Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/E6J_1-klw-Ix88rlEGnh6oPDxkw.roa
File: E6J_1-klw-Ix88rlEGnh6oPDxkw.roa (raw, json)
Hash identifier: MLM3cpAnecLmTnLi9ysg1AmlGTvl9SwVJiJ07fT3PaM=
Subject key identifier: 13:A2:7F:D7:E9:25:C3:E2:31:F3:CA:E5:10:69:E1:EA:83:C3:C6:4C
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 0193A2F31EEAEFED78CF187D3A1EFDFFA1EA
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/E6J_1-klw-Ix88rlEGnh6oPDxkw.roa
Signing time: Sat 07 Dec 2024 21:07:42 +0000
ROA not before: Sat 07 Dec 2024 21:07:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198890
IP address blocks: 91.239.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Dec 2024 22:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a2:f3:1e:ea:ef:ed:78:cf:18:7d:3a:1e:fd:ff:a1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Dec 7 21:07:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13a27fd7e925c3e231f3cae51069e1ea83c3c64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:35:51:bd:b9:f0:7e:b9:90:6b:96:73:75:a5:
73:f9:20:b7:6b:e2:7b:5c:f9:af:84:58:b0:26:fa:
76:bc:5a:5f:8a:41:02:60:61:e2:54:8c:1a:31:74:
e2:fd:8a:28:34:ac:76:4d:40:f3:db:ab:6c:44:73:
dc:23:51:bd:5e:8d:2d:8a:84:94:eb:c1:c6:6b:97:
b0:14:af:25:3a:0a:92:11:96:06:5d:11:b9:ee:d2:
a3:44:1c:06:ce:e4:78:e0:aa:de:18:32:e7:cb:3e:
e5:54:f6:b8:a4:ca:6a:f1:99:c3:50:b0:10:d4:b3:
bd:0c:31:9a:72:27:79:3e:e2:a7:7e:95:eb:dc:af:
ac:49:79:dd:ed:9d:d6:fd:df:60:a6:d3:5a:90:a8:
9b:96:75:50:f4:8b:93:58:93:9a:45:10:7a:6f:2f:
a6:94:fa:60:c4:74:95:da:dc:cc:31:7b:a6:10:bb:
af:41:9f:93:c6:79:b6:4a:48:5a:2f:21:46:d4:52:
d7:bd:25:53:b2:fc:16:5c:7a:af:d9:ac:2b:43:b3:
69:2d:2c:a7:95:6d:18:19:8c:da:97:49:11:d0:55:
c8:21:ae:7f:0a:4f:2d:94:6a:66:a6:de:f6:59:a2:
63:3c:c1:b0:b6:46:3c:16:c0:e7:c1:bb:ee:08:51:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A2:7F:D7:E9:25:C3:E2:31:F3:CA:E5:10:69:E1:EA:83:C3:C6:4C
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/E6J_1-klw-Ix88rlEGnh6oPDxkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f2:f5:c0:d8:46:30:27:93:e3:8c:f6:6b:c1:39:c7:91:b8:
30:59:78:47:72:90:3d:5c:f6:aa:4c:b5:06:be:cd:d2:48:3c:
c3:93:b4:fb:3d:a1:b0:22:15:98:9b:5d:ae:c8:72:f1:28:7b:
79:f8:70:52:03:df:1f:07:28:31:77:b1:b7:85:9b:3b:f1:b2:
63:1f:5a:59:de:22:84:c9:58:85:50:a6:4a:a8:e8:ad:5c:b7:
c1:6e:23:fa:35:ff:fa:4f:93:e8:4b:61:a7:85:11:2e:db:6c:
7f:2b:e9:42:37:3e:e2:6b:4d:fa:f6:e5:6d:af:0a:e7:de:ab:
5b:3a:f3:e0:f3:d5:de:28:9f:cd:69:cf:e4:73:15:f7:5d:ec:
d1:70:6a:aa:55:98:92:22:30:a5:8b:a1:1b:d2:de:91:54:a8:
3e:c4:5f:cd:cc:21:df:16:a8:be:7f:61:e1:86:fe:32:9e:07:
bd:24:b4:cf:3a:33:9f:87:cc:96:95:3b:42:df:73:46:d5:e0:
ef:f1:7b:46:98:09:32:a2:7a:93:52:52:11:35:09:f3:b6:dd:
20:33:c5:ef:81:40:05:7e:38:bd:80:eb:15:14:ce:d6:0e:2a:
95:16:f6:1f:43:20:c4:a1:9b:15:bc:92:a1:dd:1f:c3:cd:35:
16:f1:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:22:32 2025 by rpki-client