Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1VhXUYDxWdaKKJUB-szXHhaLzLc.roa
File: 1VhXUYDxWdaKKJUB-szXHhaLzLc.roa (raw, json)
Hash identifier: yQkOd5p08M0+gLuivNpuyoSMr1buT5qeJaXepEsjZ3o=
Subject key identifier: D5:58:57:51:80:F1:59:D6:8A:28:95:01:FA:CC:D7:1E:16:8B:CC:B7
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01954E7E12742C871AF4917A3DEBCBBE9D0B
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1VhXUYDxWdaKKJUB-szXHhaLzLc.roa
Signing time: Fri 28 Feb 2025 21:37:19 +0000
ROA not before: Fri 28 Feb 2025 21:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 91.108.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 15:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4e:7e:12:74:2c:87:1a:f4:91:7a:3d:eb:cb:be:9d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Feb 28 21:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d558575180f159d68a289501faccd71e168bccb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6f:eb:4e:94:1b:56:82:ba:7d:f1:61:b4:f9:
f2:b2:5d:1b:aa:b9:66:8d:a9:12:bc:b9:f3:7b:78:
3a:d4:cf:eb:4b:d3:15:10:7c:6a:9f:0e:43:96:9d:
43:a3:21:02:57:d7:1b:e2:29:4e:fc:b4:66:05:22:
c3:dc:42:7f:16:41:95:b8:be:d0:fc:d0:a7:5e:75:
0f:2f:81:d5:ec:88:b9:ac:ac:c0:67:fa:a3:b8:9b:
60:d8:70:06:78:ed:b6:63:f2:3c:4e:93:01:ff:6f:
af:0c:af:7f:8d:62:58:84:6c:4b:4a:78:cf:ee:81:
03:be:dd:75:94:91:4c:b8:7a:a3:74:af:e6:c9:e8:
3c:e4:f6:ab:bf:19:a9:e5:48:b1:dd:91:8c:bb:c7:
14:4a:48:9b:c3:83:ab:6c:dd:b5:6f:99:c0:b4:45:
21:7e:fa:d3:6b:0c:19:0a:1b:0f:00:f7:1d:bd:34:
83:b1:c5:79:fb:81:98:a2:92:95:15:51:fc:7e:7d:
bb:22:eb:58:88:67:52:4b:67:b4:57:5e:4d:51:93:
11:87:13:e0:0f:0c:e8:31:84:42:09:17:d6:0e:07:
02:b0:e7:1b:ca:ab:b9:ef:d4:31:a2:7e:eb:66:7c:
4e:32:c0:d3:12:28:85:8e:b1:0e:13:82:a5:b4:3c:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:57:51:80:F1:59:D6:8A:28:95:01:FA:CC:D7:1E:16:8B:CC:B7
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1VhXUYDxWdaKKJUB-szXHhaLzLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.237.0/24
Signature Algorithm: sha256WithRSAEncryption
00:16:68:0c:44:44:a2:6b:5b:0c:ef:dc:2d:7b:4d:19:c6:c7:
f0:b9:a3:7d:13:11:ed:86:0f:0a:c3:90:4d:cb:11:98:e0:e4:
f6:0a:87:ca:b7:c8:f7:fd:dd:ad:4e:6b:74:3b:e6:0c:5a:cc:
af:ed:02:2d:4d:1a:9e:2a:bf:ef:e6:36:ea:87:5e:99:95:83:
e0:fb:00:f3:0f:ed:f1:e8:52:7b:78:7b:7c:be:de:32:b4:56:
95:11:56:7c:61:07:9b:20:7b:c9:38:29:15:13:5e:1e:65:85:
64:37:20:33:92:3b:d4:f9:8b:2c:af:35:67:96:8f:b5:92:e0:
71:70:13:50:37:71:9d:65:87:b5:33:8a:fb:c6:1f:3d:0b:f6:
49:7f:df:34:d0:68:9d:ff:45:3a:d6:1a:0a:6d:db:bf:46:04:
8d:e1:39:e0:40:69:b2:10:a3:5a:78:1b:6d:09:13:92:02:07:
28:ec:1c:77:99:eb:28:e1:26:8c:6d:49:7b:87:c5:5a:30:cb:
61:84:f9:32:68:ef:48:0a:5d:29:ff:bd:74:eb:de:48:fa:a0:
b8:8e:8f:f6:9f:a4:da:72:b4:b1:c1:92:7c:08:8c:91:15:dd:
b2:45:f5:73:be:48:99:a1:5a:64:22:91:d4:78:66:a6:d6:72:
10:ff:d1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:40:10 2025 by rpki-client