Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/0Q8SSCCufIWIosNtTJ30f-rZDx4.roa
File: 0Q8SSCCufIWIosNtTJ30f-rZDx4.roa (raw, json)
Hash identifier: zvODxFoRd6dWhZfGtIvuQRRE3ek/yIm23XiwyrTo9rA=
Subject key identifier: D1:0F:12:48:20:AE:7C:85:88:A2:C3:6D:4C:9D:F4:7F:EA:D9:0F:1E
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 019523EF087EF41C3CB1787E3C0D14C9477D
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/0Q8SSCCufIWIosNtTJ30f-rZDx4.roa
Signing time: Thu 20 Feb 2025 15:17:02 +0000
ROA not before: Thu 20 Feb 2025 15:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44193
IP address blocks: 91.223.19.0/24 maxlen: 24
194.110.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 14:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:ef:08:7e:f4:1c:3c:b1:78:7e:3c:0d:14:c9:47:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Feb 20 15:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d10f124820ae7c8588a2c36d4c9df47fead90f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:56:75:ec:c4:7e:f7:ff:fd:9f:9c:94:4b:
b9:96:38:16:db:8e:24:0f:1e:a1:87:ab:e7:52:bb:
33:42:67:68:e0:03:aa:b1:d5:f0:59:30:1a:ae:f9:
a1:d8:b7:16:cf:9e:64:cc:bb:fd:ed:dc:43:e9:d6:
af:cf:ba:69:77:c6:0a:c7:fa:bf:13:5e:97:4b:18:
3c:75:8f:55:2e:b0:7b:cd:9e:91:a0:97:58:a5:86:
74:b9:27:31:74:d9:20:0f:46:bf:f2:d4:59:f6:fc:
50:ce:2b:93:50:78:c7:77:8f:c0:1f:99:e0:da:a1:
93:9b:d3:ea:68:32:54:23:7d:e0:8b:39:75:9e:8e:
2c:b8:e3:47:82:f5:6b:e1:2a:bf:81:72:7a:0d:19:
1b:88:7d:13:72:63:24:14:3c:09:66:dc:e5:42:b0:
e2:9d:fb:0f:cf:3b:d9:80:7c:7f:64:af:d1:37:63:
b3:52:08:be:6a:81:a3:fe:ab:dc:ce:34:ac:7d:c5:
d6:45:21:c5:34:a8:77:e8:9c:d1:d2:ac:ba:d0:17:
bb:7d:ac:57:f2:c6:59:71:78:05:8e:2c:40:37:8e:
1a:d3:15:9f:26:bd:e3:ea:f1:1f:3c:10:91:d7:d4:
b8:ba:68:e1:79:dc:8e:3b:f6:80:e4:dc:9c:32:de:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:12:48:20:AE:7C:85:88:A2:C3:6D:4C:9D:F4:7F:EA:D9:0F:1E
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/0Q8SSCCufIWIosNtTJ30f-rZDx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.19.0/24
194.110.204.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a0:ce:d8:18:a1:ef:f5:de:26:62:a8:4d:a1:3d:e8:28:7c:
c2:e3:b8:f5:87:8a:39:a1:5d:b4:c1:04:1d:82:8f:a4:b9:5c:
d4:63:02:62:12:30:81:0b:32:7a:dd:ed:e5:4b:bf:b7:e4:91:
ae:f6:bb:55:98:7a:1c:d6:8f:78:ff:a1:e1:c7:be:ec:4c:7f:
10:22:f9:4b:fd:5b:38:16:a7:cf:28:0d:3d:ff:43:b9:15:94:
fd:59:e1:17:20:ae:b9:f5:3b:30:19:17:35:39:02:dc:3e:59:
1b:f1:8f:8a:17:31:4c:1b:78:35:31:15:f6:ef:53:0a:89:f8:
fa:52:30:7c:9d:e1:5d:8b:6c:15:b2:87:b3:7f:93:1f:7c:1b:
2e:9a:15:09:92:08:94:45:fe:27:9a:d7:e5:5c:fb:f3:9f:b9:
ee:19:1d:a8:42:bd:72:f3:42:4d:2d:74:c3:e9:2b:5c:a5:51:
1a:69:c2:0e:fd:a6:91:d4:5a:af:f2:e2:92:31:ff:c8:50:46:
8b:35:c4:75:13:b1:42:be:2d:35:40:bb:8f:9f:7d:fc:07:f8:
96:03:39:8d:f5:30:6b:29:b4:8e:d2:c8:32:7a:b0:02:9c:e9:
35:73:3a:1a:28:8b:74:c1:c1:1c:66:97:bd:2e:1b:83:1b:cc:
73:11:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:57:25 2025 by rpki-client