Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/sCCEDaKp5oGZHHej-Y9bRbywme4.roa
File: sCCEDaKp5oGZHHej-Y9bRbywme4.roa (raw, json)
Hash identifier: 9RkbdLoFEGw0NxCIii1jbzSBGAO/CLv0yu9o0umRbFw=
Subject key identifier: B0:20:84:0D:A2:A9:E6:81:99:1C:77:A3:F9:8F:5B:45:BC:B0:99:EE
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01938C395EC0D3C378CB9D0C3CAB406D151E
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/sCCEDaKp5oGZHHej-Y9bRbywme4.roa
Signing time: Tue 03 Dec 2024 11:13:10 +0000
ROA not before: Tue 03 Dec 2024 11:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 89.23.79.0/24 maxlen: 24
89.23.80.0/24 maxlen: 24
89.23.81.0/24 maxlen: 24
89.23.87.0/24 maxlen: 24
89.23.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:39:5e:c0:d3:c3:78:cb:9d:0c:3c:ab:40:6d:15:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Dec 3 11:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b020840da2a9e681991c77a3f98f5b45bcb099ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:99:f7:3d:13:55:42:fe:4b:03:64:bf:b9:
eb:46:17:b9:a1:ec:17:70:ba:d3:9f:da:d2:1f:23:
ec:2e:31:3d:f2:50:81:34:8a:86:17:69:a4:d6:00:
84:0c:ae:81:6f:2d:08:16:d2:86:65:fc:fb:ec:00:
dd:ef:51:5d:e2:02:dd:cd:78:7d:6c:69:77:1d:41:
a9:d3:cf:05:f9:b8:c2:d0:5d:08:59:7b:f8:aa:5f:
07:b7:11:fa:69:fc:c7:0d:11:22:b1:ef:bc:18:63:
5a:45:48:f7:dd:5e:d4:7b:fd:65:a9:d1:1f:2d:b5:
aa:9c:43:58:57:5c:ec:b7:6b:65:fc:ab:e1:cb:86:
c0:72:f2:80:8a:50:f6:c4:99:fc:7e:b2:65:84:01:
95:14:f6:78:7c:6b:5a:d2:13:ad:36:0a:8e:7b:70:
87:60:ca:42:2a:0d:6c:70:20:e3:96:7f:6a:ed:0c:
a1:35:4b:6e:25:48:de:7c:4a:f9:62:59:1d:17:f8:
b3:40:23:4f:ac:7e:8c:a2:c3:8d:bc:6f:61:dc:04:
24:2f:a3:71:3c:b1:16:dd:22:02:7d:01:80:b2:10:
40:4d:ea:41:1b:04:8b:ad:f6:3a:31:d0:79:26:c9:
25:19:e0:92:f6:4c:39:00:e7:31:3a:30:66:92:4a:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:20:84:0D:A2:A9:E6:81:99:1C:77:A3:F9:8F:5B:45:BC:B0:99:EE
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/sCCEDaKp5oGZHHej-Y9bRbywme4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.79.0-89.23.81.255
89.23.87.0/24
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2b:9c:22:cc:22:39:17:df:b5:da:57:73:a6:cd:eb:2a:cf:
44:ba:44:9f:16:82:d9:a5:0e:44:15:22:0e:27:5e:a7:a4:dc:
93:ac:11:ee:3a:2d:ae:cf:9d:f3:b2:e7:8c:e6:c4:bd:39:72:
b9:27:3f:e5:cc:b6:e3:a9:38:64:24:a2:6e:13:9b:28:f9:8b:
b8:d8:fe:cb:ae:8e:54:03:ef:8f:31:8d:0a:58:82:f6:fa:2b:
33:92:4b:f5:20:f0:90:f6:ad:7a:16:0f:0a:87:08:76:6b:5c:
87:ea:db:af:69:3f:d4:4a:b5:e8:68:93:bc:e2:35:04:1e:db:
48:03:04:10:18:99:86:64:ca:43:1e:87:1f:d6:d2:b0:71:6d:
6a:50:47:65:17:4f:d8:ff:97:6f:f0:4a:30:22:70:61:98:2f:
10:bc:09:b1:d9:be:bc:3e:33:e2:fd:5a:be:bf:73:31:d1:42:
26:3c:9f:82:ba:aa:54:3a:8e:51:0a:e0:0c:16:a9:7b:3a:5b:
15:77:81:c4:42:a3:da:1a:12:7f:85:ab:a6:23:bb:89:34:48:
73:4c:37:aa:ce:71:46:ba:d9:3e:62:3f:b5:ca:1d:00:89:f7:
7f:ba:01:a3:cc:08:5b:4c:7f:e3:71:35:44:57:30:4a:6d:0b:
29:26:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:44:43 2025 by rpki-client