c7:cf:
83:cb:4b:bf:84:8f:e2:d4:7a:4a:a2:2f:db:86:a6:
2b:8a:7f:ef:35:22:22:3c:ee:6b:ce:6f:7c:7e:16:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E4:C5:E3:1B:19:F2:CD:F5:F4:60:4C:10:96:39:68:B8:A6:FB:95
X509v3 Authority Key Identifier:
keyid:9B:AE:42:8E:E8:CD:46:04:C1:FB:C1:41:27:8E:F0:D7:53:76:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m65CjujNRgTB-8FBJ47w11N2KCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/5uTF4xsZ8s319GBMEJY5aLim-5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/m65CjujNRgTB-8FBJ47w11N2KCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.48.0/20
Signature Algorithm: sha256WithRSAEncryption
59:c3:79:19:f9:e2:44:26:80:62:1a:b6:49:88:b3:53:a2:b2:
54:00:2c:5f:9e:6f:fb:7b:4e:ec:9a:c9:ba:a1:2c:3b:92:10:
c0:b4:a4:1d:ca:65:d9:fa:76:0e:60:60:fb:ae:8d:02:90:7b:
1f:77:06:de:3a:b6:b5:cf:0d:f4:86:35:96:7a:9f:0c:98:5a:
4f:93:5f:22:19:b9:f8:10:7c:53:50:84:14:79:1d:03:5d:c7:
df:67:27:9c:5c:d9:9d:52:3b:7c:55:8c:bc:e4:f2:0f:7d:50:
82:11:dc:1e:fc:09:69:71:81:b2:83:81:41:4b:7b:ee:e5:aa:
e4:0b:65:72:55:b2:1a:71:19:f3:0f:47:f4:6d:36:2d:2d:38:
d0:63:0a:cb:0c:f8:88:12:f9:de:89:dd:1a:4f:05:35:68:db:
f7:1d:5b:7b:52:2e:5e:c8:83:1e:ef:50:bc:45:32:05:2e:f4:
38:5b:f3:6c:4a:9b:f9:3b:bc:30:5b:f3:4b:cd:65:99:90:e2:
24:e1:49:e2:c7:52:22:8f:65:87:0c:4a:96:df:87:12:f0:00:
b4:0e:82:e2:7b:a3:f4:8d:e7:13:6d:ea:c3:73:5d:5c:d2:fd:
6d:b7:ff:76:e9:b2:a5:30:9d:1b:a9:93:08:f5:b4:9b:83:ff:
4c:56:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:58 2025 by rpki-client