Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/g9u8xnB1i5k4mEfmREmSL55WEUM.roa
File: g9u8xnB1i5k4mEfmREmSL55WEUM.roa (raw, json)
Hash identifier: 5+gL/JzXnASOYU7Z4oqnSkrMW8g/XwkMGCy9Hk1RH44=
Subject key identifier: 83:DB:BC:C6:70:75:8B:99:38:98:47:E6:44:49:92:2F:9E:56:11:43
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79545917EC8451E71D93A01129C9C10
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/g9u8xnB1i5k4mEfmREmSL55WEUM.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34358
IP address blocks: 89.34.107.0/24 maxlen: 24
89.35.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 19:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:45:91:7e:c8:45:1e:71:d9:3a:01:12:9c:9c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83dbbcc670758b99389847e64449922f9e561143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:a0:9b:fd:a5:42:f3:5f:3c:4e:0a:32:c0:
9b:78:bb:55:75:e9:43:e8:61:05:f2:86:40:2e:8d:
87:7e:1b:0d:c5:3f:10:34:ff:68:fc:99:03:40:77:
78:80:a8:01:1c:7d:0d:38:51:56:43:03:79:67:4d:
50:45:6f:57:98:71:ef:17:18:bf:69:38:9d:80:91:
3f:ab:f5:59:ad:ce:a5:29:67:a6:9b:68:c4:52:70:
15:13:b3:bf:42:da:bc:8e:2b:fc:c3:79:e4:9c:c1:
89:24:cd:32:80:48:b9:a5:f1:1e:63:05:f7:cf:c1:
81:88:90:0a:64:e7:fa:fd:ca:79:3f:04:1d:93:32:
bc:f3:46:04:97:8c:8d:c2:aa:bf:dc:96:2b:04:83:
d1:4f:91:d4:a3:92:51:3e:bd:5e:9f:b2:f0:82:11:
3f:65:9d:fc:a0:7c:56:52:8d:bb:a7:2c:e4:e8:fe:
00:34:6a:6d:d6:6d:71:ce:3b:28:f0:a8:d0:88:f5:
70:e3:8d:9f:1c:bd:ea:bc:19:c4:a0:4d:1a:ba:dc:
b1:03:c3:68:40:3c:62:13:c3:0c:4e:75:4c:23:f1:
46:f2:67:bd:3c:2a:0d:8e:64:5c:ce:ef:c3:2a:54:
94:76:d7:10:79:25:90:4d:0b:fe:4d:52:78:58:53:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:BC:C6:70:75:8B:99:38:98:47:E6:44:49:92:2F:9E:56:11:43
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/g9u8xnB1i5k4mEfmREmSL55WEUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.107.0/24
89.35.204.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f6:17:bf:c4:9e:77:46:5c:49:6a:c3:e0:3d:c7:21:5b:f3:
cf:62:19:7e:bc:49:ae:97:1a:79:a2:20:a1:9e:0d:3e:87:17:
eb:78:d5:13:fb:6c:6d:6c:18:c7:80:9e:08:95:2c:8c:b7:3a:
bc:d7:26:8e:b5:95:82:3b:5e:40:60:e2:ce:0f:cd:18:1f:df:
f7:8b:3f:95:38:48:15:f7:f8:5b:71:04:d4:b9:22:fd:60:e0:
14:fa:df:cc:38:b7:97:64:ac:79:13:f7:6e:c8:e6:d0:3c:35:
e0:b0:67:9a:d9:13:cc:65:ea:ea:01:c8:c8:c2:0c:6c:c8:9c:
de:4c:2b:6a:e5:52:23:36:60:35:9d:5e:68:94:85:fa:8b:5a:
52:61:1a:d8:78:98:91:64:a1:e2:d0:91:c1:6b:82:20:41:7e:
09:66:18:68:3a:4a:b6:26:8f:7e:e9:eb:ad:e4:94:31:da:5b:
51:05:e0:23:af:a7:fd:c9:3f:1d:ae:f1:ff:15:d7:f4:9c:c9:
6e:34:0b:7d:e4:74:a8:3a:86:07:b8:34:db:19:1e:94:59:02:
29:e8:4b:5e:a6:a6:a2:46:24:f1:32:f4:52:30:61:eb:fe:04:
9a:09:4e:c2:ff:31:a8:ea:21:e5:15:69:c6:b8:ad:ab:d4:21:
7c:b7:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:14 2025 by rpki-client