Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/oulQEYCFI7D0Y-o_hbRL3pAiewY.roa
File: oulQEYCFI7D0Y-o_hbRL3pAiewY.roa (raw, json)
Hash identifier: RSVkTBSN0zPfH0cQDj+k7OXVoIGyK25wKFYWvPd/qfU=
Subject key identifier: A2:E9:50:11:80:85:23:B0:F4:63:EA:3F:85:B4:4B:DE:90:22:7B:06
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 0190FE38F995214D2439FCE16C17596D3AAF
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/oulQEYCFI7D0Y-o_hbRL3pAiewY.roa
Signing time: Mon 29 Jul 2024 11:21:05 +0000
ROA not before: Mon 29 Jul 2024 11:21:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57461
IP address blocks: 91.232.72.0/22 maxlen: 22
91.232.74.0/24 maxlen: 24
91.232.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:38:f9:95:21:4d:24:39:fc:e1:6c:17:59:6d:3a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Jul 29 11:21:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2e95011808523b0f463ea3f85b44bde90227b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:bb:fa:b0:dc:f2:04:46:8c:ae:ea:a3:24:
12:a2:a1:17:2d:22:0a:55:c1:e7:4a:d2:f7:d5:7a:
76:95:6a:74:85:34:57:76:df:3b:2e:8e:bc:f3:2d:
41:11:4a:eb:a7:cd:48:81:4b:cb:d2:65:16:97:e7:
3b:40:fd:09:63:15:13:88:ad:06:b9:9a:f5:6d:09:
a3:86:23:be:8d:b0:29:19:04:0e:b2:16:46:e6:91:
7f:4e:ef:3c:be:3c:f1:fb:5c:34:9b:41:69:5a:72:
b1:32:cd:76:55:ec:15:b5:55:ec:bd:c4:94:ae:c3:
96:ff:14:42:c0:de:fa:02:a6:76:c1:93:fb:d4:a4:
30:82:bd:5d:6f:c3:5f:b8:08:3c:0e:15:70:12:cd:
43:9b:86:57:9a:2c:be:aa:82:40:c9:b6:ba:94:ad:
c2:76:83:ce:05:22:b1:23:b3:97:de:19:ec:4f:cd:
b4:88:b6:28:c7:82:fa:0d:f9:e3:46:72:3a:73:26:
d1:8b:2a:ca:81:a3:16:82:30:47:1e:26:b5:99:db:
b3:6e:d8:d3:d7:f7:25:ca:41:10:b0:c7:d1:32:53:
80:1c:f0:5b:c1:16:37:a8:89:b4:c0:4e:5a:a0:2e:
33:07:3f:ec:06:e9:10:0c:83:66:af:00:7c:44:66:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:50:11:80:85:23:B0:F4:63:EA:3F:85:B4:4B:DE:90:22:7B:06
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/oulQEYCFI7D0Y-o_hbRL3pAiewY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.72.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:6a:8a:02:c1:6c:b0:57:a0:49:21:f8:7f:68:e0:39:4a:c7:
81:d4:62:bf:d9:10:94:5a:7a:8f:70:17:a2:7b:05:a2:03:9f:
d6:50:26:bf:bb:a0:0e:0d:ba:2e:ba:16:82:63:e2:14:19:af:
e1:00:1f:4c:a3:a1:6c:b0:bd:8d:6b:47:e9:ab:72:ef:25:63:
6a:95:f5:a9:50:68:71:3e:ff:d1:c2:f8:0a:79:38:51:cc:61:
a0:e7:be:b9:13:de:26:80:56:65:de:a2:9c:dd:7b:b5:9c:26:
a5:1d:49:ed:1f:1b:a4:ef:f0:b3:94:4e:1e:43:a0:cb:87:2e:
00:1c:ed:84:63:c4:74:1a:79:7e:d6:d0:7c:cd:88:d8:e9:76:
82:59:de:bb:04:9b:0c:c2:99:07:c3:f7:88:67:17:f0:a1:db:
8f:ea:1f:af:a1:89:95:4c:d1:94:29:25:61:05:b0:ad:ca:84:
46:2b:dd:34:95:0a:0b:43:b9:17:d9:ac:f9:ae:62:66:e0:3e:
fa:0d:2a:71:bf:b3:c8:62:54:d3:22:72:35:46:2f:fd:2c:97:
09:d1:c8:fd:5a:2d:7d:49:85:30:29:11:ba:eb:f4:94:6f:13:
2d:f6:27:37:c0:26:8e:56:42:c1:84:5b:12:e8:86:7c:95:c3:
27:f6:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:03 2025 by rpki-client