Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Jp-oQId0abt-GTQT03LkS_AyQvo.roa
File: Jp-oQId0abt-GTQT03LkS_AyQvo.roa (raw, json)
Hash identifier: kU4F2leNOq8OsOpfxUwYxq3QiTkHVWokWeLs6fThcBM=
Subject key identifier: 26:9F:A8:40:87:74:69:BB:7E:19:34:13:D3:72:E4:4B:F0:32:42:FA
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01905C2666B7E46362C064EDEAB7C3F4F26A
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Jp-oQId0abt-GTQT03LkS_AyQvo.roa
Signing time: Fri 28 Jun 2024 00:02:18 +0000
ROA not before: Fri 28 Jun 2024 00:02:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.201.0/24 maxlen: 24
89.249.204.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 14:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5c:26:66:b7:e4:63:62:c0:64:ed:ea:b7:c3:f4:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jun 28 00:02:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=269fa840877469bb7e193413d372e44bf03242fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:96:92:e2:4b:28:ea:6b:f4:8e:ac:aa:22:
78:ae:3e:f1:15:cf:7c:5d:28:c1:18:82:a7:b2:5a:
d2:ef:8f:f8:df:7f:f5:62:ec:22:1b:45:3e:79:c3:
46:a9:fa:a5:73:c1:47:1f:11:5f:f2:d5:d5:d1:6d:
27:43:ba:76:37:d1:e1:8d:2b:a7:47:6d:41:80:14:
af:a7:11:5b:49:72:37:cb:e8:20:15:0a:12:7d:c5:
12:d1:3e:0a:26:27:ee:b1:3f:a1:d2:dd:3d:10:4b:
f9:53:38:47:c0:4f:0c:52:16:46:ef:ca:ec:2e:dc:
3a:48:97:75:c5:d7:80:14:3a:ae:c0:cb:55:f1:96:
0a:44:51:3a:b7:e5:ed:c2:4b:56:30:02:38:bb:04:
1c:f9:85:bc:a7:e7:87:c2:84:f3:8e:fc:2d:63:4d:
22:b3:c1:fe:17:b7:f9:35:33:5b:32:f3:ae:26:90:
f9:31:5d:6c:73:82:c9:b0:b9:84:1b:05:6f:b4:24:
90:a4:1a:f6:9f:92:31:d2:57:1a:51:84:7a:ba:e7:
b7:68:a9:8e:c4:6b:92:51:db:8e:77:8b:fe:cc:00:
88:a8:6d:d3:2c:a1:3a:f2:26:11:49:9d:ba:33:21:
f7:4f:e0:7e:9d:4e:87:9c:d3:bf:be:3e:84:51:ed:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9F:A8:40:87:74:69:BB:7E:19:34:13:D3:72:E4:4B:F0:32:42:FA
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Jp-oQId0abt-GTQT03LkS_AyQvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
89.249.204.0/24
89.249.206.0/23
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:ca:8b:cc:7b:34:38:92:62:ac:22:fd:78:77:1c:f1:24:21:
12:57:ba:e4:3d:8e:a2:a1:9f:ec:57:95:b9:74:54:32:a7:61:
28:fd:7f:fd:56:fc:0f:c7:74:f5:ce:1b:bf:4b:c3:55:96:96:
56:66:19:f3:62:33:dd:1c:29:e0:10:0f:fe:b7:05:3f:5e:a0:
61:7a:d5:43:ac:5d:e6:93:d3:f1:9a:d6:73:e9:df:4b:19:b3:
07:72:f8:4d:95:c3:31:4f:40:b3:bf:9b:71:77:26:59:f7:1c:
01:b9:76:50:72:8f:9e:c9:6b:af:ee:b3:4c:e4:fa:c9:cf:55:
c5:f0:07:c5:4a:a3:c0:00:d4:11:7a:e0:de:ec:c6:f2:dd:f0:
0d:9c:4f:c3:9d:9d:a4:da:71:d0:91:d4:05:91:1e:10:65:86:
34:07:0d:2e:08:7f:55:0b:cb:4a:cc:2d:ba:c4:50:cf:05:5b:
e0:fc:a6:fb:a1:c7:ca:b9:4e:b3:57:1b:7c:fe:a7:c1:f4:ba:
32:22:7a:5d:46:97:c5:cf:89:6a:dd:a4:61:33:91:45:0f:e0:
a7:f6:4a:89:5b:6c:f4:0c:2f:dc:9b:b5:89:4d:a6:4a:e1:00:
ce:6f:a5:35:2d:ae:e5:bc:44:04:f1:7d:97:6f:9a:36:6f:44:
b2:5a:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:13 2025 by rpki-client