Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/r1MBY53bPWiTtbUhBTG0wfARiKU.roa
File: r1MBY53bPWiTtbUhBTG0wfARiKU.roa (raw, json)
Hash identifier: PJzT5V3qa/Gi95uuFdyb2z/759wpoMIYmVo2zbjpuf0=
Subject key identifier: AF:53:01:63:9D:DB:3D:68:93:B5:B5:21:05:31:B4:C1:F0:11:88:A5
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0194F922EC1C0912C08E0D485230C99DF19F
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/r1MBY53bPWiTtbUhBTG0wfARiKU.roa
Signing time: Wed 12 Feb 2025 07:50:03 +0000
ROA not before: Wed 12 Feb 2025 07:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11209372
IP address blocks: 91.108.196.0/22 maxlen: 22
91.108.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 12 Feb 2025 08:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:22:ec:1c:09:12:c0:8e:0d:48:52:30:c9:9d:f1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Feb 12 07:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af5301639ddb3d6893b5b5210531b4c1f01188a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:38:0a:85:20:10:15:e8:f7:dc:1b:85:3a:
e8:1e:d5:80:27:01:9b:f2:8a:7e:19:6c:cd:fe:ea:
26:cb:17:fe:33:23:fc:98:5b:d3:1a:76:87:1b:d1:
82:37:f9:de:cb:85:56:60:14:7c:ff:74:39:47:5e:
c2:5f:b8:f0:82:b8:e5:83:73:8e:f8:b0:7f:5a:b6:
7e:04:0d:c5:90:cc:eb:4c:3e:2e:86:70:04:82:71:
98:2b:b5:27:3e:ea:80:bf:06:af:e9:91:45:93:b4:
d0:20:49:65:36:f8:1b:17:7b:cd:d6:1e:f7:08:44:
fd:bd:88:fa:a6:48:13:26:e2:f6:6d:27:2e:22:cb:
d3:06:1c:06:7d:de:cb:27:01:f7:ac:0c:76:10:1f:
8f:c8:0e:fb:77:df:20:e3:9c:f3:2f:f0:2d:a2:d8:
6c:67:26:f0:ac:1c:13:9a:05:49:b4:b6:96:6f:99:
9f:50:bc:6f:90:d8:1c:f7:a3:d2:d3:19:36:af:6a:
8b:12:16:3b:75:9b:79:f5:57:8a:46:32:b8:6c:55:
0e:0b:10:47:82:eb:15:d3:db:35:c0:67:1e:b8:61:
25:65:a4:fb:cc:93:e9:68:ea:31:39:e5:b5:32:5a:
01:35:84:25:d9:d3:81:36:d8:a1:34:40:81:ca:b1:
8c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:01:63:9D:DB:3D:68:93:B5:B5:21:05:31:B4:C1:F0:11:88:A5
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/r1MBY53bPWiTtbUhBTG0wfARiKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.196.0-91.108.203.255
Signature Algorithm: sha256WithRSAEncryption
67:62:d9:56:2a:05:49:f0:a0:4e:b5:48:90:a2:5e:8b:36:8f:
74:67:14:33:80:a9:e2:9e:f8:a8:13:c1:47:50:b8:20:e5:be:
31:a7:6e:0a:89:d8:6b:9d:37:2b:f4:ae:ba:9f:ea:7e:44:0f:
90:c1:68:fd:1f:a7:c0:3a:27:3c:37:ce:8f:8c:bf:67:a4:ae:
a1:f7:71:8b:72:30:cd:1c:c4:2e:b9:5b:e5:8d:37:b9:ba:1b:
19:a3:42:5f:2e:83:2a:49:f5:06:eb:08:25:7e:17:5a:89:15:
1a:ab:a3:0d:c5:55:b2:c3:78:3f:ff:77:0d:7f:74:c8:74:0a:
a9:06:c2:33:cf:84:1b:25:ab:4d:20:d4:8c:2c:19:b5:b7:d6:
b4:b3:33:8c:d3:24:43:42:aa:82:08:22:07:2c:e2:2d:d0:b6:
1d:ed:65:f5:c0:6c:95:2b:dd:33:38:d1:8b:ea:94:3c:a8:e3:
87:43:a7:60:4e:59:42:b1:18:be:0a:c7:dc:ef:b8:a0:7f:2b:
b0:30:f0:e5:7f:98:84:c2:d0:cd:ed:b4:2b:b3:06:70:81:20:
d2:00:9f:1d:f3:86:0e:54:f0:06:74:b7:93:84:b7:70:74:e1:
49:11:d7:8b:c8:e0:ff:43:c0:ce:14:e4:a7:62:fe:bf:99:70:
8c:de:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:47:51 2025 by rpki-client