Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/AtekSlAejMvQxNKOMSRA2Q4I_c0.roa
File: AtekSlAejMvQxNKOMSRA2Q4I_c0.roa (raw, json)
Hash identifier: fYOheoXhrZ09wIQj1d2zLnZVLLY94AcTS9TaJyoqHBM=
Subject key identifier: 02:D7:A4:4A:50:1E:8C:CB:D0:C4:D2:8E:31:24:40:D9:0E:08:FD:CD
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0194E060C78D5FF9690D1B5E4ED25AB6F906
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/AtekSlAejMvQxNKOMSRA2Q4I_c0.roa
Signing time: Fri 07 Feb 2025 12:27:06 +0000
ROA not before: Fri 07 Feb 2025 12:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.192.0/24 maxlen: 24
91.108.193.0/24 maxlen: 24
91.108.194.0/24 maxlen: 24
91.108.195.0/24 maxlen: 24
91.108.196.0/22 maxlen: 22
91.108.200.0/22 maxlen: 22
91.108.204.0/22 maxlen: 22
91.108.208.0/22 maxlen: 22
91.108.208.0/24 maxlen: 24
91.108.212.0/22 maxlen: 22
91.108.216.0/22 maxlen: 22
91.108.220.0/22 maxlen: 22
91.108.224.0/24 maxlen: 24
91.108.228.0/22 maxlen: 22
91.108.232.0/22 maxlen: 22
91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 07:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:60:c7:8d:5f:f9:69:0d:1b:5e:4e:d2:5a:b6:f9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Feb 7 12:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02d7a44a501e8ccbd0c4d28e312440d90e08fdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:66:99:6d:f8:f0:a9:10:49:c5:7d:36:b6:
82:b4:81:aa:00:02:d4:30:ea:1a:9c:bb:0c:90:a2:
7b:5e:e5:80:04:7f:52:54:6c:72:2c:4d:85:24:f3:
3d:cd:80:9e:59:dc:c6:30:28:f7:50:86:c4:94:f5:
3e:4e:86:56:7f:f9:5c:13:20:0b:38:bb:38:a2:db:
2d:02:04:02:ce:f8:6b:a0:03:2f:4d:d1:1d:e7:63:
1d:58:90:fe:00:ac:11:83:e3:75:05:b9:42:6f:59:
21:f6:b2:0d:a8:16:ce:71:2a:56:b2:f3:df:d0:bf:
a1:17:dd:31:91:7b:36:e6:83:2a:ae:50:0e:a5:0d:
24:a0:32:26:79:78:0a:09:ea:cb:50:e7:52:ad:4d:
bc:9a:e8:c5:9d:99:7e:f4:d9:b3:b6:a1:56:6d:aa:
c9:b6:07:e7:cb:ca:8c:35:2a:9d:84:a4:a0:20:54:
b9:9c:22:0c:0e:21:d6:70:54:6a:03:0d:be:93:a7:
91:0e:67:43:63:08:86:de:00:99:83:76:f0:00:e3:
4d:a1:9a:fe:a5:49:d4:ea:f4:2a:5e:4c:be:bc:53:
a3:c2:3f:23:40:44:b3:70:79:1b:72:0f:9f:6c:c6:
7f:0b:fd:8e:df:93:5f:9f:6b:16:5e:57:6c:f7:0e:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D7:A4:4A:50:1E:8C:CB:D0:C4:D2:8E:31:24:40:D9:0E:08:FD:CD
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/AtekSlAejMvQxNKOMSRA2Q4I_c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0-91.108.224.255
91.108.228.0-91.108.236.255
91.108.238.0/24
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
12:81:af:ca:b7:8b:c2:29:1b:b8:f2:c6:d9:ee:e9:04:34:d1:
cf:bf:10:78:03:25:de:eb:d5:35:4a:46:f1:49:e7:b4:7f:b5:
12:55:aa:53:69:d6:37:69:18:75:de:94:4f:ee:72:b9:d0:37:
24:73:ea:d5:3b:5a:ca:c7:20:64:b5:b1:5c:b2:1a:7c:8e:80:
ec:66:fb:04:6c:4b:d4:04:73:c8:35:d0:a7:e9:80:66:d2:19:
d9:87:fa:45:8d:c1:25:a3:a2:a6:07:8d:a6:e8:e4:d6:b7:44:
ef:44:70:17:df:a6:38:71:68:4a:6d:88:5d:55:18:ce:6a:04:
58:06:27:c4:44:73:92:8a:ac:9e:d3:66:03:cc:2e:6b:8e:d3:
f6:45:0e:7b:ee:14:66:e3:1c:d9:1e:f0:23:25:40:49:93:b6:
a3:b6:26:fd:91:2d:db:64:6e:d1:03:bf:47:9b:61:88:6a:f3:
67:f6:5d:b1:48:cf:83:16:68:65:28:5a:71:2c:3f:e4:3f:24:
49:74:69:db:5f:06:a1:60:c8:dd:23:a7:dd:41:50:da:0b:a1:
4c:07:82:f1:0e:a6:75:71:9e:49:08:7b:6e:ef:cc:32:6e:04:
42:06:c5:4c:39:e2:be:2d:dc:f1:61:8d:9a:cb:95:fc:b1:0d:
47:37:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:08:28 2025 by rpki-client