Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/2dvR1V3keCGFAWH_s4Lw3dxgaLo.roa
File: 2dvR1V3keCGFAWH_s4Lw3dxgaLo.roa (raw, json)
Hash identifier: 8c9HRVx3mOmTOtuvOhdUv5pz3X+l5ZmIDnATSU+nsKM=
Subject key identifier: D9:DB:D1:D5:5D:E4:78:21:85:01:61:FF:B3:82:F0:DD:DC:60:68:BA
Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial: 01942068610A8B197C293B8AADDA59C8DE20
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/2dvR1V3keCGFAWH_s4Lw3dxgaLo.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43843
IP address blocks: 91.142.64.0/21 maxlen: 21
91.142.68.0/24 maxlen: 24
91.142.69.0/24 maxlen: 24
91.142.70.0/24 maxlen: 24
91.142.71.0/24 maxlen: 24
93.94.24.0/21 maxlen: 21
93.94.24.0/24 maxlen: 24
93.94.25.0/24 maxlen: 24
93.94.26.0/24 maxlen: 24
93.94.28.0/24 maxlen: 24
109.69.128.0/21 maxlen: 21
109.69.128.0/24 maxlen: 24
109.69.129.0/24 maxlen: 24
109.69.130.0/24 maxlen: 24
109.69.131.0/24 maxlen: 24
109.69.132.0/24 maxlen: 24
185.74.248.0/22 maxlen: 22
185.74.248.0/24 maxlen: 24
185.74.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:61:0a:8b:19:7c:29:3b:8a:ad:da:59:c8:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9dbd1d55de47821850161ffb382f0dddc6068ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:61:16:34:cd:dd:e3:77:5f:07:62:d6:ed:
5d:51:44:39:87:6f:92:97:68:7f:4f:b5:18:24:3d:
98:41:66:9a:f6:9f:24:6e:2a:bd:e2:6c:4e:e0:bd:
b2:f5:f7:8d:fb:db:e8:f7:e6:0b:20:b3:c7:21:74:
d4:70:3e:26:51:c4:73:ae:b3:ee:d2:9b:14:78:02:
f3:7b:2f:3e:43:f1:da:ce:f8:8e:a3:f4:35:00:5d:
da:01:9c:14:57:5b:03:db:61:2d:7a:bf:7a:06:fc:
9c:2d:50:5f:a8:38:48:b6:aa:2c:4a:50:1f:08:fa:
50:16:ab:62:6f:a2:1f:7a:cb:7e:c6:4b:85:da:2f:
62:07:c9:5c:32:9d:99:6c:7b:c8:d9:2c:bf:b2:57:
47:4f:15:f7:ce:3e:f5:79:e0:a3:32:fd:c4:bf:e5:
6f:a6:67:42:fb:41:12:56:91:84:56:c8:a7:3f:3d:
71:14:c9:1e:88:52:7b:36:e5:26:8f:07:2c:02:24:
b2:47:00:0f:c4:ed:96:15:30:9c:51:84:e0:c3:6e:
4c:09:c9:15:5f:30:c3:4a:e9:4c:3b:1b:df:7b:07:
ac:1c:51:c8:d0:9d:69:9e:41:b9:92:04:e0:8b:b0:
73:93:7c:88:ed:7e:af:06:65:d1:cf:0d:ab:b4:37:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DB:D1:D5:5D:E4:78:21:85:01:61:FF:B3:82:F0:DD:DC:60:68:BA
X509v3 Authority Key Identifier:
keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/2dvR1V3keCGFAWH_s4Lw3dxgaLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.64.0/21
93.94.24.0/21
109.69.128.0/21
185.74.248.0/22
Signature Algorithm: sha256WithRSAEncryption
81:11:65:c6:1d:1e:e3:e2:a1:c7:24:cd:b2:9a:1d:73:9c:d1:
bb:c5:ef:5a:c5:59:68:cf:19:a8:43:8a:3e:9f:16:92:04:25:
69:9f:55:3d:a7:67:58:77:6a:1d:cd:b1:69:9a:90:3b:19:62:
ff:2f:46:0c:5e:b0:a0:6a:05:4a:fe:45:4d:24:a4:b0:8e:39:
51:03:ad:db:05:80:4f:58:7d:17:cc:36:68:3d:ce:96:ee:49:
04:0b:08:bd:d0:56:63:1d:fd:ed:11:69:db:ff:98:ce:77:0f:
1f:3b:e4:53:ee:d0:00:64:13:ee:fe:7c:2a:5a:38:fd:ee:92:
77:bb:1a:56:f0:25:d7:90:72:67:3e:69:41:b2:60:0d:8e:3b:
79:f8:9e:00:bb:df:41:4a:29:62:85:d1:91:d4:95:74:14:25:
a2:62:37:89:d8:db:45:89:bf:a4:b9:b9:c1:cf:0c:ec:f7:2e:
c7:e4:6b:1a:0f:69:67:bb:e2:be:53:f7:43:06:ac:a1:17:f5:
71:47:52:30:05:03:a7:c2:b2:95:a8:7b:20:96:1e:e6:e1:e0:
ed:ce:2b:45:78:cc:1d:37:01:78:a0:b5:d5:4e:c5:db:9a:25:
29:6d:ce:57:0a:ea:d6:0b:74:d7:76:01:31:5b:12:7b:5a:82:
48:f0:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:01:25 2025 by rpki-client