Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b9RA885vEwFZBVlSZ20MNyij5-0.roa
File: b9RA885vEwFZBVlSZ20MNyij5-0.roa (raw, json)
Hash identifier: XyDxs+ldRlHeWgpi7+HEZWG3FHhed3tM7K3aQCbqs8w=
Subject key identifier: 6F:D4:40:F3:CE:6F:13:01:59:05:59:52:67:6D:0C:37:28:A3:E7:ED
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194B04605F87CE0F80864CD7E4DC754A48E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b9RA885vEwFZBVlSZ20MNyij5-0.roa
Signing time: Wed 29 Jan 2025 04:16:06 +0000
ROA not before: Wed 29 Jan 2025 04:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 89.40.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 16:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:46:05:f8:7c:e0:f8:08:64:cd:7e:4d:c7:54:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 29 04:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd440f3ce6f130159055952676d0c3728a3e7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:fd:c1:21:18:c3:7e:ff:32:4c:cc:d5:f7:
a9:01:83:72:8d:b6:3b:88:da:6c:4b:07:e5:c4:a7:
87:40:40:9a:ee:e6:37:a9:14:56:0b:f7:e5:5e:f1:
a6:c5:b1:e0:01:e4:54:66:f3:93:ca:d8:02:4b:18:
28:db:06:6e:a5:54:15:b3:83:15:3d:3e:b5:e1:ff:
cd:36:a1:d3:93:22:7c:a1:0d:44:0a:d9:62:05:95:
81:7b:bf:dd:74:aa:be:ca:a7:10:6d:0e:62:3d:36:
4b:a1:d1:f0:59:d4:b1:d6:ad:d7:8b:c1:6c:74:50:
57:c2:68:29:79:b8:a6:bf:2f:20:87:44:55:63:bc:
77:2a:96:13:f2:b0:80:27:66:bb:82:bc:9e:0d:ef:
63:a5:80:1f:00:79:b5:a8:43:5f:c9:e8:79:85:b0:
d0:86:c5:be:82:76:eb:01:f0:71:7d:8f:3e:5b:9c:
e2:e3:d4:f0:01:49:38:e5:c9:0c:f2:6f:ef:5b:a0:
de:7e:98:f3:26:a2:25:ac:ac:2a:ef:ca:b3:12:1c:
2a:78:68:cc:a9:bd:dc:77:a4:01:a1:a5:f3:43:f2:
12:ba:29:2c:2c:22:d5:c7:08:48:e6:c3:4d:aa:f8:
57:81:27:6c:0d:8d:07:70:90:0e:ae:11:cf:5e:e3:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:40:F3:CE:6F:13:01:59:05:59:52:67:6D:0C:37:28:A3:E7:ED
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b9RA885vEwFZBVlSZ20MNyij5-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f3:fa:31:a8:15:0b:1e:7c:1d:08:ad:3a:b1:33:e5:21:41:
4e:1c:e6:1d:ca:9d:58:4b:12:2a:fd:77:5e:76:97:f3:59:83:
74:e4:85:36:fd:37:bb:dd:d1:b4:0c:8b:3b:95:fa:58:64:8a:
67:a8:47:81:a8:91:f6:76:60:32:29:8e:b4:c3:c6:39:a5:ae:
bc:82:26:45:08:9b:da:c7:63:1d:50:de:f8:77:fc:97:2b:49:
ba:8c:70:24:c7:73:ee:d2:be:5e:fa:11:c7:1a:ba:ef:d2:b7:
1c:48:7c:56:e4:1a:51:45:6d:8e:b7:5b:ca:d5:73:be:fe:da:
8f:68:3f:53:98:77:4f:43:a0:37:88:a8:66:0f:ae:bf:cc:ba:
b7:d5:8b:5c:08:53:2c:96:a0:42:25:c4:e6:d9:6e:43:92:46:
cc:6e:0d:0a:72:cf:33:1e:be:19:fa:0d:14:df:00:3e:67:8c:
50:b8:fa:f2:d2:f8:e9:cf:ce:04:c3:92:14:14:67:df:0b:39:
13:df:db:f4:fb:d0:cb:0d:10:b8:59:ca:ba:f2:c0:77:e5:cb:
d3:64:ce:a8:ae:79:fe:02:fc:e4:8d:de:f4:bf:50:40:fc:45:
93:c9:83:d7:b2:36:8f:dc:98:d5:82:56:37:c8:39:62:6d:4a:
30:63:60:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:43 2025 by rpki-client