Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Ae2qnswUyQgykvW_2ED2xJiqGvk.roa
File: Ae2qnswUyQgykvW_2ED2xJiqGvk.roa (raw, json)
Hash identifier: RIzca1Zq34oMASfEj5FeoE87W+ywpfZDJ8ibSPUwU2A=
Subject key identifier: 01:ED:AA:9E:CC:14:C9:08:32:92:F5:BF:D8:40:F6:C4:98:AA:1A:F9
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019132048D1ED34BEF6E853B03C00DAF490F
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Ae2qnswUyQgykvW_2ED2xJiqGvk.roa
Signing time: Thu 08 Aug 2024 12:44:04 +0000
ROA not before: Thu 08 Aug 2024 12:44:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 89.34.171.0/24 maxlen: 24
188.241.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 01:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:04:8d:1e:d3:4b:ef:6e:85:3b:03:c0:0d:af:49:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 8 12:44:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01edaa9ecc14c9083292f5bfd840f6c498aa1af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:8d:93:9e:ee:93:0a:93:3e:b2:00:32:3a:
88:90:4b:a6:ca:22:69:c6:45:6b:e0:97:ea:b4:98:
44:6c:ad:27:1b:0d:83:0f:92:db:26:1e:6f:8b:28:
3b:d9:2a:11:9f:ef:b9:e6:f2:be:65:6d:f6:18:e2:
36:2a:4c:ad:40:c7:66:7a:4f:c9:31:d8:ae:65:39:
48:6b:0c:5d:63:af:4a:b4:22:bc:3b:9c:da:b4:d8:
0b:d9:d1:b4:c1:f4:f1:1e:a8:3d:f5:05:7c:d7:e3:
72:5b:04:af:ad:c2:10:9a:8c:f3:13:25:09:f4:ef:
28:e7:ff:34:e8:32:a2:56:eb:97:d3:7f:df:ef:84:
d6:71:72:13:5d:5c:a4:95:f2:bc:9f:fe:ea:65:cd:
cb:ee:32:48:ac:9a:7c:8c:b4:24:92:5e:c7:80:f5:
52:86:0a:4b:2b:6c:7b:a6:6b:e0:c1:7a:d1:91:92:
f6:17:2f:a3:e6:24:eb:0c:47:e7:b0:2d:73:02:cd:
d0:bc:02:bf:97:7c:48:4e:2d:36:68:b7:7b:9a:35:
ae:b0:f1:0b:f8:18:66:48:51:e4:54:99:75:ec:ff:
04:5d:ea:7d:39:c2:93:73:60:c1:2b:ce:74:88:6d:
28:28:fb:f8:e4:7d:71:66:91:b8:77:17:8a:30:c6:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:ED:AA:9E:CC:14:C9:08:32:92:F5:BF:D8:40:F6:C4:98:AA:1A:F9
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Ae2qnswUyQgykvW_2ED2xJiqGvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.171.0/24
188.241.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:03:7c:a4:53:9f:64:28:5d:92:70:a4:fa:47:ae:86:ec:f5:
18:a5:98:da:00:d1:e7:92:4a:6c:fc:83:db:21:a3:4e:47:e3:
5e:60:24:1c:2d:e6:67:53:3c:bd:f6:64:b2:89:25:e3:62:82:
ea:e8:8b:ba:84:3d:15:84:f2:df:88:41:b5:b7:3a:aa:64:a7:
f3:8f:95:e1:71:23:7e:97:30:11:4b:f4:53:42:2d:12:2e:27:
6c:cd:72:40:5d:83:18:e6:ef:75:20:70:a4:f6:bc:9f:1d:af:
b2:74:8b:54:9e:06:92:14:4b:1d:ee:03:c7:29:c5:15:d1:4f:
1d:3b:f5:cb:2d:3e:51:f7:9c:c9:41:02:c2:81:90:0b:05:70:
66:e5:71:09:af:33:98:21:4d:6b:d2:d8:6b:cd:e2:dc:c6:ac:
6a:6b:48:a2:cb:0e:c5:5f:99:e0:31:b5:da:6d:3d:f9:09:2f:
16:e4:70:5f:9e:d4:f2:77:73:52:88:19:de:1c:6d:f3:3a:6b:
18:d8:c5:7d:60:6a:4f:42:da:b8:36:0a:3f:5f:e3:bc:62:12:
dd:0e:10:7e:c2:ff:07:d1:2d:1b:31:40:12:e8:5c:e0:f9:4c:
91:38:39:31:2a:98:a0:c7:54:4d:ff:ba:4c:6d:36:8b:08:2c:
cf:d1:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:25 2025 by rpki-client