Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Grd34winn12-o4vZ-xsRD7pjaTs.roa
File: Grd34winn12-o4vZ-xsRD7pjaTs.roa (raw, json)
Hash identifier: +5dKQOtfgVtAMSHMTzPQfJawU1ZnxDl3/H6G3cEQmzI=
Subject key identifier: 1A:B7:77:E3:08:A7:9F:5D:BE:A3:8B:D9:FB:1B:11:0F:BA:63:69:3B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195ACCC1220F831F8C6986A35059090B0CE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Grd34winn12-o4vZ-xsRD7pjaTs.roa
Signing time: Wed 19 Mar 2025 05:06:49 +0000
ROA not before: Wed 19 Mar 2025 05:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 89.144.11.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 18:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ac:cc:12:20:f8:31:f8:c6:98:6a:35:05:90:90:b0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 19 05:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ab777e308a79f5dbea38bd9fb1b110fba63693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:02:f0:c9:51:8f:7d:85:81:cd:d1:08:de:
11:88:5e:5d:42:7a:0f:c8:a7:15:e0:da:b1:bf:90:
e0:fc:1b:15:29:51:26:bd:13:5c:8c:0d:3c:77:98:
00:f4:71:7e:d8:34:3b:05:2b:3d:11:63:68:8e:26:
db:bf:f9:9b:e0:4b:66:ac:f7:c2:fb:7d:8e:34:01:
73:7c:76:46:17:dd:23:77:b9:a1:22:8f:e7:c6:2d:
cc:a3:fc:c5:38:81:6a:87:0f:62:f1:5c:88:61:a5:
78:89:c4:1c:93:e0:06:8e:47:6d:c4:5a:e5:d4:cf:
06:ec:50:b7:86:e8:61:eb:de:80:55:55:4f:72:da:
af:50:3d:8a:a4:96:c9:e2:28:40:b9:66:6d:b7:80:
db:9a:76:76:14:85:17:ce:2f:98:3b:a1:e2:5f:51:
c5:85:f3:a0:d1:ae:b0:e5:f4:27:1d:bd:a1:e0:61:
c0:91:7a:32:8c:87:09:ee:b7:2d:8b:6c:8a:be:7b:
ed:28:42:75:6e:88:31:10:5a:8d:20:a6:9f:af:e3:
77:44:59:ab:29:5b:59:fe:bd:8a:0d:5a:cf:6b:d7:
4f:b4:aa:ed:ff:a7:51:be:20:2b:b4:63:bd:cb:72:
d5:7a:e0:32:11:e6:e9:c4:9e:2e:01:63:ac:fa:4e:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:77:E3:08:A7:9F:5D:BE:A3:8B:D9:FB:1B:11:0F:BA:63:69:3B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Grd34winn12-o4vZ-xsRD7pjaTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.11.0/24
89.144.17.0-89.144.18.255
89.144.39.0/24
94.249.214.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a1:0e:89:14:77:a6:71:38:4d:6c:20:9e:54:fb:1c:cf:35:
fc:95:f8:a4:ac:db:e1:a9:65:8c:5b:1f:82:bc:ff:11:3d:12:
47:40:11:ac:9f:56:ee:1c:f2:04:3f:f0:6c:b9:d8:30:0a:46:
44:45:e9:62:07:6b:60:34:38:d4:e5:f3:3c:1f:c9:79:91:de:
60:57:b7:f3:f9:05:ab:4d:92:4d:4e:4e:75:bb:0d:69:b3:5d:
fe:88:28:65:d4:53:dc:42:e7:e4:ac:61:1b:96:b8:f2:b5:4a:
f3:97:46:40:83:68:17:9f:c5:7e:0b:d6:a1:a0:b6:1c:93:90:
c4:46:a6:1f:5c:8c:31:75:95:31:b5:56:96:33:89:5a:79:3b:
4d:be:b9:ce:a2:7e:6a:87:e5:77:1e:46:7e:14:80:d0:d4:3f:
ab:61:b2:d7:ad:8b:34:39:81:e7:cd:5d:2b:08:e0:d7:9d:ec:
a6:02:71:65:d1:ef:1e:85:3c:6b:e4:3d:4f:55:b8:c1:73:b2:
7b:41:aa:24:3d:f0:8d:65:4d:e0:38:54:f7:e8:72:be:c7:1a:
1e:09:4f:c1:53:81:c0:68:d0:11:93:fd:a0:d3:9b:05:b3:04:
c6:85:48:7d:fc:0c:2d:21:a9:89:0c:41:0f:ed:82:66:04:6c:
fe:d9:c0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:13:00 2025 by rpki-client