Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/a-qUGuruqFPW7TdgQVOqaYGlZvw.roa
File: a-qUGuruqFPW7TdgQVOqaYGlZvw.roa (raw, json)
Hash identifier: t8dD60o6LHnMc7Lh1AwvmbTmUIvOvDE38ot+ufcyXPw=
Subject key identifier: 6B:EA:94:1A:EA:EE:A8:53:D6:ED:37:60:41:53:AA:69:81:A5:66:FC
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01905F4CFAA02CB5002AD74AA2F396CB696E
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/a-qUGuruqFPW7TdgQVOqaYGlZvw.roa
Signing time: Fri 28 Jun 2024 14:43:18 +0000
ROA not before: Fri 28 Jun 2024 14:43:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 89.249.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 14:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:4c:fa:a0:2c:b5:00:2a:d7:4a:a2:f3:96:cb:69:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jun 28 14:43:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bea941aeaeea853d6ed37604153aa6981a566fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:b3:30:c6:4e:96:15:33:8e:03:c1:22:69:
99:d8:3f:db:90:8d:2a:5c:25:57:68:91:31:ac:ef:
77:1e:47:f6:cf:14:ab:86:b8:af:ae:e5:05:0b:b3:
22:88:2b:52:91:8e:c0:78:b6:7f:8f:91:db:5c:54:
7a:a5:29:fd:9c:2d:86:c5:19:a4:c7:15:b2:de:59:
33:c6:99:f2:88:b4:55:c8:8e:eb:a6:6b:ba:71:be:
70:a6:39:1c:f5:0c:28:d9:77:3f:45:e5:5b:b6:6b:
d2:e4:33:24:c8:f2:54:78:c0:8d:19:24:38:b5:4a:
b1:91:2f:81:b2:77:6c:bc:01:2b:99:8a:ae:64:18:
3a:63:6e:df:25:6b:5a:a3:7c:6f:0b:ab:53:8f:08:
94:a7:dc:e8:a4:69:75:5e:cd:ec:51:79:ba:c5:40:
ab:b6:3a:df:4f:ad:96:24:0e:90:38:98:09:e2:70:
e7:25:3a:38:8d:ea:4a:19:a6:ba:93:14:ea:b8:d7:
7e:c3:de:97:46:eb:46:7a:9c:52:43:98:7f:5f:1d:
7d:98:58:69:ba:08:12:04:91:74:e3:9e:a3:ec:41:
71:85:69:0d:ed:2f:d8:8d:ef:2b:90:e5:d4:4e:08:
60:c3:fd:ed:44:6d:9c:70:6a:b8:d2:23:ec:3d:a2:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:94:1A:EA:EE:A8:53:D6:ED:37:60:41:53:AA:69:81:A5:66:FC
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/a-qUGuruqFPW7TdgQVOqaYGlZvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:31:95:81:9d:a1:9e:82:b5:fa:ad:d2:3a:c5:a1:0a:72:89:
2d:22:79:c9:ec:f6:53:e9:92:8f:bd:b6:ef:b3:9e:c4:5a:6d:
1e:f2:89:9b:d4:b7:34:59:13:6d:15:10:aa:28:1a:ac:57:c1:
91:8a:58:3d:02:97:98:67:bf:63:0b:fe:0c:7b:2b:2d:14:c4:
42:c0:5a:43:83:45:74:d1:b6:c2:7a:64:3c:b2:23:09:a1:07:
57:72:f4:b0:df:eb:05:30:77:3b:84:91:fa:9b:8c:3a:1d:60:
ec:e8:6f:20:43:4e:0b:73:88:22:0e:2d:42:ca:a1:7b:29:13:
b3:90:26:e2:7d:a2:58:c8:b3:27:9a:07:c0:36:9f:11:3e:cb:
78:12:b7:0f:4f:c1:19:c5:e0:26:9c:52:1b:2d:45:9b:cd:e3:
90:29:06:98:8e:11:22:9d:f4:a3:41:e9:85:40:7d:cd:e8:09:
8c:30:b1:50:17:8d:54:e8:d4:1e:76:15:ea:d9:65:8f:fa:08:
69:ea:11:a0:08:dc:7f:40:fe:8f:33:5a:af:5e:51:7b:52:e6:
d9:2b:cf:a5:72:56:d9:fd:e6:a9:d7:c3:cb:7d:06:f0:74:e3:
a8:63:cc:bd:bb:a8:4d:8f:e4:bc:0a:c3:b8:b9:bc:fe:97:fb:
34:78:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:27 2025 by rpki-client