Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/9ssKkxrXhKllwwDOxK6p_xZGH1M.roa
File: 9ssKkxrXhKllwwDOxK6p_xZGH1M.roa (raw, json)
Hash identifier: kVax0d6FoeSP47hzLJ3XBHnSwoz8h4rAppRR/ex6+J0=
Subject key identifier: F6:CB:0A:93:1A:D7:84:A9:65:C3:00:CE:C4:AE:A9:FF:16:46:1F:53
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01966CE3306CA6EDAB976C2B286EA40FFEF9
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/9ssKkxrXhKllwwDOxK6p_xZGH1M.roa
Signing time: Fri 25 Apr 2025 12:19:10 +0000
ROA not before: Fri 25 Apr 2025 12:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214002
IP address blocks: 91.212.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 13:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:e3:30:6c:a6:ed:ab:97:6c:2b:28:6e:a4:0f:fe:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Apr 25 12:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6cb0a931ad784a965c300cec4aea9ff16461f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:95:b5:6b:d4:3a:f6:3c:47:6a:c3:d4:39:
5c:34:4f:91:b4:92:1f:a5:28:ea:ec:d2:1f:8f:5f:
21:b6:b6:95:7e:5f:2b:2f:9c:5f:13:34:7d:31:98:
d8:98:f5:e6:9c:59:b5:9f:fe:b8:c3:ad:09:7b:4b:
dd:1c:bf:75:34:e5:42:39:fc:e1:fa:f5:fa:58:89:
93:ab:2a:70:a5:c2:9f:3c:e5:23:1f:fc:c4:ec:f9:
43:f4:95:c6:62:96:c8:01:a1:3a:fd:56:6b:5a:01:
6a:d5:64:59:25:46:0f:50:55:47:f1:47:7f:ff:0f:
28:de:55:79:5d:88:44:45:0f:48:fb:e6:be:78:a2:
8e:f0:73:3f:62:66:e1:c6:2d:a7:0b:26:a5:70:df:
61:14:c1:b5:65:7f:f9:3c:14:20:10:14:11:24:df:
72:be:6e:b5:f6:a0:a4:da:dc:9a:25:f7:c3:ce:14:
b9:cd:b1:9e:d8:e7:b0:a4:00:2f:57:1a:ba:27:bc:
16:b4:d2:86:55:e4:16:2b:cb:40:cc:96:44:09:8f:
03:d5:dc:1a:4c:8d:a7:3e:3d:66:39:38:20:cf:1b:
c2:7e:2e:b2:6a:a7:7c:4f:62:f7:90:a5:13:f3:80:
6f:a6:80:cb:6e:f6:59:1c:4b:7b:63:13:e8:2c:8a:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:0A:93:1A:D7:84:A9:65:C3:00:CE:C4:AE:A9:FF:16:46:1F:53
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/9ssKkxrXhKllwwDOxK6p_xZGH1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.193.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3b:dd:bf:2e:91:96:b1:77:37:59:7d:c4:f2:c3:98:5c:e9:
dc:3f:7d:12:94:8c:a2:28:2d:d2:2f:3b:ca:14:e5:1e:41:70:
b9:a4:7a:5b:b5:1b:64:ec:f5:06:9d:60:b0:60:9c:ed:77:1b:
ba:ef:87:60:0b:fc:c5:d4:09:ae:39:20:3d:5a:46:5b:3c:60:
6e:74:ff:5c:30:90:35:f7:ee:16:92:28:19:25:b8:be:ce:cc:
3a:d9:6c:de:15:9b:b1:14:2c:c9:4d:a6:71:0c:57:f2:cf:67:
08:5b:32:f3:52:0d:22:12:39:35:99:02:1e:78:8e:90:c3:c1:
94:27:83:43:0c:d7:0a:ec:2e:0c:96:cf:69:66:4d:fe:21:ce:
8e:e7:59:94:1f:f5:10:11:21:7c:2b:cc:4b:5d:81:d0:90:88:
37:7e:b0:69:3a:01:bc:92:08:1e:5d:ea:89:a4:6d:16:e7:8f:
b3:31:8c:50:ab:05:5f:9e:72:dc:7d:08:c7:f4:5b:1f:fc:d4:
19:96:1e:5a:ca:d2:e9:e0:a3:28:73:e7:98:7e:cd:cf:38:b6:
c3:e5:f0:e8:d9:b0:a7:34:2e:dc:2b:c1:26:c4:c9:54:e3:0f:
cd:73:60:22:50:8e:84:16:35:ae:03:1e:6c:e5:2f:df:bd:fa:
da:d3:37:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:14:00 2025 by rpki-client