Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r92rLhMUQIQsccjhf-cNQk--eRM.roa
File: r92rLhMUQIQsccjhf-cNQk--eRM.roa (raw, json)
Hash identifier: 8zOZbTX9nehxax/Jm60BvLhMOJICal7nCZgUWm7mBGY=
Subject key identifier: AF:DD:AB:2E:13:14:40:84:2C:71:C8:E1:7F:E7:0D:42:4F:BE:79:13
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193BF44E21D9D3617C353956BF3DE37EFAA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r92rLhMUQIQsccjhf-cNQk--eRM.roa
Signing time: Fri 13 Dec 2024 09:06:22 +0000
ROA not before: Fri 13 Dec 2024 09:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 89.34.219.0/24 maxlen: 24
89.39.121.0/24 maxlen: 24
93.115.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:44:e2:1d:9d:36:17:c3:53:95:6b:f3:de:37:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 13 09:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afddab2e131440842c71c8e17fe70d424fbe7913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:30:e2:8e:09:4b:82:60:15:a0:cd:e7:0f:
2c:83:88:c9:a5:06:67:90:5e:c9:39:9d:e1:66:ca:
75:68:41:7c:4c:46:d2:0f:be:93:c4:cc:f7:c4:87:
23:64:83:22:ad:b6:11:05:0f:91:7c:48:84:77:0a:
86:e3:43:42:16:8e:ca:a1:29:60:03:ac:c8:6a:bf:
c9:a4:74:1f:dd:09:13:e4:74:7b:0a:19:8c:29:71:
80:12:fc:18:3b:4e:63:f3:ab:89:c9:56:e8:8c:68:
ad:4b:eb:65:0a:80:8b:b2:b5:4c:43:5b:a1:1b:82:
6e:19:36:86:33:46:22:de:ab:c0:8c:87:6f:6b:e9:
07:62:9d:75:31:36:4b:2a:67:a9:9f:2e:1c:bd:f5:
6a:09:15:d4:fa:e5:25:85:9a:fb:25:17:e5:59:c8:
2e:aa:57:48:37:c0:c4:87:db:d5:3d:66:96:8b:6f:
d3:b1:48:bf:02:b7:0e:00:15:f5:b1:6c:4e:52:c7:
b0:cd:72:13:d9:a2:10:ef:e8:78:17:fe:09:48:f0:
9e:d9:6d:2a:65:12:c2:ca:1a:3f:08:f8:0f:03:22:
b9:90:af:08:32:31:55:e4:87:b1:79:2a:42:52:71:
70:0a:b3:7e:d5:c0:2b:5b:99:36:b6:8b:b3:cd:bc:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:AB:2E:13:14:40:84:2C:71:C8:E1:7F:E7:0D:42:4F:BE:79:13
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r92rLhMUQIQsccjhf-cNQk--eRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.219.0/24
89.39.121.0/24
93.115.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f0:d0:ef:40:56:6f:ef:16:fe:fb:94:c6:73:0e:42:38:ab:
ae:54:61:33:72:8a:96:bd:c1:73:dc:1c:f5:f6:e1:2d:9d:64:
cd:3e:2b:84:07:2d:cf:b3:f7:df:50:86:1a:61:7a:5e:53:12:
df:f1:a3:a7:78:5c:94:f7:99:93:ac:31:79:ce:d8:55:5e:b9:
ab:e7:ae:60:ac:c6:ea:be:3c:24:b3:0a:c8:76:ef:71:84:70:
4f:f5:98:1b:ab:0c:4c:11:8e:97:16:fc:04:f9:f6:bd:fa:10:
fb:87:17:e9:c6:cd:7c:dc:a3:30:bb:c9:27:45:a5:6e:99:84:
14:2e:b0:3d:d1:5c:21:30:f3:7d:04:de:4b:01:f9:55:1e:3b:
e5:76:e3:a6:5e:77:a5:e9:73:b7:2f:e7:0c:79:8b:fb:ac:7c:
a4:c5:84:b8:aa:ce:a4:b1:c4:a2:ee:c5:3c:10:59:a3:97:0f:
52:e0:d5:52:95:3b:c4:92:c2:43:ff:d6:fc:4f:04:db:ca:aa:
36:7b:2f:6d:67:91:2e:f4:15:94:97:d8:75:d4:a2:89:c7:39:
08:c9:41:fe:78:31:cf:bd:7d:2d:e4:f6:2d:48:a6:04:96:46:
23:27:7f:1d:91:98:07:9b:69:01:c3:79:4a:85:ac:aa:be:e1:
e3:12:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:42 2025 by rpki-client