Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/Km1HHfMUlhTyPoCTSMQsxY5XAVc.roa
File: Km1HHfMUlhTyPoCTSMQsxY5XAVc.roa (raw, json)
Hash identifier: KJEa6LEv2A9qsyvS2LQB1UUUBjty0tn4JyzXHyPw7NU=
Subject key identifier: 2A:6D:47:1D:F3:14:96:14:F2:3E:80:93:48:C4:2C:C5:8E:57:01:57
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 018D2AD580A6BF13F3FEE53977808D6C4EBD
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/Km1HHfMUlhTyPoCTSMQsxY5XAVc.roa
Signing time: Sun 21 Jan 2024 07:04:11 +0000
ROA not before: Sun 21 Jan 2024 07:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50767
IP address blocks: 91.206.154.0/23 maxlen: 23
91.224.128.0/23 maxlen: 23
91.227.0.0/22 maxlen: 22
185.233.24.0/22 maxlen: 22
193.106.228.0/22 maxlen: 22
193.107.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 23 Oct 2024 12:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2a:d5:80:a6:bf:13:f3:fe:e5:39:77:80:8d:6c:4e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Jan 21 07:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a6d471df3149614f23e809348c42cc58e570157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:a4:9a:ab:6a:80:a7:58:17:f6:78:51:ef:
6a:94:80:93:b4:7b:77:be:30:92:39:a5:f4:39:f2:
15:17:50:ec:8c:1b:1c:bb:85:b8:c0:c6:28:ff:8b:
f8:b1:eb:ff:2a:99:da:7f:ca:9c:2f:d2:3e:9c:a8:
d5:7f:84:7b:5a:e1:5a:72:98:ac:83:c0:ab:03:72:
1d:65:fb:c9:b9:9d:9e:e4:25:d4:c2:3d:02:29:3e:
0d:11:d7:07:46:25:1b:b5:8a:cd:9a:b4:f9:89:8a:
33:e9:54:cc:f2:fc:f2:5a:37:86:75:d1:0c:2e:5c:
e5:cd:18:46:d7:7d:cf:8d:5c:b7:67:4c:21:c4:c7:
66:dc:9e:29:70:01:bd:33:ff:fe:96:e7:29:e1:fc:
89:3c:7b:30:b0:6e:98:1d:26:59:f8:90:a0:41:1f:
8c:54:20:9d:23:49:6a:29:71:31:13:c1:e5:3b:87:
2e:1e:b0:26:59:30:0b:06:9f:9d:74:a5:f5:ec:8c:
0e:a2:78:0b:ef:f2:b0:23:56:a8:c8:93:16:c2:74:
2e:21:2d:6e:f1:f0:7e:85:45:9f:03:7d:69:9d:0e:
7f:61:6f:82:6f:ee:dd:49:ea:32:20:b6:38:e8:fb:
89:cd:f0:7b:bc:ce:95:f9:cc:fe:75:69:7e:8b:8d:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:47:1D:F3:14:96:14:F2:3E:80:93:48:C4:2C:C5:8E:57:01:57
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/Km1HHfMUlhTyPoCTSMQsxY5XAVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.154.0/23
91.224.128.0/23
91.227.0.0/22
185.233.24.0/22
193.106.228.0/22
193.107.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:4a:bd:ef:fc:13:79:42:d4:99:25:2d:1a:ec:a3:7d:f7:25:
a6:01:8f:8e:3a:57:71:7a:73:c5:07:1c:a1:1e:dd:f1:50:0d:
f9:60:2a:66:96:77:d1:2f:2e:c4:55:84:ce:e4:e5:47:4f:81:
46:65:d9:06:25:2d:da:d9:5c:51:60:dc:ec:4a:5c:72:b4:e1:
6e:0e:53:17:f2:e1:5e:cf:80:86:70:0d:4e:9c:c9:4e:56:87:
3f:a9:b2:4e:81:d6:03:15:8f:1a:c0:7a:3e:91:2b:81:c6:0e:
86:8b:53:19:bf:21:eb:0c:d1:b9:ec:e6:0d:b6:bd:5e:74:f4:
75:1d:14:03:17:55:c1:e0:95:5d:b1:ec:28:74:e0:7b:23:99:
f7:d0:22:e0:df:af:5a:a2:cc:b9:45:83:03:63:03:f7:96:d0:
73:15:9e:dc:8b:db:54:25:73:77:96:1d:12:ce:23:ad:73:de:
71:41:52:88:87:ff:a8:82:47:74:d7:d6:d9:bc:33:71:ba:ca:
79:65:5f:99:7b:27:4a:3b:c6:df:f6:94:41:b0:61:0c:2e:81:
b7:fc:4b:06:4f:58:ca:bc:4c:36:1a:72:ff:7b:92:ce:df:53:
34:51:e0:51:fb:9b:7c:32:d2:9b:cb:70:a5:29:1c:9a:00:7f:
c4:32:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:46:59 2025 by rpki-client