Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/1DAJXXrivuscgW0iOZh6aCBYqTo.roa
File: 1DAJXXrivuscgW0iOZh6aCBYqTo.roa (raw, json)
Hash identifier: BQqVMoROLT3FfEF/IwrXi7W2D1e0TI3qWzGOGCskKE4=
Subject key identifier: D4:30:09:5D:7A:E2:BE:EB:1C:81:6D:22:39:98:7A:68:20:58:A9:3A
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 018CC2DAE47B7D4923A548ACCDD7A114CD20
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/1DAJXXrivuscgW0iOZh6aCBYqTo.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57034
IP address blocks: 89.36.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e4:7b:7d:49:23:a5:48:ac:cd:d7:a1:14:cd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d430095d7ae2beeb1c816d2239987a682058a93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:07:f8:75:c8:1f:79:56:63:da:86:0d:77:
aa:85:92:9b:2d:53:17:42:b7:69:b1:d8:79:89:df:
8d:8d:72:7b:5f:cc:cf:67:ac:29:ae:f9:da:32:17:
7e:56:3e:4c:29:e0:76:1f:f0:ac:10:db:7b:c7:ed:
1e:ce:f9:a5:f1:dc:ca:6f:8c:1d:07:65:68:13:a1:
7b:0a:f8:a7:ee:26:2e:dc:d2:86:12:54:88:29:d2:
fb:3a:1b:1e:a1:61:aa:07:b4:24:8a:25:3d:0b:3e:
c4:74:53:a6:1f:8f:92:a6:24:9b:59:3b:cb:59:0a:
3c:3c:51:53:60:30:e8:15:8f:62:09:cd:e0:0d:5d:
7d:52:ad:e7:0a:d7:7b:5d:3a:a2:c6:48:1f:fd:16:
67:93:d2:03:b2:55:0d:bd:9b:1f:82:9d:19:86:3f:
c4:9f:f9:f3:30:90:e1:27:ab:b9:88:f0:f6:77:9e:
3e:6d:e6:0a:ff:4c:aa:e9:a1:2b:ff:5a:a3:89:13:
2a:e7:d2:0d:e3:8f:0b:80:ee:d5:0e:a1:8f:17:08:
46:65:cb:be:6d:3e:4b:db:de:4b:33:5b:7a:a7:47:
d7:b5:19:42:27:7a:46:17:29:4f:b3:01:51:2c:86:
a4:5f:67:38:2c:b3:9b:93:d1:9f:16:29:22:07:69:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:09:5D:7A:E2:BE:EB:1C:81:6D:22:39:98:7A:68:20:58:A9:3A
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/1DAJXXrivuscgW0iOZh6aCBYqTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a8:83:51:bb:e7:2c:4b:04:13:53:1c:14:81:ea:e4:dd:22:
b6:58:67:ee:dc:38:37:14:18:37:76:9f:74:f7:a5:85:6f:ef:
bd:1c:a7:6c:a7:ab:00:f7:b0:4d:85:e7:78:09:b0:75:a9:44:
80:43:26:e2:c0:22:67:22:3d:bc:41:7f:24:cc:43:dd:8f:a4:
6f:d0:be:ff:4a:c2:90:d5:6c:55:40:57:68:41:56:b2:85:6c:
10:14:19:0d:e0:53:5d:dc:18:ed:9e:b2:f9:f2:a7:98:d7:fc:
cd:77:1f:07:77:96:9f:0e:ea:e7:fc:6f:61:ba:bc:f8:96:17:
8a:92:87:96:95:d6:9e:9b:86:93:7f:41:c2:dc:56:b8:b1:fa:
ef:68:34:0f:af:d3:5e:a1:2f:15:83:49:fa:5d:af:86:14:5c:
fc:cd:d8:6d:99:dc:c4:77:43:98:d6:0f:0e:fd:d2:48:c0:80:
07:ac:b2:f9:70:3c:9d:33:a7:fd:13:a8:66:f1:e1:0e:61:78:
c3:2e:b1:46:aa:04:d1:82:f3:9a:46:97:95:15:79:c2:27:a1:
fa:05:e9:59:52:72:69:51:b6:b5:08:d5:31:0d:28:2e:10:5b:
37:77:08:29:1b:9c:05:3e:8e:71:0e:a5:7e:21:84:0a:bb:1a:
12:42:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:26 2025 by rpki-client