Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ObWVcBaYY-xPnk7QAHAKOCeD22w.roa
File: ObWVcBaYY-xPnk7QAHAKOCeD22w.roa (raw, json)
Hash identifier: zMrXDHOdjPBMRoD7EXVHWONgLF6rs0Bj+/a56StpMxw=
Subject key identifier: 39:B5:95:70:16:98:63:EC:4F:9E:4E:D0:00:70:0A:38:27:83:DB:6C
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018D88EFD523FD225AC53C62876523DDF80F
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ObWVcBaYY-xPnk7QAHAKOCeD22w.roa
Signing time: Thu 08 Feb 2024 13:37:15 +0000
ROA not before: Thu 08 Feb 2024 13:37:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 04:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:ef:d5:23:fd:22:5a:c5:3c:62:87:65:23:dd:f8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Feb 8 13:37:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39b59570169863ec4f9e4ed000700a382783db6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:e1:84:0a:a9:75:d6:81:1f:61:be:a0:a5:
91:f2:f2:f4:96:de:25:ca:1a:ff:dd:4c:16:3c:06:
ed:7e:5e:41:81:2f:f0:54:97:bc:b7:63:ed:6a:07:
aa:0e:31:37:e6:94:3a:f8:6c:fb:3e:8a:d7:1d:ec:
66:9d:47:38:d7:65:c8:ad:e3:a3:99:77:34:25:9b:
22:f4:ad:bf:ed:04:e4:3d:4c:c8:e5:3f:5b:1d:92:
99:18:99:42:5f:e6:38:58:32:77:de:00:ad:24:69:
37:26:48:2e:87:fc:14:6a:7c:56:04:71:95:a6:59:
3b:09:60:85:28:24:9e:84:ac:8b:74:2d:8d:63:72:
d7:48:2c:05:73:71:89:10:2d:d2:74:78:bf:99:48:
72:0a:77:bc:16:db:8f:9f:03:51:c7:6d:53:6b:64:
71:7b:4d:6a:b5:0f:97:40:4e:56:8a:3b:93:b0:d4:
89:ff:5c:ba:e3:f1:f2:8e:8c:7e:c8:bb:cd:68:89:
4c:3f:20:9c:75:b5:c4:c0:fe:5b:e7:8a:6c:f9:47:
d8:4d:5d:cb:e1:12:c5:f4:14:87:37:15:6f:0e:be:
1a:4f:8d:98:0d:2a:ce:2f:06:78:a2:f1:60:83:c2:
63:72:c4:9b:40:38:0c:2a:a7:a2:48:9f:cf:46:35:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B5:95:70:16:98:63:EC:4F:9E:4E:D0:00:70:0A:38:27:83:DB:6C
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ObWVcBaYY-xPnk7QAHAKOCeD22w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ab:3a:d3:14:b3:a9:42:30:45:fd:d0:f3:07:dd:aa:6d:26:
45:eb:6d:dd:1a:98:b4:07:f9:3e:39:f8:05:35:7f:af:e9:c2:
4e:09:07:84:9c:fa:e2:61:e7:8e:53:f5:b4:76:e7:43:22:a6:
2d:40:4a:be:87:dc:cc:57:2e:e7:c7:93:b4:ee:0a:bb:3f:39:
09:aa:d3:13:b6:c4:5d:84:b8:f0:25:f2:90:85:02:17:23:5c:
6d:89:bc:b1:09:a0:e8:cc:a1:94:f9:62:bf:34:cb:e4:5c:60:
54:25:83:2c:da:33:78:31:b7:3c:99:16:ce:fa:b1:71:89:1c:
76:2b:e7:6c:3c:23:10:0b:99:58:b1:c0:ef:28:cb:08:46:22:
49:8e:ff:e1:a4:24:8a:7f:52:fd:91:a8:32:0b:4e:55:bf:1c:
03:53:b0:b6:98:89:ca:56:27:3c:5e:61:c9:01:de:5f:d8:0b:
f0:f7:ef:6e:f0:8e:00:02:1b:00:11:51:b0:08:d5:49:10:30:
67:a5:cd:b1:e1:52:4a:91:a5:ad:d5:98:d5:ed:da:f8:0b:46:
93:10:a1:4e:2e:00:45:b8:4f:3e:de:70:a1:92:fc:38:25:ae:
0a:bc:40:45:7e:a4:75:86:d5:1c:13:2a:85:85:c5:e4:26:3d:
fc:b2:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:03 2025 by rpki-client