Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/ELyoYIwYagJ5hrTvyPbF88OZbsY.roa
File: ELyoYIwYagJ5hrTvyPbF88OZbsY.roa (raw, json)
Hash identifier: HA1eC8MOrRNlZ3CdqUe6ZF8J5gLJTN2hwONm6s04uIQ=
Subject key identifier: 10:BC:A8:60:8C:18:6A:02:79:86:B4:EF:C8:F6:C5:F3:C3:99:6E:C6
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 0193B7C6D8DA50FDBD8BCB591A471C1C13BF
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/ELyoYIwYagJ5hrTvyPbF88OZbsY.roa
Signing time: Wed 11 Dec 2024 22:11:22 +0000
ROA not before: Wed 11 Dec 2024 22:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198890
IP address blocks: 91.239.6.0/24 maxlen: 24
91.239.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Dec 2024 10:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b7:c6:d8:da:50:fd:bd:8b:cb:59:1a:47:1c:1c:13:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Dec 11 22:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10bca8608c186a027986b4efc8f6c5f3c3996ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:e1:59:cb:21:f4:77:9a:d1:b1:fa:36:0d:
48:2d:a3:a0:03:49:be:88:ce:c4:df:1d:60:b4:dc:
69:11:3f:62:27:ee:43:f2:ab:bc:61:a4:a7:6d:69:
3f:5b:89:d6:d7:62:fa:7d:fd:36:77:20:be:4d:a0:
e8:1f:fc:12:d4:98:bc:5e:99:84:ea:5b:22:ae:50:
a3:20:f0:75:d1:c5:81:90:1e:c1:17:25:c6:a2:46:
45:fe:ac:e8:f6:84:3c:39:dc:1e:81:f3:8d:26:85:
49:da:a6:63:2f:5f:8b:3d:cc:f7:db:49:39:dc:b0:
40:6f:29:da:25:04:66:8d:98:9a:6b:36:e0:26:98:
a9:cb:d8:eb:47:02:a5:aa:55:ff:ed:ba:99:c8:e3:
15:ac:09:8d:5c:b3:0b:69:9d:27:86:8e:ab:c2:19:
3c:c7:1a:e5:e5:b3:25:dc:88:be:37:4e:9b:4f:63:
92:78:9f:57:d3:ac:8d:a8:c3:f6:4d:6b:26:0a:63:
a1:b2:cd:69:73:db:c0:fe:4c:81:c9:35:ba:09:9f:
ec:6b:7e:6e:7c:d4:26:e4:25:d6:47:9f:c3:e4:f8:
26:91:ff:d6:b1:ee:61:d0:8b:99:c3:0e:38:93:bd:
b0:65:1b:8c:bf:96:93:39:02:a9:14:cb:80:7f:ee:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BC:A8:60:8C:18:6A:02:79:86:B4:EF:C8:F6:C5:F3:C3:99:6E:C6
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/ELyoYIwYagJ5hrTvyPbF88OZbsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/23
Signature Algorithm: sha256WithRSAEncryption
21:3d:4d:1a:fd:8a:84:fc:d1:8d:cd:e0:a6:8d:85:43:f2:70:
26:ad:db:05:58:b8:dd:26:89:89:bf:14:79:5f:8a:1c:0d:65:
78:24:a1:81:34:22:28:bb:94:16:e7:e5:5c:b2:b6:21:fe:e5:
45:82:91:b5:d0:ee:ff:ca:3e:aa:cf:6a:1e:a3:47:25:48:27:
4b:b3:e0:05:e5:ba:00:46:af:94:dc:68:70:16:de:6c:c7:d1:
cc:37:32:8f:20:f8:48:04:00:f6:96:80:09:ec:12:a5:cb:4c:
ed:bc:67:48:fb:1e:fd:98:08:3d:d2:2b:e8:0e:4d:05:2b:f0:
a0:e2:d3:2f:5a:74:42:28:60:e6:e1:3b:18:fd:05:75:9a:1b:
10:d8:ff:bd:fe:de:e3:c5:66:1e:4d:0c:32:f0:2f:e4:ec:6a:
27:14:7b:86:45:b1:fd:ab:6a:65:25:88:0b:74:46:95:1b:ef:
d9:a9:5f:2d:e5:d0:a0:ee:43:5b:9d:fd:93:98:bd:d5:8a:c5:
a2:8e:28:ed:49:30:23:66:9c:de:02:03:35:68:b1:b0:63:05:
de:e5:02:a5:72:a4:35:6f:0d:42:71:ca:19:29:28:97:1a:77:
b6:6c:c5:9f:a6:7c:d6:41:ce:6a:b3:03:c9:54:8c:5e:e1:c2:
08:34:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:34:50 2025 by rpki-client