Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/TjxdgnAgoehKqyCUX_P357G2hSg.roa
File: TjxdgnAgoehKqyCUX_P357G2hSg.roa (raw, json)
Hash identifier: 8MdFaP2a57Nm4XJILcrJzIrEpf5+AjyvRnEAI+dmHqI=
Subject key identifier: 4E:3C:5D:82:70:20:A1:E8:4A:AB:20:94:5F:F3:F7:E7:B1:B6:85:28
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 018CC4247168044AA96FE0662E04A29DA820
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/TjxdgnAgoehKqyCUX_P357G2hSg.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209271
IP address blocks: 89.111.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:71:68:04:4a:a9:6f:e0:66:2e:04:a2:9d:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e3c5d827020a1e84aab20945ff3f7e7b1b68528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:f3:d8:e6:0f:e2:32:d0:8d:9e:20:6d:d3:
10:7d:50:a5:cf:d2:8d:3f:47:2a:34:bb:b4:aa:3e:
28:47:79:99:2e:9f:18:fb:16:78:9b:ef:1a:a9:c9:
b3:3d:9d:c1:a3:a9:2b:8b:0b:c4:cc:75:ab:d3:d8:
3e:9f:0b:cd:61:92:e2:74:39:71:db:9f:0d:79:c0:
b9:97:f1:4d:2f:fc:74:f4:65:52:8e:1e:9d:9f:6d:
fe:bb:e0:b0:42:7c:1d:5c:8e:2c:d8:ab:a6:cd:79:
95:72:3c:95:ed:77:08:81:e5:4a:e7:db:34:46:e0:
ae:6c:a8:43:c9:cf:6f:e8:e2:9f:b7:20:72:72:47:
14:19:7c:cd:32:85:e5:44:6c:f7:b5:7f:79:00:b5:
38:99:d1:ac:1f:50:b4:94:18:e4:30:7c:7f:44:36:
c7:1d:1c:be:a8:1d:c9:8e:7a:54:b2:3d:ae:27:0c:
6a:0d:a2:12:c8:31:bd:f9:66:a7:84:90:22:b5:fa:
1b:17:66:0b:22:b6:f0:9f:94:6a:28:da:e6:57:65:
4f:df:4d:c3:1a:08:b1:99:e6:77:0b:2d:14:1b:52:
05:67:3a:45:6e:b0:00:d7:3b:6a:d5:0e:ff:18:c8:
bf:b6:a6:52:ea:60:69:66:3b:bd:a4:c0:3b:4f:08:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:5D:82:70:20:A1:E8:4A:AB:20:94:5F:F3:F7:E7:B1:B6:85:28
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/TjxdgnAgoehKqyCUX_P357G2hSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9c:af:d6:b3:77:52:6c:40:a6:de:b9:1d:ce:3e:d0:d7:df:
01:82:9f:3e:ba:63:ed:f1:9e:30:56:9c:6e:27:0e:df:d3:76:
c7:e6:8f:2e:46:32:a4:80:9e:ae:9a:ac:e2:aa:31:80:a1:73:
62:2c:d8:d0:6c:50:34:98:a1:83:fb:94:64:d8:99:f9:a1:8f:
15:e6:92:67:b6:cc:ff:a4:56:e7:75:4c:ce:83:0d:36:24:68:
c5:a3:1e:50:1c:f8:24:27:a9:a8:eb:6a:35:46:62:19:e9:59:
a3:29:5b:79:ce:d2:1d:18:94:f4:ae:8c:b1:16:63:18:93:8b:
f9:05:b5:8a:b0:3a:5b:59:be:9b:4b:c3:ae:39:dc:e8:48:00:
1a:5d:fb:72:2a:14:1e:7d:95:7c:e5:85:d9:33:0c:65:c6:1a:
b8:05:3d:d3:68:fa:1e:93:08:39:e5:23:e0:82:66:68:42:b9:
7b:bc:8c:f2:34:9e:c9:3d:ee:b1:70:4c:81:98:db:06:2e:1f:
88:b8:01:aa:d3:af:71:be:70:4a:7f:c9:7f:76:66:99:67:31:
c9:e4:68:12:a8:3e:88:64:6e:7d:c7:08:f4:a3:77:a9:42:15:
4d:4b:52:09:44:99:df:b3:02:e2:4d:cd:fb:85:bb:e6:cb:d5:
a3:a0:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:43 2025 by rpki-client