Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/SHL4yVhA8_Do5vDAJkP6nhF6eA8.roa
File: SHL4yVhA8_Do5vDAJkP6nhF6eA8.roa (raw, json)
Hash identifier: PseCgL0w7WzZqcQQs/x6LgG8CRe9kDcdhJ3kJ1q+Aiw=
Subject key identifier: 48:72:F8:C9:58:40:F3:F0:E8:E6:F0:C0:26:43:FA:9E:11:7A:78:0F
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018DA7314B1EE0DD1D50AC3317B6CC840AA4
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/SHL4yVhA8_Do5vDAJkP6nhF6eA8.roa
Signing time: Wed 14 Feb 2024 10:37:22 +0000
ROA not before: Wed 14 Feb 2024 10:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 89.249.204.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 11:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:31:4b:1e:e0:dd:1d:50:ac:33:17:b6:cc:84:0a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Feb 14 10:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4872f8c95840f3f0e8e6f0c02643fa9e117a780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:e5:fa:8b:67:ae:eb:02:f2:52:08:a6:b3:
fe:e9:6e:08:dc:ef:fe:db:87:44:24:7a:ae:65:8b:
fd:34:b1:56:74:31:12:bf:44:66:7f:74:f2:dc:0c:
f9:74:bc:59:ba:a3:c9:33:73:7f:e5:a4:b7:fa:f1:
61:eb:59:d9:3f:bd:31:6f:71:69:89:d0:07:a2:f5:
f4:91:58:6d:9e:ce:31:ca:d5:c9:50:92:f7:8a:ed:
72:a9:29:b5:97:0c:ff:55:d7:fe:ba:af:9f:d8:0b:
59:c4:28:a7:59:29:07:11:a5:41:4a:7b:d1:b5:b0:
7e:32:9c:30:30:39:e2:ca:c0:f2:73:36:0f:6e:29:
9c:61:a0:f1:fe:f0:dd:0a:27:76:92:fd:e7:c4:4b:
00:34:63:6e:41:44:d9:49:ff:85:66:61:4b:4d:63:
f4:33:00:04:37:d4:d3:b8:66:b3:a6:1a:2e:7d:e5:
17:04:59:c7:c6:dd:e9:d3:29:16:23:1c:26:65:92:
64:93:b0:04:04:c4:0e:7a:de:2f:2d:c8:96:0b:cf:
40:76:5d:0c:2d:0c:a9:db:0a:51:2b:e0:48:4d:5c:
38:db:c4:c3:7c:34:d4:c3:2e:89:d0:d8:fb:97:75:
18:ac:14:eb:52:7e:b1:82:99:00:74:fd:19:0f:d2:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:72:F8:C9:58:40:F3:F0:E8:E6:F0:C0:26:43:FA:9E:11:7A:78:0F
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/SHL4yVhA8_Do5vDAJkP6nhF6eA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.204.0/24
89.249.206.0/23
Signature Algorithm: sha256WithRSAEncryption
56:8a:98:5c:ad:aa:e3:bb:d8:7b:5c:8e:44:f7:47:90:ac:fb:
62:6d:1e:83:21:4d:bd:21:3d:8b:f6:b8:96:e1:7d:3d:48:b7:
01:92:b3:b8:7c:9d:de:02:7c:8b:db:4f:e9:fc:1d:03:f5:f9:
6e:61:c0:69:3a:0f:93:5f:af:99:b2:16:31:d9:38:56:91:12:
65:f5:f9:f4:a4:12:78:9f:c2:ed:5e:f6:ce:ab:b6:a5:e8:e6:
3e:ed:4d:07:6e:0b:fd:66:71:72:81:c9:1c:61:8d:c5:a0:c8:
48:32:a3:6a:a7:c5:1e:d7:0a:d4:b1:94:4e:71:75:2d:d9:c0:
24:8b:e8:be:45:cc:ec:a1:db:a2:62:1c:cb:65:a5:20:0b:99:
98:b7:ae:7b:0e:13:c5:ca:02:81:e6:a9:cd:f9:d3:da:a2:00:
37:64:ae:bf:b6:16:8e:1f:ff:83:eb:09:ed:58:ba:2d:75:5d:
44:ed:a2:a6:9b:2e:13:8c:d1:99:5e:05:c7:83:6d:17:66:b1:
73:72:39:5b:35:29:73:e4:6d:e9:db:ad:67:13:59:44:b7:d5:
35:8a:f6:e1:6d:f0:5f:c0:a7:a2:f1:e5:41:c0:ce:5f:b4:2e:
a2:53:06:62:a2:b1:86:d6:3e:74:7a:81:e1:bd:73:91:db:fe:
fa:ee:87:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:53 2025 by rpki-client