Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ySVLsZeBEjRer0ckmI0n7gnD3L8.roa
File: ySVLsZeBEjRer0ckmI0n7gnD3L8.roa (raw, json)
Hash identifier: vnt99R937euxKHYHHCfPwBXeUSgpPW97HgvZXT0XW/c=
Subject key identifier: C9:25:4B:B1:97:81:12:34:5E:AF:47:24:98:8D:27:EE:09:C3:DC:BF
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0194380944F7F6713DE24366656D762086D4
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ySVLsZeBEjRer0ckmI0n7gnD3L8.roa
Signing time: Sun 05 Jan 2025 19:55:19 +0000
ROA not before: Sun 05 Jan 2025 19:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 89.45.34.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 21:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:09:44:f7:f6:71:3d:e2:43:66:65:6d:76:20:86:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 5 19:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9254bb1978112345eaf4724988d27ee09c3dcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:71:0f:21:88:0d:0d:dd:4f:c0:93:95:b7:
8e:a6:1d:f5:eb:e5:7b:08:6f:c5:88:7d:36:06:23:
f3:4c:1c:79:99:7f:4d:0d:bc:72:a1:46:83:50:b1:
fb:0c:fc:c3:8c:21:65:fb:5a:d7:3e:03:cc:bd:30:
40:5f:db:d3:41:4e:5b:95:25:5b:df:c0:21:84:b8:
ab:5a:db:e4:48:25:e5:c5:29:2e:e6:9b:0f:50:9d:
d3:22:0f:ea:16:d4:59:72:43:80:e9:4a:7a:ca:28:
d5:74:9c:fb:01:99:13:7e:de:34:1b:75:1c:6e:b8:
1e:ff:8d:3b:f8:b4:72:2f:8e:d5:52:7b:b4:ed:7f:
a2:b6:83:92:50:c0:17:05:40:dc:08:f1:8b:89:cb:
34:16:08:a9:a4:c2:67:b0:06:76:59:10:56:02:ec:
08:7a:1e:a3:61:16:a4:e2:be:69:f1:ae:ce:a0:a7:
24:61:4b:78:43:e0:4c:18:bd:f4:7a:bb:81:cc:c9:
4f:16:e6:d0:9b:96:9c:27:d6:54:e6:d5:0d:6b:cb:
91:c6:72:df:27:48:f9:a4:ca:29:5a:9e:ba:1c:e5:
69:d3:21:77:b9:69:c1:00:4b:58:7d:07:c6:0b:93:
ea:de:0c:5d:d8:ce:30:e4:16:63:b8:d4:d4:04:50:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:25:4B:B1:97:81:12:34:5E:AF:47:24:98:8D:27:EE:09:C3:DC:BF
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ySVLsZeBEjRer0ckmI0n7gnD3L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.34.0/24
93.114.187.0/24
188.215.72.0/24
188.215.95.0/24
Signature Algorithm: sha256WithRSAEncryption
25:65:61:ad:b1:cd:2d:0a:ac:41:8c:79:21:ac:79:24:c6:91:
03:b1:fa:f1:d9:41:60:b9:34:ca:82:a3:4f:67:3f:23:da:92:
46:84:e2:7b:28:00:f5:61:37:08:03:71:30:65:eb:03:39:e0:
2d:2c:9e:b9:2e:be:08:cd:9b:be:09:a5:dd:be:5c:0d:12:47:
1c:cc:7d:8e:d5:fe:ec:8d:b0:51:f8:6b:14:e3:ba:03:5e:68:
84:27:50:60:d7:0f:1f:28:1f:03:c9:6e:e1:4c:c1:88:6b:e5:
6a:7e:ad:20:7a:ce:32:62:27:25:e1:85:bf:f1:89:3e:da:52:
90:8b:6f:cc:2d:34:52:d2:9c:7f:b3:35:20:9d:99:15:f3:94:
0c:85:b3:5f:74:cc:11:61:ad:8f:44:a3:58:fb:92:a6:cc:48:
b3:8f:c1:b8:c4:15:7f:1e:e5:a1:0f:64:64:fe:f9:5a:2c:94:
aa:5f:7d:12:db:b7:b9:55:91:e2:22:10:a3:91:a5:78:1a:6c:
4d:b1:2c:67:92:76:d7:08:e3:2d:45:ed:81:f7:6b:cc:29:86:
e8:e4:d3:1c:48:47:50:64:c6:69:c4:37:d7:bb:b0:5b:7d:6b:
01:4b:e8:e2:2f:47:9a:99:79:54:72:98:2f:e7:64:b9:83:93:
95:23:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:55:51 2025 by rpki-client