Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/h4Iyb5JsFyKwnvLyfVjppdcWPHk.roa
File: h4Iyb5JsFyKwnvLyfVjppdcWPHk.roa (raw, json)
Hash identifier: RffS+cj2Ph0oTMZFJzCWE8rfVrtZRfQW+dVndYgpIcY=
Subject key identifier: 87:82:32:6F:92:6C:17:22:B0:9E:F2:F2:7D:58:E9:A5:D7:16:3C:79
Certificate issuer: /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial: 018CC86F33CE84B6CB399E33E563FE8112DD
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/h4Iyb5JsFyKwnvLyfVjppdcWPHk.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206165
IP address blocks: 185.1.89.0/24 maxlen: 24
2001:7f8:b1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:33:ce:84:b6:cb:39:9e:33:e5:63:fe:81:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02f648de95b88479364346ed01e78769577922
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8782326f926c1722b09ef2f27d58e9a5d7163c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:e9:75:bc:27:99:f4:82:e6:f7:ba:26:9e:
af:b5:70:ab:0f:5c:07:c5:a9:55:fc:54:7a:2f:6f:
63:7b:e2:b4:ad:d8:46:e6:cc:07:b7:33:b0:7d:6f:
df:2a:df:73:90:da:fa:da:8d:dd:c5:b7:b4:fc:9d:
4d:81:b3:5e:1a:4f:37:54:05:20:31:91:26:64:17:
20:ba:40:e6:36:74:17:25:21:ba:6d:a5:af:06:34:
01:fb:f8:04:3f:cb:aa:1f:19:e9:c3:f9:20:00:cf:
2b:43:82:05:aa:75:95:b7:79:1e:58:e7:78:c8:b6:
25:05:45:4b:80:71:01:28:1b:96:a4:6c:29:cd:e9:
09:71:87:b9:5b:5e:ee:71:9a:fd:3b:2e:d8:11:49:
27:6c:64:98:24:af:6a:73:13:36:ee:7f:3e:93:e5:
cc:1b:fe:d4:33:e4:17:77:53:d2:cb:06:87:b5:ea:
f2:90:9f:cc:f4:8e:32:30:9d:95:53:6b:08:44:f5:
a3:be:9b:2e:f4:9a:86:b8:9d:4f:e2:f1:01:81:4d:
90:f7:d4:9a:72:68:66:79:d4:0f:7c:19:b6:46:09:
36:16:40:af:58:61:a0:d0:96:58:3d:b3:19:36:f2:
1e:55:1b:e5:f0:de:09:93:2c:07:bd:ec:75:99:fc:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:82:32:6F:92:6C:17:22:B0:9E:F2:F2:7D:58:E9:A5:D7:16:3C:79
X509v3 Authority Key Identifier:
keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/h4Iyb5JsFyKwnvLyfVjppdcWPHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.89.0/24
IPv6:
2001:7f8:b1::/48
Signature Algorithm: sha256WithRSAEncryption
4f:bd:6e:57:74:1c:0a:0c:2e:4e:09:46:c6:cb:96:ca:6c:f3:
1a:15:fa:31:25:ed:76:48:c9:2e:c8:7a:3d:14:57:0f:4e:bf:
f2:86:ad:28:db:ec:37:32:91:56:54:2f:20:c6:0e:59:34:32:
18:46:25:44:9b:44:1c:2b:a7:9c:60:6a:6c:34:e5:37:25:ba:
c8:08:a4:56:ae:d3:09:25:33:39:7c:08:3b:0d:cf:b6:bf:71:
df:ff:f8:f3:fa:e1:76:64:5c:05:ef:0e:d2:74:33:46:69:5c:
a3:e8:fd:f8:c7:b2:8f:b5:ba:87:74:12:1c:e2:a7:bc:d8:44:
d9:77:45:3a:49:76:49:f1:1a:1e:b6:84:a1:6c:90:49:2b:e1:
c6:87:8f:e0:c3:7c:14:94:79:8e:99:69:40:cb:aa:3c:99:7e:
34:f7:3b:d4:8d:aa:9e:39:2b:95:31:ec:ad:25:82:41:4e:83:
80:59:2d:37:e8:67:2c:42:ae:3b:d5:80:74:97:4d:96:b9:1e:
92:e9:2a:2f:34:d4:7d:89:af:ed:58:7b:35:b9:b6:6e:19:32:
d7:a2:65:da:d7:b3:5c:b6:91:ad:e3:29:82:3f:0c:80:80:3e:
55:24:23:f7:d7:d1:25:31:02:f1:51:8d:9c:22:89:94:29:c2:
ca:98:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:03 2025 by rpki-client