Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/5I1Rk3TF0h1KrTu1thD8OXIAkyI.roa
File: 5I1Rk3TF0h1KrTu1thD8OXIAkyI.roa (raw, json)
Hash identifier: IrAnWfvYw51UJGVcgRcZGM3ARBoGaO2dtRIh4iVzCoI=
Subject key identifier: E4:8D:51:93:74:C5:D2:1D:4A:AD:3B:B5:B6:10:FC:39:72:00:93:22
Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial: 019668110FB1B43E70460DA13E1EBB6B4436
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/5I1Rk3TF0h1KrTu1thD8OXIAkyI.roa
Signing time: Thu 24 Apr 2025 13:51:10 +0000
ROA not before: Thu 24 Apr 2025 13:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52914
IP address blocks: 91.241.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 15:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:11:0f:b1:b4:3e:70:46:0d:a1:3e:1e:bb:6b:44:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
Validity
Not Before: Apr 24 13:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e48d519374c5d21d4aad3bb5b610fc3972009322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:98:d9:68:d8:48:52:25:66:ad:56:7b:ae:
b2:d1:ec:cd:da:a2:da:31:61:2a:ea:33:07:46:63:
b4:6e:e4:9d:35:18:db:17:97:ff:73:7c:74:14:1f:
35:ee:0b:78:cc:3a:bc:16:f5:72:99:9a:06:4b:f4:
a3:41:20:c2:7c:97:9d:d9:11:ba:e2:c1:8a:09:88:
06:56:62:a0:fa:c0:6c:0b:5d:df:3d:1d:01:b6:32:
5e:00:16:8e:13:15:86:ba:b0:8e:b9:48:8a:ba:bc:
74:54:d5:a6:7d:ec:c8:51:69:02:70:ed:29:eb:6a:
4e:c4:19:9c:28:3d:87:74:66:2a:16:39:c5:84:10:
9a:ce:d0:92:db:91:53:68:d7:5f:ff:d5:92:9f:fd:
f5:90:76:da:ad:7e:f0:b7:42:bb:14:2f:bf:96:43:
0f:99:40:d4:9f:f5:24:fc:91:18:c3:ba:e4:5d:66:
53:c3:67:f7:82:2c:e3:6c:f4:dc:c3:b4:52:a2:7d:
4d:0d:1d:55:6c:09:1f:1d:3c:85:94:6c:64:50:9e:
4d:fc:b2:18:58:25:75:c3:be:0c:30:ce:d8:7b:60:
ca:10:9d:e4:1f:41:42:6d:9c:73:12:86:37:a1:04:
b1:15:fa:72:ae:e1:1b:88:94:4c:35:d1:35:1f:ae:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:51:93:74:C5:D2:1D:4A:AD:3B:B5:B6:10:FC:39:72:00:93:22
X509v3 Authority Key Identifier:
keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/5I1Rk3TF0h1KrTu1thD8OXIAkyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.47.0/24
Signature Algorithm: sha256WithRSAEncryption
28:24:ae:87:72:b3:2a:e6:cd:0d:20:61:40:19:f7:c9:eb:cd:
74:c2:ce:d2:43:b4:e2:e3:64:7a:9d:a5:d5:5d:9c:7f:20:ed:
44:0d:26:b4:b6:56:c5:66:76:b2:46:73:eb:f4:eb:8d:20:0f:
11:6f:a6:31:d8:09:34:ce:13:29:ad:77:9f:92:24:c5:f3:e2:
c3:22:36:e3:ac:83:20:a8:c2:0d:5b:7a:18:6d:c2:ca:48:82:
aa:b1:c3:18:bf:32:ad:f3:38:f7:94:05:b4:6b:4d:a4:b6:31:
85:78:fe:3f:18:45:66:ce:23:a7:23:e0:53:41:25:79:1c:64:
f5:3f:94:63:cf:fc:95:e4:64:18:c2:d6:3a:74:40:e8:e2:62:
1b:e2:21:55:df:30:f9:db:38:62:b0:79:1a:c1:f6:05:70:31:
e3:50:38:ad:e6:b2:7b:60:27:5c:ad:23:db:af:23:dc:05:5c:
58:08:08:d0:4f:a8:bc:b8:48:64:b0:a9:f7:61:4b:5d:8e:47:
9b:2c:19:26:9c:56:10:30:71:9e:7c:cd:4d:2b:24:e2:04:3d:
2e:98:aa:48:61:f3:65:f3:52:ff:61:fc:7d:d3:53:cf:cb:df:
8a:45:47:25:fb:eb:bc:91:ad:d6:24:33:b8:d2:10:5c:5f:df:
4c:9b:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:59:02 2025 by rpki-client