Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/DyWx6fnnjYUkrSWlylTt0GQe7oc.roa
File: DyWx6fnnjYUkrSWlylTt0GQe7oc.roa (raw, json)
Hash identifier: mrZMC5yn6HP2pfYaRI3UXzgu3el0WX6o/tbMuAD4z+o=
Subject key identifier: 0F:25:B1:E9:F9:E7:8D:85:24:AD:25:A5:CA:54:ED:D0:64:1E:EE:87
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 018CC348902E2549836AB7EF5139DB774F53
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/DyWx6fnnjYUkrSWlylTt0GQe7oc.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39412
IP address blocks: 95.131.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:90:2e:25:49:83:6a:b7:ef:51:39:db:77:4f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f25b1e9f9e78d8524ad25a5ca54edd0641eee87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:66:de:b1:79:80:08:99:09:b4:29:ee:b0:
43:7a:7d:bb:bd:4d:9b:3a:fc:a5:35:0c:20:bb:93:
d8:1f:3b:d6:e0:c3:7f:36:f1:3b:4c:54:ce:06:cf:
e4:7b:f1:73:58:d3:69:a9:00:d6:50:6f:35:42:7e:
96:13:0e:f1:e0:14:a4:11:18:d7:45:da:c4:bf:56:
c6:1f:c2:64:63:3e:e0:bb:c6:21:f6:c5:2c:0a:07:
cf:a4:5b:6f:e3:30:77:45:d2:16:9e:6a:df:11:ce:
81:44:28:9d:56:f4:a1:64:42:04:43:7f:56:6f:d6:
5f:db:26:e8:d7:d1:52:b1:07:89:6d:65:40:f1:c5:
d2:91:64:f0:77:0d:c2:b5:44:8b:80:5a:e6:6d:7c:
38:45:35:5b:eb:a6:e4:c3:d8:34:1f:c2:c6:0f:0b:
76:00:ea:6a:6d:8d:5a:b1:41:6a:ea:ed:03:ee:0c:
6f:60:6f:98:8a:3e:7b:75:44:39:07:e8:90:43:a0:
5b:19:79:28:11:10:87:23:ca:bc:1c:9a:1b:dc:e5:
2f:47:94:df:89:a6:c0:8a:76:cd:73:d6:15:a9:81:
2d:30:74:0d:b5:f3:95:f0:54:f5:0d:c9:87:8f:65:
d6:41:c0:15:3c:ae:3e:fa:45:ae:54:0f:52:4a:22:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:B1:E9:F9:E7:8D:85:24:AD:25:A5:CA:54:ED:D0:64:1E:EE:87
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/DyWx6fnnjYUkrSWlylTt0GQe7oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.39.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b4:a4:c8:29:a8:33:c4:23:70:b9:f6:c9:b2:d2:9c:ff:18:
06:60:b2:0b:dd:47:90:14:ac:1f:29:d6:58:9f:8e:07:62:2b:
59:27:ba:93:20:67:80:d3:8c:a8:c6:12:66:e4:df:f6:74:33:
19:27:4f:b0:97:a4:3f:ac:1d:3b:c9:e7:e4:34:cc:28:12:9a:
e5:4a:0e:61:b3:4e:e0:d1:ca:e2:4c:9c:99:e4:cf:85:e0:c5:
6f:fb:7e:ec:ce:75:ca:c9:b2:7d:3e:25:f1:ff:e2:77:c8:59:
cb:28:e0:f1:16:e1:79:cb:c9:a7:da:8e:70:26:f4:51:85:f7:
62:dc:d3:28:bb:1b:55:ec:cd:4e:33:2f:53:0e:95:bb:d9:f2:
24:6e:09:59:a3:13:7f:81:8e:26:81:4b:a7:a4:61:3d:20:65:
64:9e:04:42:fb:35:89:61:c9:2b:88:61:33:9c:6b:52:1d:c1:
19:cb:72:e4:d2:fb:45:fa:06:98:12:e1:83:16:1f:db:0d:4e:
ad:cd:ec:32:b0:48:2e:46:b4:23:c5:8a:74:79:3c:84:c8:06:
a0:7a:14:41:2c:1b:0a:63:54:6b:10:a2:e0:be:9a:81:64:18:
57:a7:ec:b1:7c:d4:fd:61:d5:e3:2e:5c:36:c8:c6:0a:75:96:
52:96:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:16 2025 by rpki-client