Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/35bbvDFX-xaRVoMhByZhd_WYd-g.roa
File: 35bbvDFX-xaRVoMhByZhd_WYd-g.roa (raw, json)
Hash identifier: /P4KtjLo9XVJjHr655Ma8rqZf17Fz0Q/qeyRGms3l28=
Subject key identifier: DF:96:DB:BC:31:57:FB:16:91:56:83:21:07:26:61:77:F5:98:77:E8
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0196A00650B829DC1B40D6D98BF21E7B0569
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/35bbvDFX-xaRVoMhByZhd_WYd-g.roa
Signing time: Mon 05 May 2025 10:38:10 +0000
ROA not before: Mon 05 May 2025 10:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.102.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 07:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:06:50:b8:29:dc:1b:40:d6:d9:8b:f2:1e:7b:05:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: May 5 10:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df96dbbc3157fb169156832107266177f59877e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:a0:f6:f9:2a:41:bb:72:bd:d5:f3:e6:33:
d9:5b:1e:50:53:db:08:1b:a2:64:0c:26:11:b1:99:
a7:3d:38:c9:3d:05:7e:4c:f2:cd:bd:55:17:4b:c4:
a8:33:5c:dc:70:e3:b7:2d:a8:ad:a3:d7:a0:43:42:
9e:da:9c:18:47:f8:76:e4:64:26:7e:90:75:a8:ec:
0a:31:f3:ab:01:bc:a0:c3:5b:fe:9d:d8:d7:ff:88:
0c:b1:5f:a8:43:91:a5:92:95:bd:40:c9:55:04:51:
ed:12:06:05:2c:23:52:f4:69:3d:65:f9:26:7f:45:
fc:eb:aa:5f:44:d5:c9:95:48:68:79:35:71:b2:49:
c7:4e:ed:1b:f0:d9:c2:fe:f0:bb:fb:80:53:c8:ff:
6f:6e:44:27:cb:04:9f:60:d0:d1:40:16:82:b0:fd:
e0:ce:ff:18:59:2f:dd:b5:b2:82:3c:5d:84:89:c6:
f7:a1:e3:bc:c6:74:2a:90:bc:4a:a6:db:31:be:3a:
80:a0:21:d5:5b:a9:09:2c:f9:d0:f8:16:cf:21:43:
c7:f1:7f:db:8a:1b:b8:6e:99:9e:78:98:b8:b0:11:
4d:f8:e6:3c:4f:70:d7:a5:c5:9f:81:7a:ba:22:4c:
79:50:3a:4e:66:6a:c2:cd:55:ae:cc:21:48:36:06:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:96:DB:BC:31:57:FB:16:91:56:83:21:07:26:61:77:F5:98:77:E8
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/35bbvDFX-xaRVoMhByZhd_WYd-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.162.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ee:09:ee:79:01:66:ce:56:aa:3a:5b:0e:02:ad:2b:f3:d9:
66:fb:42:de:1e:8c:cf:1e:5e:79:70:d3:de:9b:7b:eb:c8:bd:
20:8f:35:58:4d:16:e7:02:33:3d:66:3e:11:93:d2:f9:20:5d:
13:9c:86:22:82:51:fc:24:84:d8:ae:dc:d2:e4:c9:45:04:97:
90:8c:ff:fb:fc:ba:19:d7:80:fe:99:2e:9e:7c:23:c3:2e:d3:
52:10:74:18:e2:4f:45:dd:93:45:7e:98:f3:fb:57:3c:6b:f4:
04:0c:04:d6:b1:ac:b7:3e:51:42:82:4f:34:7c:1e:bc:c1:d3:
38:3c:20:3f:78:f3:95:45:bf:d3:b1:43:90:67:d4:53:6d:dd:
a4:13:0e:06:d6:d2:33:7b:3d:c6:06:6e:a7:88:3c:15:65:7d:
00:f0:64:c6:18:c2:39:4d:61:37:36:1c:21:6d:bc:bb:16:fd:
dc:db:45:2e:ba:d7:58:c4:d7:e8:6b:6b:7a:a4:56:3f:63:bd:
d5:b5:1f:ce:e7:ac:99:4e:82:d0:04:0f:fe:9b:ef:47:b2:74:
4c:55:29:a7:0b:ec:f5:9e:f2:7c:91:5d:b2:1e:f7:d9:06:02:
99:35:0e:50:20:8b:74:ac:14:b5:62:34:76:b9:fa:32:db:7d:
df:50:12:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:46:16 2025 by rpki-client