Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/6EP-oQC1JsOkJb2QUcLhDtTtThA.roa
File: 6EP-oQC1JsOkJb2QUcLhDtTtThA.roa (raw, json)
Hash identifier: awjnYLo27bd73FEAPO2ygWKhbJONqinY4HIG6agpeVo=
Subject key identifier: E8:43:FE:A1:00:B5:26:C3:A4:25:BD:90:51:C2:E1:0E:D4:ED:4E:10
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0196A98D48773CC8C5DAF009444EBB5EAD67
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/6EP-oQC1JsOkJb2QUcLhDtTtThA.roa
Signing time: Wed 07 May 2025 07:02:10 +0000
ROA not before: Wed 07 May 2025 07:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58030
IP address blocks: 91.237.255.0/24 maxlen: 24
91.238.0.0/24 maxlen: 24
2001:67c:1158::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 May 2025 13:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8d:48:77:3c:c8:c5:da:f0:09:44:4e:bb:5e:ad:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: May 7 07:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e843fea100b526c3a425bd9051c2e10ed4ed4e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:1f:ee:d3:b1:fe:a4:28:2a:1a:21:d8:99:
f4:b1:26:4e:32:0b:4f:bd:b9:98:16:29:23:78:57:
59:0f:7f:86:c0:43:cc:12:8d:59:8c:c9:36:47:f5:
29:ee:93:8a:08:f4:ae:f4:a5:08:1e:8a:d4:36:23:
bf:dd:c1:74:9d:23:63:18:00:2b:c6:6e:9d:32:19:
9e:72:20:c0:36:9e:5a:89:98:27:34:c1:ef:1d:50:
93:0d:e6:50:d0:7c:3d:44:c8:f3:9c:51:36:0a:35:
d9:a9:11:02:e7:7e:30:87:a4:04:a4:35:62:33:06:
3c:34:46:92:5f:7d:ed:3f:52:cc:48:63:a3:d8:97:
9d:7d:a9:97:73:47:b3:cc:95:df:bc:57:f3:47:d7:
16:57:39:2a:aa:11:c8:0e:b0:b5:91:3d:79:24:22:
f1:4e:65:b9:3e:a6:3e:50:fa:6c:94:48:f6:17:f7:
fa:3c:2f:f9:15:b2:fe:7a:ea:5e:b9:5d:35:05:94:
0d:70:f8:bd:ca:05:8e:43:3e:ea:87:fc:c8:74:dc:
d0:15:5c:dc:fe:ef:41:5d:2c:ae:81:8a:fe:b9:69:
f3:e5:37:ec:19:7f:e9:aa:f3:78:4f:6e:b5:2a:d5:
d1:8b:e4:20:c6:8c:de:ed:d4:75:57:0e:cd:4f:5a:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:FE:A1:00:B5:26:C3:A4:25:BD:90:51:C2:E1:0E:D4:ED:4E:10
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/6EP-oQC1JsOkJb2QUcLhDtTtThA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.255.0-91.238.0.255
IPv6:
2001:67c:1158::/48
Signature Algorithm: sha256WithRSAEncryption
19:9e:69:7c:0f:f1:d7:44:8f:d7:4e:4f:3c:b8:ac:4d:98:73:
d2:13:4e:d8:a8:b4:68:73:bf:1f:cd:d1:20:c2:72:8e:eb:3f:
35:1a:b5:1b:c6:30:e3:6f:d8:72:af:6a:23:96:b3:ea:c1:af:
05:4f:e0:48:80:71:cc:db:42:a0:6a:bd:88:c5:a9:fa:f0:1e:
32:7a:b7:6f:e7:1f:af:06:f6:84:87:66:d8:dc:99:3a:87:c1:
5c:fa:d6:a6:29:ff:a8:b3:cf:9b:f5:2f:60:f9:ad:5c:61:af:
8e:60:83:21:46:fe:42:55:53:d0:83:ef:bc:c2:d5:56:7a:2f:
91:84:fe:9e:3b:45:7f:39:a4:b7:37:88:28:26:fc:35:e1:b6:
c4:74:13:3f:ae:b7:ea:85:e1:c0:c5:da:81:c6:ae:be:b0:e2:
71:11:cd:cd:43:1e:1e:f4:d3:63:99:43:2c:d0:11:00:47:94:
d3:10:56:30:90:d4:73:6a:f6:14:a9:7c:e5:99:a7:64:07:20:
b4:9c:72:b0:32:e7:67:e0:49:04:a1:99:07:e5:42:7b:7a:6a:
20:93:06:59:b0:ab:fd:dd:05:de:68:b1:4f:ec:da:a5:4e:75:
e9:be:34:1d:ee:02:81:3e:7f:49:34:25:81:9b:17:fa:97:74:
a2:35:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:40:09 2025 by rpki-client