Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/iAbojGSBluwj9VYYiv2cLe-aV2k.roa
File: iAbojGSBluwj9VYYiv2cLe-aV2k.roa (raw, json)
Hash identifier: ABBcTOmlPSrXVrE3+x1R/tbDDD00I18JHAslB+XAfQI=
Subject key identifier: 88:06:E8:8C:64:81:96:EC:23:F5:56:18:8A:FD:9C:2D:EF:9A:57:69
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018FAC3EB8E34158EC25D7E20223DD0498B8
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/iAbojGSBluwj9VYYiv2cLe-aV2k.roa
Signing time: Fri 24 May 2024 20:15:42 +0000
ROA not before: Fri 24 May 2024 20:15:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 89.249.200.0/24 maxlen: 24
89.249.204.0/24 maxlen: 24
89.249.206.0/24 maxlen: 24
185.21.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 06:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ac:3e:b8:e3:41:58:ec:25:d7:e2:02:23:dd:04:98:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: May 24 20:15:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8806e88c648196ec23f556188afd9c2def9a5769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:72:cf:f9:2f:b6:c8:b9:dc:3a:35:41:13:
aa:04:95:9c:f6:ff:8f:de:c6:b4:52:d1:f7:5f:8e:
48:d0:d0:00:b6:63:cb:be:8d:33:c2:b9:9c:8a:9f:
8a:80:56:20:3b:c8:48:6c:70:73:ff:75:ef:de:93:
9f:7c:68:56:20:e3:a9:32:2e:fe:12:59:9e:dc:ea:
a9:27:e2:e8:41:6c:83:ac:ee:61:dc:ee:72:4b:5e:
04:d5:6b:ef:41:4f:a6:35:25:b6:9f:78:d4:83:6a:
6b:fa:85:b1:ab:9a:26:d1:5e:3a:3e:de:4e:15:05:
77:db:cc:15:f0:d8:df:e0:69:3c:c7:60:b7:21:8f:
cd:79:82:3d:7d:e5:51:a8:f8:0d:39:8a:c9:1e:08:
cd:08:52:7d:bf:86:4e:08:5c:be:9b:f1:b0:87:6c:
75:30:39:4c:c7:88:5c:45:d3:cb:84:bd:6b:b9:be:
fb:fa:df:b1:44:9b:b3:68:88:0e:90:2c:de:fa:40:
cf:b2:5a:2e:6b:16:ce:63:91:96:d6:cd:20:1a:bf:
4a:56:14:45:2e:5b:4c:bf:0b:5c:8a:c1:7f:60:91:
02:ec:6c:b6:84:6a:ba:52:b0:a3:2f:80:ea:c3:7c:
a8:60:0d:20:f6:74:f6:7b:c5:70:c3:3a:4b:98:69:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:06:E8:8C:64:81:96:EC:23:F5:56:18:8A:FD:9C:2D:EF:9A:57:69
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/iAbojGSBluwj9VYYiv2cLe-aV2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
89.249.204.0/24
89.249.206.0/24
185.21.255.0/24
Signature Algorithm: sha256WithRSAEncryption
52:34:fd:28:8e:fd:38:a0:29:14:95:f6:c0:59:8f:a5:1e:a0:
9a:0e:db:d4:86:dc:4f:02:58:c2:7d:f4:9f:64:6b:1c:bc:bd:
88:61:13:b3:fd:9f:12:00:02:80:65:a8:d0:8f:58:0d:57:e0:
ac:90:1a:04:64:3c:aa:35:7b:66:82:23:6a:fc:95:0d:61:c7:
8a:9a:2b:34:c6:8e:e7:30:a9:6a:4b:dc:ca:b2:c7:bf:33:02:
86:0e:7c:16:6a:f4:d2:94:cc:5c:f3:2d:9b:03:c7:9f:9d:27:
4c:41:06:3a:9e:13:ab:c5:01:f4:60:e4:91:a7:52:0e:02:72:
a8:86:c1:ea:ce:fe:bf:e1:5f:a0:87:b4:ba:71:2a:46:c6:10:
a7:4e:06:aa:5e:14:e5:f8:e9:63:d1:c5:37:bf:a9:1a:15:12:
11:87:62:43:88:7a:e0:9a:4c:ca:fc:ba:9b:77:54:4a:6d:27:
e5:08:55:31:b5:02:6d:d6:1f:18:e1:96:36:00:89:93:db:25:
f5:8c:15:c0:34:94:0e:cf:54:c7:37:c4:83:08:a0:14:6e:e0:
b5:97:af:7b:79:33:3a:05:91:e5:cb:1c:07:88:b9:4e:da:22:
a1:cd:1b:e7:d7:8b:62:98:6d:72:84:a8:a1:b5:b6:d1:c8:59:
b0:58:97:3a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY+sPrjjQVjsJdfiAiPdBJi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQwNTI0MjAxNTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODA2ZTg4YzY0ODE5NmVjMjNmNTU2MTg4YWZkOWMyZGVmOWE1NzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIdyz/kvtsi53Do1QROqBJWc9v+P
3sa0UtH3X45I0NAAtmPLvo0zwrmcip+KgFYgO8hIbHBz/3Xv3pOffGhWIOOpMi7+
Elme3OqpJ+LoQWyDrO5h3O5yS14E1WvvQU+mNSW2n3jUg2pr+oWxq5om0V46Pt5O
FQV328wV8Njf4Gk8x2C3IY/NeYI9feVRqPgNOYrJHgjNCFJ9v4ZOCFy+m/Gwh2x1
MDlMx4hcRdPLhL1rub77+t+xRJuzaIgOkCze+kDPslouaxbOY5GW1s0gGr9KVhRF
LltMvwtcisF/YJEC7Gy2hGq6UrCjL4Dqw3yoYA0g9nT2e8VwwzpLmGmUzwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIgG6IxkgZbsI/VWGIr9nC3vmldpMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvaUFib2pHU0JsdXdqOVZZWWl2MmNMZS1hVjJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWfnIAwQA
WfnMAwQAWfnOAwQAuRX/MA0GCSqGSIb3DQEBCwUAA4IBAQBSNP0ojv04oCkUlfbA
WY+lHqCaDtvUhtxPAljCffSfZGscvL2IYROz/Z8SAAKAZajQj1gNV+CskBoEZDyq
NXtmgiNq/JUNYceKmis0xo7nMKlqS9zKsse/MwKGDnwWavTSlMxc8y2bA8efnSdM
QQY6nhOrxQH0YOSRp1IOAnKohsHqzv6/4V+gh7S6cSpGxhCnTgaqXhTl+Olj0cU3
v6kaFRIRh2JDiHrgmkzK/Lqbd1RKbSflCFUxtQJt1h8Y4ZY2AImT2yX1jBXANJQO
z1THN8SDCKAUbuC1l697eTM6BZHlyxwHiLlO2iKhzRvn14timG1yhKihtbbRyFmw
WJc6
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:49 2025 by rpki-client