Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ffLtxzv_jklKIu6Hkfvh3nqJpNI.roa
File: ffLtxzv_jklKIu6Hkfvh3nqJpNI.roa (raw, json)
Hash identifier: o6yWBWWtvdMhYfRWzDS60DsVg4szSNWGP7TflLF908Y=
Subject key identifier: 7D:F2:ED:C7:3B:FF:8E:49:4A:22:EE:87:91:FB:E1:DE:7A:89:A4:D2
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0192471321B44ACA81CE8E1C1A944F67822C
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ffLtxzv_jklKIu6Hkfvh3nqJpNI.roa
Signing time: Tue 01 Oct 2024 07:54:48 +0000
ROA not before: Tue 01 Oct 2024 07:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 89.249.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 04:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:13:21:b4:4a:ca:81:ce:8e:1c:1a:94:4f:67:82:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Oct 1 07:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7df2edc73bff8e494a22ee8791fbe1de7a89a4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:29:2f:22:29:37:40:4e:c9:98:7a:6e:44:
8a:46:37:31:fc:8c:05:45:8b:20:af:ac:a5:d7:a2:
88:05:e4:e3:f1:c3:94:e6:dc:9c:76:84:3a:45:51:
3b:f0:c0:a8:4c:85:2c:0d:0e:ff:90:64:86:2b:5c:
f5:28:26:55:4a:d4:04:2e:68:50:47:32:1d:bf:fb:
4d:eb:aa:29:a6:92:7b:0e:4f:32:97:15:98:bf:4b:
af:10:73:f2:af:b9:75:78:eb:dc:37:77:d3:af:43:
e3:d1:ef:aa:2f:53:c5:e4:b0:1f:40:d5:60:43:16:
7c:ac:72:29:5a:8e:bd:1e:fd:a2:7a:b2:86:e0:00:
ce:4e:dc:c7:5a:24:71:98:51:82:a9:2e:dd:05:42:
d1:94:f5:28:5e:44:a4:cd:94:19:33:b8:cf:74:a7:
e3:74:f0:1b:bf:2d:01:34:25:d1:70:3d:ce:83:88:
43:7d:c6:6e:8a:8f:fa:fc:4c:0d:22:c9:ad:3f:5f:
ca:32:b4:bd:16:3f:92:d3:e4:89:3f:e4:0d:d9:53:
2a:6c:3d:1e:e3:e7:f8:83:d1:ec:8e:69:a7:f6:20:
42:7f:0a:fa:34:e4:94:68:ff:f9:b0:e3:d5:1f:4c:
7d:f6:54:9f:18:c0:3b:6c:37:6e:d7:8c:6b:02:09:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:ED:C7:3B:FF:8E:49:4A:22:EE:87:91:FB:E1:DE:7A:89:A4:D2
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ffLtxzv_jklKIu6Hkfvh3nqJpNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2c:f6:2a:14:8f:34:1f:fc:5a:a3:f4:68:f8:41:31:9e:e8:
55:01:27:05:64:73:29:37:cd:51:76:23:94:c2:c9:e7:ca:3b:
4d:f2:59:24:ab:b3:11:d8:70:6b:21:a4:5f:c6:e3:a7:e6:cf:
21:81:82:07:a9:76:01:c8:3d:8e:11:ee:1e:2c:c6:ed:41:d1:
c0:fe:8c:19:fd:d8:5a:46:36:82:76:8a:fe:41:37:fd:ee:37:
9e:3d:80:5c:8b:1f:dc:53:ca:ec:f7:4e:7e:12:ab:57:ce:4e:
a9:9e:46:f7:4c:3a:7e:c8:ba:0f:18:3f:26:82:a1:df:94:ce:
45:8e:d9:4c:18:6c:1d:76:52:3b:0b:6d:a1:ac:73:eb:bd:04:
0a:50:97:27:15:0a:50:fb:76:4a:75:c0:8a:2e:cf:19:8b:aa:
6b:01:fa:0b:8e:30:8a:ab:8b:f8:9b:6c:73:4a:18:69:63:88:
6d:b6:f8:0c:ec:2e:56:3a:56:37:08:e3:a3:f2:c2:45:f1:9f:
ca:8e:6d:3a:3d:a1:65:b0:b0:b4:cf:dd:d1:80:3c:51:de:34:
bd:d9:f3:e0:9d:85:fa:b9:59:11:71:18:98:8b:16:2a:d5:75:
f9:a7:bb:55:6a:bb:c1:6f:93:1e:0f:78:38:09:ab:9f:99:74:
d3:e5:10:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:09 2025 by rpki-client