Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/K3jcFWrf8LgQO_1gaIvoArS1Jes.roa
File: K3jcFWrf8LgQO_1gaIvoArS1Jes.roa (raw, json)
Hash identifier: P6+KQX1bQEPXKEFSECGkofiSmC1zXPVh6w6ZLOE2lkI=
Subject key identifier: 2B:78:DC:15:6A:DF:F0:B8:10:3B:FD:60:68:8B:E8:02:B4:B5:25:EB
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018DD86F97A4193B0584F9B00918BA4917CD
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/K3jcFWrf8LgQO_1gaIvoArS1Jes.roa
Signing time: Sat 24 Feb 2024 00:06:48 +0000
ROA not before: Sat 24 Feb 2024 00:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.201.0/24 maxlen: 24
212.42.192.0/20 maxlen: 24
212.42.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 10:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d8:6f:97:a4:19:3b:05:84:f9:b0:09:18:ba:49:17:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Feb 24 00:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b78dc156adff0b8103bfd60688be802b4b525eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:e9:7b:8c:70:fd:d3:ae:2c:b5:1d:34:3b:
12:c5:c5:eb:71:0a:0f:86:30:90:6d:ab:f3:85:ee:
37:83:b6:5c:d3:b8:1c:cb:e4:db:41:f0:6a:3a:14:
27:82:fd:20:cc:31:d1:e8:12:01:30:e8:97:ca:6f:
3e:72:7e:d4:c4:7f:52:5e:70:cc:33:7d:22:bf:bd:
b1:af:ed:85:48:92:04:51:40:a1:fa:28:6b:e4:16:
50:5a:fc:5c:7c:8c:d9:56:b6:bc:25:a9:82:cc:54:
d6:1c:ea:dc:61:c4:37:08:70:7d:91:ec:f0:f8:e3:
93:d4:87:f3:08:9b:4b:82:e2:7b:bd:f4:78:ba:43:
cb:ad:16:64:e2:10:b1:a7:04:3d:c9:13:45:81:85:
66:fb:59:ea:de:ff:58:dd:71:6b:32:73:e0:e5:25:
ad:76:f5:f9:35:4c:c0:88:95:77:62:d8:59:a0:0d:
98:d5:19:1c:ae:99:28:bc:f6:c9:34:2b:a7:51:70:
f1:82:a0:74:52:a9:60:0b:5b:4a:ed:6d:57:da:03:
bb:04:be:97:80:c7:12:41:7b:2b:5f:1c:91:75:7f:
aa:76:87:4e:7b:8e:30:bb:27:5b:15:1f:33:b3:c2:
f9:d5:31:91:b0:6b:95:1d:2f:f7:70:4b:9e:94:8b:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:78:DC:15:6A:DF:F0:B8:10:3B:FD:60:68:8B:E8:02:B4:B5:25:EB
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/K3jcFWrf8LgQO_1gaIvoArS1Jes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
212.42.192.0/19
Signature Algorithm: sha256WithRSAEncryption
08:99:80:21:89:c0:18:70:d2:93:34:bb:e6:84:cd:71:b6:00:
82:18:61:f2:68:b9:14:02:07:b2:32:b8:0f:6f:47:5e:3f:2c:
4c:d5:27:8c:2c:c9:9e:b4:cc:14:42:e8:66:c5:31:76:e5:c0:
75:9d:55:e9:5a:a6:c8:94:d3:d5:da:c4:06:11:3c:4c:42:6a:
49:8c:5d:b6:ac:53:ee:ee:2e:5d:d2:9f:59:b8:32:0c:d5:94:
45:7c:aa:a9:b6:9c:ad:a5:e3:10:cb:b2:1f:f3:97:c6:8c:f8:
9e:ea:35:fb:55:be:7f:2f:a7:6b:dc:a5:22:97:e5:f7:38:e0:
3f:54:c0:a5:0c:27:dc:ff:2a:64:bf:17:6f:b9:60:3c:6d:12:
51:1d:4d:71:8f:b2:ac:bf:77:0e:6e:0b:7a:1d:af:06:3c:5e:
15:c2:b5:22:9b:5a:4f:47:5a:91:ba:f7:95:a8:ee:31:d1:02:
c6:c0:64:1c:15:74:ed:73:4f:74:53:2d:57:dd:99:3d:92:f6:
f1:ee:c7:4a:b5:dc:55:67:38:20:9a:5e:b1:27:b2:a2:e4:79:
a6:5b:fe:9a:d8:a1:de:b6:23:98:e9:56:6c:aa:12:95:81:1e:
31:1d:1b:90:e6:b7:f9:7c:e7:87:d4:e4:d2:85:3c:6d:67:41:
56:be:cf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:53 2025 by rpki-client