Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/kyElTpdWGr3YsmB1s9_pKoNJhT8.roa
File: kyElTpdWGr3YsmB1s9_pKoNJhT8.roa (raw, json)
Hash identifier: yrVPkXPwsrT8ZFZmfOxCBDZk6LfJwhfM4xgWVKNmtco=
Subject key identifier: 93:21:25:4E:97:56:1A:BD:D8:B2:60:75:B3:DF:E9:2A:83:49:85:3F
Certificate issuer: /CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Certificate serial: 0191EFE0BD3FBC2292346D4F082AB5AAE7B1
Authority key identifier: 81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/kyElTpdWGr3YsmB1s9_pKoNJhT8.roa
Signing time: Sat 14 Sep 2024 09:32:48 +0000
ROA not before: Sat 14 Sep 2024 09:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61216
IP address blocks: 91.228.113.0/24 maxlen: 24
171.25.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 09:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:e0:bd:3f:bc:22:92:34:6d:4f:08:2a:b5:aa:e7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Validity
Not Before: Sep 14 09:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9321254e97561abdd8b26075b3dfe92a8349853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:a1:c5:6d:06:6e:26:1c:c6:40:13:b0:c4:
b6:8a:3f:59:03:96:8a:64:33:4a:af:ac:d6:c6:17:
a2:3c:84:51:8a:eb:33:74:26:da:36:7d:28:fc:58:
8a:bb:2a:e4:4e:df:e8:f5:29:ae:2a:1a:ec:6d:88:
e6:8a:18:e2:31:2d:5a:5e:c3:a3:69:73:83:cc:e0:
60:03:33:7a:5b:ae:11:9c:57:55:e9:9e:5b:54:02:
c2:50:44:ad:ef:9a:7c:62:58:2e:5a:03:f2:c3:ce:
b6:82:39:b9:d6:88:1a:41:c2:d9:38:a5:78:91:49:
30:2d:f0:3a:9d:a9:f9:72:ed:99:56:c8:86:06:f3:
9f:58:b2:1b:4a:cd:94:23:0b:0b:f9:0e:07:63:cb:
5e:03:99:21:a6:35:03:81:95:79:f3:7e:dd:4c:47:
7a:0e:27:d6:fc:aa:2f:40:54:9e:4b:6e:ff:6d:e0:
52:f3:4c:95:94:fa:f5:85:09:1c:1e:f8:77:92:a7:
1f:a0:17:57:35:98:7b:ac:aa:9a:e3:83:b6:db:67:
be:ac:55:ae:b7:25:82:63:fe:14:ac:03:12:40:a1:
61:a7:29:fa:aa:73:07:81:1c:c8:41:e7:ef:68:85:
f2:9d:63:48:ac:1f:69:38:bf:31:cd:5e:ea:79:62:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:21:25:4E:97:56:1A:BD:D8:B2:60:75:B3:DF:E9:2A:83:49:85:3F
X509v3 Authority Key Identifier:
keyid:81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/kyElTpdWGr3YsmB1s9_pKoNJhT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.113.0/24
171.25.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:89:6e:ca:bb:6c:d9:72:0e:47:67:da:44:d3:f0:b4:20:66:
64:a2:a5:9d:27:08:ae:3a:08:33:de:28:61:5b:84:11:67:38:
6e:53:be:d2:75:4f:c8:6f:dd:04:0d:9f:ad:e9:8a:72:2b:13:
75:d8:68:e8:4b:88:2f:32:94:06:be:09:81:16:27:66:63:76:
b8:29:8a:2e:ea:b5:75:86:34:46:65:43:2a:41:9a:5b:12:67:
12:a0:c1:b4:a6:46:1e:68:37:e8:05:26:45:88:c5:2a:f5:d6:
6a:08:88:fd:92:4a:6a:f7:24:04:cb:ce:d8:e3:1b:c1:79:6e:
10:5d:26:b7:ed:89:1c:2f:93:6d:bb:f6:12:bd:9c:76:2f:8c:
d1:96:30:02:60:ff:0b:3d:76:f6:6c:17:8c:71:24:83:8e:de:
fb:4f:87:7e:b4:18:55:77:8c:c9:32:a4:f9:70:4c:05:68:69:
3d:fe:20:1b:e3:70:03:ec:fb:89:1b:ea:54:c9:1c:6c:e7:22:
e5:8b:18:af:e9:69:52:60:51:74:ae:7f:81:f4:98:99:fb:e0:
17:0d:eb:ea:43:47:9a:98:3b:95:fc:2e:b6:5e:07:ee:fa:6d:
4f:15:4a:2e:a0:9a:68:7d:fe:a7:2c:a1:6b:c5:97:f7:4d:f2:
20:39:8c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:42:40 2025 by rpki-client