Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OIx0Ts5Us5i_n29H5rnVBlBRsR0.roa
File: OIx0Ts5Us5i_n29H5rnVBlBRsR0.roa (raw, json)
Hash identifier: yez2pCpdfI/AD7hMrgTF9r1ezS1CCyKIrWphxdg3yY0=
Subject key identifier: 38:8C:74:4E:CE:54:B3:98:BF:9F:6F:47:E6:B9:D5:06:50:51:B1:1D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019584ABCDF0D0D52FA79F924E998E218F41
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OIx0Ts5Us5i_n29H5rnVBlBRsR0.roa
Signing time: Tue 11 Mar 2025 10:06:46 +0000
ROA not before: Tue 11 Mar 2025 10:06:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 89.21.86.0/24 maxlen: 24
89.251.18.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 16:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:ab:cd:f0:d0:d5:2f:a7:9f:92:4e:99:8e:21:8f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 11 10:06:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=388c744ece54b398bf9f6f47e6b9d5065051b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:ee:e1:45:3e:1b:ea:57:b3:dd:ff:fe:f3:
6c:58:f8:84:dc:7a:5b:1b:cf:78:ef:1f:b3:e8:7a:
e3:6a:29:88:f0:2b:a2:61:2f:8f:d7:d5:ae:04:ba:
4e:94:c3:8a:fd:0c:5e:b8:44:cb:85:2c:8d:78:31:
0f:26:b6:ac:f8:56:95:e4:aa:d8:29:4c:66:cb:1f:
8d:70:30:e3:3c:84:3c:65:2a:08:fe:96:9f:e2:6e:
49:d5:f2:a4:38:79:ef:57:6e:09:b3:db:cf:d2:b2:
b0:5d:c6:24:e4:39:bf:aa:27:bd:e1:ff:f8:3e:dc:
25:bc:04:bd:01:d7:ae:94:0a:a7:c8:b7:e1:5e:f7:
0c:79:3c:65:d7:5f:f9:19:17:fb:ca:b3:f2:4e:13:
6c:21:29:80:ed:15:25:55:a3:52:88:7b:6c:58:e5:
27:fb:23:66:51:04:0b:f8:bc:67:d4:5a:c5:ef:4f:
de:a8:c6:1e:84:a5:d7:ff:1c:2c:33:fa:c5:c6:2d:
0d:af:33:fe:16:a8:78:ce:25:5e:e1:94:f4:59:60:
b3:81:6c:d9:ce:6b:15:af:73:0c:15:f8:d5:93:43:
4d:06:b6:54:c9:bf:88:e7:e8:8d:b9:9c:26:03:c7:
71:66:55:50:ba:83:60:4a:fa:ac:4d:5b:0b:4f:ce:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:74:4E:CE:54:B3:98:BF:9F:6F:47:E6:B9:D5:06:50:51:B1:1D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OIx0Ts5Us5i_n29H5rnVBlBRsR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.86.0/24
89.251.18.0/24
89.251.31.0/24
109.122.43.0/24
Signature Algorithm: sha256WithRSAEncryption
36:cc:0e:ed:6d:19:cf:d9:a4:b3:d9:0a:42:1b:d0:51:c2:c3:
b3:20:73:8e:10:24:4e:8c:cf:46:95:7c:f0:47:96:1d:23:5e:
93:56:d4:3c:e9:5e:35:c1:f0:24:4b:01:d1:8d:66:26:7e:73:
83:ae:c4:94:fb:74:da:07:e1:e0:40:a5:7c:cd:ae:80:d5:2a:
7a:50:48:be:2a:be:09:c9:78:65:c1:f1:47:e8:66:85:b5:89:
cb:40:3e:9a:f7:2c:39:51:26:a0:c7:bc:57:8b:ca:9d:ca:e2:
95:50:b4:92:5c:0c:7e:a9:5c:3f:28:ff:9c:51:45:77:b7:df:
7c:a2:6e:8d:f4:87:7a:83:4e:a5:0c:9d:a2:99:cf:03:91:fd:
ee:74:d0:b9:61:7b:49:c4:0d:01:ce:03:46:01:f5:49:72:8f:
1f:8e:64:9c:3e:6b:99:f0:a5:11:83:9f:da:1e:01:f2:a3:b2:
60:84:9d:ca:9b:a8:de:73:ef:af:f5:e1:ff:e7:89:6a:c4:84:
9f:77:9b:93:0a:56:34:aa:80:73:3d:52:05:f2:81:77:28:28:
30:74:34:21:62:b2:2c:e2:57:1f:eb:ea:d7:5e:ac:7b:3c:0f:
db:8d:e4:ab:b1:69:c3:a0:c1:ec:b7:67:02:88:90:4b:c3:23:
3e:c6:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:55:00 2025 by rpki-client