Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YAxY5HEMqefRPL2Et-5_8_InmuI.roa
File: YAxY5HEMqefRPL2Et-5_8_InmuI.roa (raw, json)
Hash identifier: yA0GIqDZuKAbHWK46FZTPQse6BUHmw54pIO37M3UwPU=
Subject key identifier: 60:0C:58:E4:71:0C:A9:E7:D1:3C:BD:84:B7:EE:7F:F3:F2:27:9A:E2
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0192B5955A5430A64E8FEC6CC2319A283B6E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YAxY5HEMqefRPL2Et-5_8_InmuI.roa
Signing time: Tue 22 Oct 2024 18:55:16 +0000
ROA not before: Tue 22 Oct 2024 18:55:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397283
IP address blocks: 89.251.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:95:5a:54:30:a6:4e:8f:ec:6c:c2:31:9a:28:3b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 22 18:55:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=600c58e4710ca9e7d13cbd84b7ee7ff3f2279ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:3c:4b:c5:4f:ff:28:78:6d:f6:f8:5b:f6:
4a:cc:56:5f:a9:96:32:89:90:25:f4:3a:33:f0:4f:
41:d0:d1:18:06:01:d6:4e:d0:fb:83:cd:e0:35:84:
9e:6b:c4:08:d8:49:9e:9e:69:3e:bf:d6:db:de:72:
45:d5:cf:d5:b5:c0:70:57:32:5c:e5:a5:32:ca:fa:
36:55:5b:7c:0d:71:d1:6b:79:cb:07:4d:9d:b5:50:
cd:28:5f:ad:07:03:82:24:11:cd:c6:8b:90:32:c5:
00:16:6f:c2:d0:ff:ed:a9:cc:7c:ae:24:23:ca:da:
c4:db:ac:6a:9f:9f:62:cc:78:d3:51:83:ea:f8:94:
da:c2:5b:a2:a8:e4:2b:c0:df:83:b0:de:f0:a6:9b:
0e:ea:58:ed:ba:c2:69:0b:1e:a9:46:4d:59:24:4b:
a3:65:1b:30:19:ce:6e:4c:b5:f3:67:c2:fc:85:7c:
1c:bd:9a:5b:7d:da:8e:f2:ee:db:34:ee:fb:9c:87:
55:c2:44:09:82:ff:e4:98:6a:f3:a2:71:b7:a4:c9:
c2:6a:f7:2c:f8:dc:73:54:ae:26:4a:e3:48:67:57:
df:57:68:40:3a:2a:78:ca:f8:31:b1:7a:2e:01:d4:
24:e1:fc:ac:23:e7:cf:37:98:bf:c0:67:50:e3:3d:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:58:E4:71:0C:A9:E7:D1:3C:BD:84:B7:EE:7F:F3:F2:27:9A:E2
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YAxY5HEMqefRPL2Et-5_8_InmuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.25.0/24
Signature Algorithm: sha256WithRSAEncryption
38:56:79:9c:14:aa:23:76:2a:4f:c0:a8:40:bc:f2:47:70:83:
fb:3e:41:7d:ac:44:2f:13:15:03:e9:d4:da:2f:d3:99:5d:ca:
2b:26:03:69:f8:5b:d5:68:2c:8b:0e:1f:03:f6:dc:56:ad:a7:
14:95:80:59:1a:e1:9c:07:c8:3a:ea:50:75:1c:0a:56:ef:96:
f7:be:19:a5:34:0f:ee:93:55:8d:9e:35:c9:f4:6a:60:db:8e:
c6:c7:08:81:06:89:a1:ee:30:71:5a:d0:c5:df:c4:eb:78:d5:
f3:e7:13:5e:4c:38:ed:6f:c4:33:93:57:36:ee:79:c4:fc:7d:
9e:4e:9d:06:44:1c:6b:03:89:8f:c6:60:c1:86:de:42:88:d0:
06:9c:3c:e0:b5:9d:f4:7a:c5:bf:b6:ce:df:c9:e7:7d:b3:bd:
55:61:52:19:b4:03:a7:b8:e0:aa:1b:aa:68:12:66:e9:3b:80:
8d:6a:38:44:bb:4a:37:c4:0e:e1:9c:43:1c:61:ea:ce:80:7d:
f4:c0:95:04:39:06:2f:1f:07:db:a7:76:4c:64:4c:b8:84:88:
a5:37:b2:35:10:09:0e:f8:6c:fd:f9:e4:21:f9:44:c9:6a:3d:
9f:a8:66:86:63:f5:bf:9b:58:ef:04:60:e8:67:43:60:c3:8d:
2a:58:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:13 2025 by rpki-client