Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/6n-5-pHPFcC-90_NolnbC425ZsQ.roa
File: 6n-5-pHPFcC-90_NolnbC425ZsQ.roa (raw, json)
Hash identifier: RvDybFIBM0xmGNfnW03XFgLci2FPCc4DPpFANyMJaaE=
Subject key identifier: EA:7F:B9:FA:91:CF:15:C0:BE:F7:4F:CD:A2:59:DB:0B:8D:B9:66:C4
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 0194F13C7B60DF5424EB86849A6B2121FA4A
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/6n-5-pHPFcC-90_NolnbC425ZsQ.roa
Signing time: Mon 10 Feb 2025 19:01:00 +0000
ROA not before: Mon 10 Feb 2025 19:01:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9110
IP address blocks: 91.142.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 10:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:3c:7b:60:df:54:24:eb:86:84:9a:6b:21:21:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Feb 10 19:01:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea7fb9fa91cf15c0bef74fcda259db0b8db966c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:11:e0:7b:7c:b3:d0:1c:fe:47:f1:de:b9:
14:88:4f:4a:74:a1:1b:9b:ae:37:35:30:31:8b:86:
91:92:bc:1a:93:88:3c:ad:db:86:0c:ec:9e:a4:95:
2b:fc:a3:24:67:7c:84:b0:05:a2:6e:47:fd:ce:fe:
17:03:fd:dc:49:1f:1e:ed:5f:56:09:93:a6:48:3f:
9b:c8:ff:3b:96:0c:20:14:69:4e:fc:34:2c:4a:13:
9c:82:ec:d5:d3:2b:dc:8a:e3:55:de:6b:6d:53:1d:
6e:bf:ee:5f:ae:ca:e1:eb:f6:bd:dd:69:d6:54:8e:
ea:1a:23:f4:44:51:c2:1f:18:34:36:cb:75:68:bf:
cd:c9:40:07:58:3f:ee:bd:d7:4a:aa:06:7f:3d:f4:
7e:57:e1:23:9e:d7:c9:f1:12:37:6a:0b:c5:3e:08:
9d:7f:65:72:7e:67:8b:dc:21:d8:9c:d3:0e:af:16:
cc:35:b0:27:40:b5:1a:c3:cd:ff:b9:cf:c0:8a:84:
90:2c:9a:c5:c3:a9:26:87:19:a6:fc:16:ad:36:b3:
2f:fd:1d:06:97:03:9c:29:a2:45:ca:80:75:26:15:
bb:ca:98:2a:26:8a:07:89:4d:b6:f8:fa:f7:71:3e:
20:dd:7b:09:4c:1e:ea:73:bf:be:8d:ea:2d:bf:3e:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7F:B9:FA:91:CF:15:C0:BE:F7:4F:CD:A2:59:DB:0B:8D:B9:66:C4
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/6n-5-pHPFcC-90_NolnbC425ZsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1b:ba:b3:e7:9d:de:35:64:e3:7d:85:87:27:4c:b0:93:8b:
e5:02:9f:75:5b:ef:3d:06:2d:40:ab:be:5d:98:00:dc:2d:d9:
89:27:78:ca:fd:82:95:15:25:f0:2b:7d:95:df:3a:e6:e3:9d:
c3:92:b6:32:22:16:22:b4:76:3b:38:11:a3:e0:52:4a:0d:4b:
8c:cf:5b:8c:e2:98:4c:5d:dc:69:16:dd:03:60:e6:7b:89:f3:
e5:3d:a1:ee:a2:aa:24:eb:34:62:4f:8b:04:54:43:53:3e:70:
7c:0a:50:c4:ab:ee:9c:eb:e2:4e:31:01:5f:ea:50:42:61:80:
74:cd:18:e5:9b:9e:8d:6d:d2:71:16:e4:14:01:98:4f:86:4f:
0f:ea:7b:8b:62:00:ea:f9:f0:7a:65:3e:26:b4:7b:f5:ff:10:
af:b5:12:fb:3d:23:e7:e8:a6:e5:44:15:d7:6d:d7:1d:a0:04:
3d:58:e2:58:d6:25:b4:17:2b:19:64:ce:65:a7:7e:86:b8:42:
2c:fe:82:c9:c4:ac:7a:b2:b8:5c:dd:e1:e7:a1:e3:71:07:45:
4a:3d:b6:e2:15:65:83:b5:4d:14:48:d6:14:5f:9a:c8:8d:a2:
8d:db:8f:31:da:6f:00:4b:82:0e:c3:00:9e:2c:41:8e:a8:3f:
ca:39:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:53:48 2025 by rpki-client