Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/6ZPXjM4hTTSqEAQrF9ErM9-l8WI.roa
File: 6ZPXjM4hTTSqEAQrF9ErM9-l8WI.roa (raw, json)
Hash identifier: JOg1/vQZ8jiTCRS4bIn5N/l6A5mPWGJIwMjUs3eTelU=
Subject key identifier: E9:93:D7:8C:CE:21:4D:34:AA:10:04:2B:17:D1:2B:33:DF:A5:F1:62
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019634ADAEE4C905BD2002239C9FF41365AD
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/6ZPXjM4hTTSqEAQrF9ErM9-l8WI.roa
Signing time: Mon 14 Apr 2025 14:21:59 +0000
ROA not before: Mon 14 Apr 2025 14:21:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205090
IP address blocks: 91.200.13.0/24 maxlen: 24
109.69.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Apr 2025 14:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:ad:ae:e4:c9:05:bd:20:02:23:9c:9f:f4:13:65:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Apr 14 14:21:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e993d78cce214d34aa10042b17d12b33dfa5f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:dd:14:4b:75:89:68:ec:d7:bb:88:e1:46:
5f:06:ad:d3:36:2b:5d:a1:76:2e:a7:b5:18:71:11:
6d:59:8c:2b:b8:a5:20:02:56:f5:42:5b:7e:e8:05:
82:1b:87:ee:dd:f2:71:d6:74:8f:88:9a:78:bd:a2:
db:6f:d0:ad:d3:a2:7d:76:04:33:ec:b5:79:20:59:
bb:1a:1c:1f:06:1f:ff:23:79:69:f1:f8:e2:45:ed:
70:36:d1:0b:64:a3:5d:53:43:41:b7:c7:c6:a0:9e:
c5:23:cd:7b:8e:9d:88:00:1a:e6:c2:23:c3:e2:a6:
a1:81:65:82:31:be:62:6f:d6:6a:bd:05:05:ab:4e:
51:6f:7d:93:3f:d3:d9:a2:4d:6a:f5:e0:5c:c2:9a:
d8:e2:75:18:68:11:47:f3:75:9c:18:01:1c:db:9a:
75:7f:91:ed:b0:02:a4:6e:d2:bd:0b:2c:14:61:0f:
86:d8:a5:29:d8:d3:d3:7f:36:00:a1:66:c8:6e:e5:
6c:4e:e3:de:a7:2c:93:1a:19:94:61:47:41:99:f7:
3c:f0:57:ba:6c:ec:46:eb:2d:e6:98:e3:cd:39:90:
ad:64:80:84:3e:37:b3:ce:38:69:bb:e0:4e:95:5b:
cc:0b:b5:26:74:08:ff:24:de:9e:46:5a:c6:ea:ad:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:93:D7:8C:CE:21:4D:34:AA:10:04:2B:17:D1:2B:33:DF:A5:F1:62
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/6ZPXjM4hTTSqEAQrF9ErM9-l8WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.13.0/24
109.69.62.0/24
Signature Algorithm: sha256WithRSAEncryption
17:cb:7a:aa:36:14:e2:24:1d:f1:6e:34:05:f5:41:1e:f7:65:
52:4e:da:e4:f8:64:85:c9:6e:41:2a:66:e3:e3:4a:dc:32:2e:
91:61:a3:0d:13:6b:80:e5:fb:8c:4b:25:8f:29:e5:e2:0d:5d:
d5:3e:8c:9c:37:b9:5f:93:91:d7:71:fa:87:e9:31:9d:a2:ef:
c5:84:87:b4:bb:19:8a:2e:a7:75:3f:a1:e8:c1:1a:26:12:60:
5e:e9:75:3c:50:53:cf:c0:37:92:3d:7b:8b:d7:80:ac:f2:d0:
3c:96:4b:76:b4:38:cd:75:cd:1e:74:1f:dc:ff:9e:15:83:5f:
fb:f2:a3:53:b5:ff:58:d3:eb:53:37:b3:04:79:e6:39:c5:54:
cf:c1:9d:b2:70:8b:aa:fd:03:f8:87:4b:d5:be:66:9f:3b:5f:
7a:32:4e:ec:9a:69:b1:be:93:b9:ab:5b:75:d0:b0:df:e7:08:
17:d1:6e:15:a9:5a:41:21:a4:a5:f6:91:72:02:26:1c:8d:10:
8a:90:e3:75:3e:0c:76:de:8d:e8:13:46:95:c3:09:20:ea:5a:
10:56:56:0f:7e:ea:88:86:13:9d:37:37:1b:9a:ec:ff:bc:6c:
a1:5d:e4:5d:bb:06:c4:c2:31:c8:2c:0a:0a:1b:c6:bf:38:33:
6d:6c:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:28:42 2025 by rpki-client