Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/_ociF1UU9bHamxAAabwiG6V1xZM.roa
File: _ociF1UU9bHamxAAabwiG6V1xZM.roa (raw, json)
Hash identifier: fOqsLFUS9sGwM+QQlIA/4Q1zLgBvdZIA0Yx3QY1YNDM=
Subject key identifier: FE:87:22:17:55:14:F5:B1:DA:9B:10:00:69:BC:22:1B:A5:75:C5:93
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 018CC6B77D8A1B18C5347F70342E5BB17B3D
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/_ociF1UU9bHamxAAabwiG6V1xZM.roa
Signing time: Mon 01 Jan 2024 20:29:23 +0000
ROA not before: Mon 01 Jan 2024 20:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41437
IP address blocks: 89.207.121.0/24 maxlen: 24
89.207.120.0/21 maxlen: 21
89.207.120.0/24 maxlen: 24
89.207.124.0/24 maxlen: 24
89.207.123.0/24 maxlen: 24
89.207.127.0/24 maxlen: 24
2001:a00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7d:8a:1b:18:c5:34:7f:70:34:2e:5b:b1:7b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe8722175514f5b1da9b100069bc221ba575c593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:03:d7:ba:88:f0:27:7e:67:48:53:e3:d1:
63:41:11:dd:82:7b:36:06:41:0f:78:b9:03:71:cf:
19:85:52:a9:cc:b8:29:dd:91:b0:d9:a5:18:f8:58:
7f:5e:f2:27:97:c0:e2:75:cd:d8:8f:16:84:7e:34:
98:bb:69:36:69:9b:f2:d8:3e:a4:07:c1:46:78:6d:
b2:1a:0d:32:38:ea:a4:3d:1d:62:6e:78:a5:72:88:
d4:06:5d:90:44:92:ca:f9:54:98:83:57:91:bc:a3:
54:3d:1d:b0:33:c6:b7:17:a0:ee:68:3e:e5:ed:2c:
c0:4d:53:b8:60:6f:f0:cf:ab:65:a2:e1:2a:f7:55:
6a:00:00:68:4b:5c:28:19:95:ae:64:f3:c1:18:4a:
84:a8:c9:75:98:2d:46:a1:31:20:2d:51:5c:3c:68:
80:7f:22:f5:0f:79:5e:ea:d9:9f:4e:11:fc:21:fb:
4b:0f:f9:92:8e:ad:53:83:8a:99:e7:de:9e:42:87:
cd:af:1a:85:db:ff:17:9d:ea:cd:a4:53:d8:b4:f1:
eb:39:11:c5:52:6f:bd:b9:ae:5c:98:be:f5:fc:cf:
fd:75:7a:3b:37:42:11:8d:b3:eb:8b:94:b3:0c:5e:
90:27:cb:25:d0:f1:9e:3c:45:ed:3c:b9:47:a9:0d:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:22:17:55:14:F5:B1:DA:9B:10:00:69:BC:22:1B:A5:75:C5:93
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/_ociF1UU9bHamxAAabwiG6V1xZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.120.0/21
IPv6:
2001:a00::/32
Signature Algorithm: sha256WithRSAEncryption
0c:bd:46:03:dd:89:23:e1:31:a8:d4:99:a6:1d:04:8f:bd:92:
38:a4:c6:d1:73:d3:84:70:df:32:25:25:8b:54:90:ee:ce:17:
97:d9:db:98:68:dc:79:57:42:16:40:8b:ed:a9:16:81:5c:b9:
f9:c8:d2:89:1b:df:4a:5b:5f:c6:eb:cf:c5:18:95:2d:47:af:
32:27:89:89:19:77:0b:d1:60:79:18:40:5c:27:84:58:c2:59:
7d:76:04:fe:62:f6:d1:d9:d2:ad:75:85:49:59:8e:ca:98:0f:
2f:d1:e8:af:49:6b:a5:f5:6a:3e:09:6d:ff:34:77:69:e0:81:
0f:2b:c5:d1:e7:45:53:72:a6:d9:0f:27:ab:9f:7a:47:aa:00:
d3:9c:07:4a:4d:84:fa:e6:2b:fb:34:4d:27:5a:da:59:83:81:
1b:8d:41:10:78:8a:61:81:5e:de:52:d0:f3:05:aa:a9:00:ca:
db:5d:2a:b9:19:82:15:d0:24:e4:92:f9:d0:bd:18:74:37:52:
d0:5a:33:50:56:ba:14:19:f9:62:a8:2f:37:9d:95:21:9f:13:
19:f5:b8:70:72:46:5e:0a:fe:64:85:4f:71:97:ae:8c:53:1e:
88:c4:8e:9b:0b:cc:1b:8c:33:1f:83:32:6b:37:e6:51:a3:7a:
eb:b4:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:15 2025 by rpki-client