Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SmylpfFfpYdvry4_E3TzLHxkq_Q.roa
File: SmylpfFfpYdvry4_E3TzLHxkq_Q.roa (raw, json)
Hash identifier: a+1Zj0rpbjgYoSzkwrRCbSPfXv4mt9SAqranX2fCUWQ=
Subject key identifier: 4A:6C:A5:A5:F1:5F:A5:87:6F:AF:2E:3F:13:74:F3:2C:7C:64:AB:F4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194F724F8BF468D3A59EDBD4A74F201C801
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SmylpfFfpYdvry4_E3TzLHxkq_Q.roa
Signing time: Tue 11 Feb 2025 22:33:02 +0000
ROA not before: Tue 11 Feb 2025 22:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 89.144.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 05:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f7:24:f8:bf:46:8d:3a:59:ed:bd:4a:74:f2:01:c8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 11 22:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a6ca5a5f15fa5876faf2e3f1374f32c7c64abf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:e5:83:21:65:2c:25:2e:dc:5f:d9:e3:3d:
80:9b:64:06:3b:9d:cf:4d:97:02:ee:c2:a6:20:ba:
f2:da:2b:f9:69:52:cc:68:b0:ae:cb:bd:5f:95:45:
b0:c9:0a:4d:76:11:9a:9e:d4:34:2c:5d:7e:93:e8:
38:d3:4b:db:61:79:00:6d:25:e0:0e:ac:9a:ea:57:
46:54:7a:28:d9:29:e5:d7:9f:90:02:fc:e3:88:eb:
16:57:d9:37:7e:46:59:08:4b:8d:d6:dd:52:bf:e6:
46:89:84:75:73:4d:17:67:0f:9f:bc:69:b1:58:b2:
24:29:66:ee:45:00:f4:f9:dc:8f:fd:16:c6:e5:e4:
45:d0:10:60:ae:1c:70:40:d2:15:42:0b:ea:c9:44:
04:b1:53:e5:67:56:e1:3f:f1:c8:7a:43:8e:fc:11:
72:01:ed:a5:65:f3:53:8c:7c:3c:91:fe:85:87:26:
51:9a:91:35:a1:ba:84:04:29:b9:61:d7:dd:32:9d:
a1:37:ec:0e:c3:df:e8:63:cb:41:0e:ae:e2:33:9d:
04:41:d8:93:97:e5:00:2e:11:d7:39:e6:14:fe:55:
05:4e:27:81:98:29:91:3a:ba:68:f6:7b:79:4c:49:
60:a5:8e:ad:f7:63:9a:41:c6:5e:59:81:d2:53:65:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:A5:A5:F1:5F:A5:87:6F:AF:2E:3F:13:74:F3:2C:7C:64:AB:F4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SmylpfFfpYdvry4_E3TzLHxkq_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:da:8e:b4:06:75:4d:10:5a:cc:53:fd:71:db:b8:53:4b:60:
29:c7:3f:0e:41:e7:2e:25:8b:4f:fe:86:dd:26:d9:1e:3d:f8:
0b:0d:52:07:83:61:ca:1d:11:c2:c1:5c:95:36:4c:d9:00:be:
fe:e5:81:5a:a5:80:f8:73:a1:1d:9c:e6:23:5b:c2:d5:07:39:
0c:4b:64:6e:ab:a5:d8:dd:28:fa:10:2d:24:65:e8:3d:88:84:
31:0f:33:f2:30:e9:15:78:b6:3b:7f:0c:d7:ad:d9:58:d2:9b:
67:e1:a1:43:19:40:23:80:57:ec:9c:20:c0:a2:5d:fb:94:fb:
42:a6:67:66:42:8f:a5:aa:67:d4:b8:84:64:63:23:d4:eb:48:
d4:ee:89:25:e7:aa:83:20:09:81:1a:42:7c:fe:98:eb:c6:f6:
49:b8:57:bd:7c:72:44:c5:58:a4:6c:38:44:3f:5c:b6:87:a9:
b1:18:b1:a8:a1:f3:3f:93:5b:0b:93:cf:99:ea:64:32:c5:52:
ee:dd:6f:54:0f:d1:2f:72:d3:92:86:1d:bd:48:f8:9b:7c:b8:
f5:24:df:82:c9:99:86:5b:a9:9a:19:7e:1f:4f:70:1b:41:38:
e3:59:80:79:9b:cc:1b:b8:d8:d8:ae:55:a0:1b:eb:c0:82:70:
ec:31:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:21 2025 by rpki-client