Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/lsbYwH-G9huJwvJPqAJGWePA2P0.roa
File: lsbYwH-G9huJwvJPqAJGWePA2P0.roa (raw, json)
Hash identifier: 9bHoFSko3QDxAWNYBdn3GJOVaTNPW7Z+9PLRdozWhPg=
Subject key identifier: 96:C6:D8:C0:7F:86:F6:1B:89:C2:F2:4F:A8:02:46:59:E3:C0:D8:FD
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 018CEEF0B3729848D964F24098DA95006DFC
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/lsbYwH-G9huJwvJPqAJGWePA2P0.roa
Signing time: Tue 09 Jan 2024 15:56:41 +0000
ROA not before: Tue 09 Jan 2024 15:56:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39759
IP address blocks: 89.186.32.0/20 maxlen: 20
89.186.32.0/19 maxlen: 19
89.186.43.0/24 maxlen: 24
89.186.42.0/24 maxlen: 24
89.186.48.0/20 maxlen: 20
89.186.51.0/24 maxlen: 24
89.186.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 09:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:f0:b3:72:98:48:d9:64:f2:40:98:da:95:00:6d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Jan 9 15:56:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96c6d8c07f86f61b89c2f24fa8024659e3c0d8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:1b:d7:eb:95:fb:88:c3:eb:43:c3:9c:0b:
e6:95:52:0a:b3:9d:a8:ff:f6:9c:bd:fe:1c:82:99:
48:c5:76:d4:aa:2f:25:52:29:ad:ad:58:59:62:67:
7a:c2:ea:07:2e:1f:6e:74:ad:d4:1f:1c:2f:a2:eb:
5c:82:63:2e:8a:35:95:4b:b8:af:9c:e2:75:a2:d7:
e2:2a:66:19:45:1c:ae:33:19:df:5c:60:b9:67:e4:
cc:62:85:25:27:f5:d7:3a:b2:4c:40:15:9a:b8:8d:
4a:2c:fe:e8:b4:39:91:3f:df:6a:b2:88:83:70:94:
63:ec:bd:da:be:22:d3:c6:14:21:9f:66:28:ce:d3:
ae:4f:87:a9:66:9d:25:c1:c7:6a:72:ab:3b:db:fa:
98:c1:7b:bc:9c:aa:f8:a8:cc:38:86:81:2a:2f:34:
c6:cf:ef:0f:e2:f3:fc:0c:fc:9d:3b:e3:7c:82:44:
4c:99:8a:1a:85:7f:97:36:93:cb:38:b7:fd:d3:60:
cc:4e:4b:84:59:5c:8c:cb:be:96:89:7a:53:3a:65:
6f:4e:de:9c:55:e1:10:fa:4d:9d:0a:8e:0f:dc:29:
9b:2e:16:b4:e7:e1:1e:ef:ed:74:d3:43:8d:bb:b1:
b7:f2:81:40:38:9a:e6:47:d5:fe:01:aa:9a:52:e6:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:D8:C0:7F:86:F6:1B:89:C2:F2:4F:A8:02:46:59:E3:C0:D8:FD
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/lsbYwH-G9huJwvJPqAJGWePA2P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.186.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:d5:49:86:5c:c6:37:9f:8b:27:0e:6c:0c:40:3c:a6:ac:82:
24:8e:04:2e:a3:ad:3e:dd:1d:e8:1c:e6:47:22:e0:17:d9:06:
78:73:26:13:3a:53:fb:c0:56:68:b1:3b:5e:a3:eb:82:ce:b0:
ca:82:82:22:f6:31:12:fd:c2:f5:be:d9:fc:f4:be:a1:dc:95:
de:9a:dd:93:f0:8d:2f:9e:b6:94:c0:cb:bd:a8:42:ad:12:4e:
e0:0e:80:f7:2a:0b:b2:1f:c0:67:c3:66:99:5f:bc:df:20:cc:
a5:5a:a9:4b:26:a1:43:c9:f9:ad:e9:d9:47:37:b1:b2:ea:ca:
4e:aa:44:e7:19:57:96:e5:af:cd:fd:3f:24:30:60:35:2f:a2:
e2:0b:bf:d0:40:9d:be:1e:2b:bf:c9:85:d6:c8:0d:a7:5c:d9:
08:53:76:04:02:ce:52:1f:e2:16:d7:27:ac:c5:5f:9e:9a:c5:
96:c4:79:3e:ff:70:23:d8:ae:f0:16:4c:41:a5:02:82:c1:30:
5e:58:fa:92:f2:bf:1f:53:9f:5b:b1:76:99:7f:59:74:31:22:
7b:29:6a:7c:c0:c8:2c:73:32:d9:2a:bf:80:78:e2:f1:94:a8:
7f:a0:c0:66:9c:5e:fa:05:69:34:ea:d8:90:b8:62:22:56:54:
d9:e2:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:01:14 2025 by rpki-client