Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-G0ZCypvHHMpRAPmCSkpDnskCsw.roa
File: 1-G0ZCypvHHMpRAPmCSkpDnskCsw.roa (raw, json)
Hash identifier: Spq1VPYfTTkzSHd9d+TCiqlSdqTkopuRNSYLZpV+hWw=
Subject key identifier: F8:6D:19:0B:2A:6F:1C:73:29:44:03:E6:09:29:29:0E:7B:24:0A:CC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01905F4115639F7853FCAEF15C7EB13EFB4C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-G0ZCypvHHMpRAPmCSkpDnskCsw.roa
Signing time: Fri 28 Jun 2024 14:30:19 +0000
ROA not before: Fri 28 Jun 2024 14:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151597
IP address blocks: 89.213.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 16:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:41:15:63:9f:78:53:fc:ae:f1:5c:7e:b1:3e:fb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 28 14:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f86d190b2a6f1c73294403e60929290e7b240acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:b9:7b:b3:bd:42:a5:c6:03:d4:e5:e1:69:
bd:ec:2f:d6:f3:8f:dc:bd:8b:3c:10:29:fa:f8:ad:
2b:fa:04:0b:5d:dd:6d:59:41:c7:93:0c:b5:dc:f7:
8f:67:d8:c5:7a:b9:de:c6:ce:01:c0:a5:7e:7d:37:
4c:ca:c7:45:67:43:84:5e:1c:9c:61:dc:dc:30:8e:
8c:b6:1b:82:98:a6:0a:c9:01:fa:f0:1f:c6:3c:74:
8a:73:b1:fa:9e:04:29:1f:41:ed:ea:c6:f6:f2:0f:
09:01:3d:4e:a0:18:0d:73:42:ba:68:8c:53:5e:d4:
7b:10:e4:dd:e1:0f:30:c7:34:79:cf:ec:06:7e:79:
4c:c4:5b:ab:77:42:10:f2:29:29:94:1f:10:5f:a1:
0b:3c:77:72:b4:6a:4c:93:e3:bd:04:bb:f4:1b:e2:
89:56:0e:bb:c4:19:52:e3:a4:a2:ee:8f:c7:c6:67:
72:0f:6c:a0:a9:07:80:82:79:bc:2d:51:8a:8f:1f:
c6:b7:5d:a1:2c:31:8f:90:e6:e8:5c:ab:9e:58:90:
c1:29:70:11:3a:3b:1b:7e:01:77:ce:9d:db:30:96:
26:8c:d1:05:39:db:5f:8f:9a:b9:39:0d:f4:a0:34:
b7:d9:76:9c:2f:0b:f0:26:b6:13:b4:a1:42:bc:c5:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:19:0B:2A:6F:1C:73:29:44:03:E6:09:29:29:0E:7B:24:0A:CC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-G0ZCypvHHMpRAPmCSkpDnskCsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4e:d4:b6:03:0e:c4:41:09:97:20:fb:5b:f2:b0:0b:d9:04:
19:03:dd:fe:b5:03:86:63:46:6a:8e:e4:96:b5:ee:cb:11:e2:
24:cc:d7:f1:14:33:4e:0c:49:bf:8a:25:76:09:e2:79:ee:7e:
9b:41:2d:94:30:b9:70:11:91:0a:3d:78:5c:e5:e9:ed:84:84:
fc:3e:30:ea:32:cf:ba:8d:a9:7c:d6:c7:32:41:c9:f8:e9:34:
96:3c:ed:e7:0e:35:e8:7b:60:67:61:7d:b3:f1:ab:f9:b3:1a:
96:50:00:5e:d5:d1:71:8f:a7:16:f6:f4:3c:11:97:d8:1b:6d:
95:75:4a:b3:42:56:e7:d5:18:17:3f:54:1d:1e:f3:ca:51:07:
09:45:14:52:be:4c:96:19:0f:77:0d:d1:69:fa:42:9f:9f:bc:
16:62:a4:a1:e9:9c:c8:38:ae:8c:0d:da:23:69:6d:b5:08:75:
02:62:f9:c0:8a:8e:1e:42:8c:c0:59:2c:e5:c7:06:6f:be:e5:
d1:a8:2d:82:dc:56:38:e4:ce:90:29:bc:67:f4:99:5a:07:0a:
62:05:af:c1:c3:80:23:fc:b5:7e:b7:a1:ee:90:79:9d:60:64:
05:1a:92:53:2f:a3:e4:88:77:ac:92:26:4f:dc:c7:30:a1:a5:
dd:8a:5d:fc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBfQRVjn3hT/K7xXH6xPvtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNjI4MTQzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODZkMTkwYjJhNmYxYzczMjk0NDAzZTYwOTI5MjkwZTdiMjQwYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25+5e7O9QqXGA9Tl4Wm97C/W84/c
vYs8ECn6+K0r+gQLXd1tWUHHkwy13PePZ9jFernexs4BwKV+fTdMysdFZ0OEXhyc
YdzcMI6MthuCmKYKyQH68B/GPHSKc7H6ngQpH0Ht6sb28g8JAT1OoBgNc0K6aIxT
XtR7EOTd4Q8wxzR5z+wGfnlMxFurd0IQ8ikplB8QX6ELPHdytGpMk+O9BLv0G+KJ
Vg67xBlS46Si7o/HxmdyD2ygqQeAgnm8LVGKjx/Gt12hLDGPkOboXKueWJDBKXAR
OjsbfgF3zp3bMJYmjNEFOdtfj5q5OQ30oDS32XacLwvwJrYTtKFCvMXy5wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhtGQsqbxxzKUQD5gkpKQ57JArMMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMS1HMFpDeXB2SEhNcFJBUG1DU2twRG5za0Nzdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGEvNDlkYzAwLTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3
Yy8xL1A5TU5pbjRTX0h2Mkxnd1NIbnpDSnQ2bE81cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFnVMjAN
BgkqhkiG9w0BAQsFAAOCAQEAP07UtgMOxEEJlyD7W/KwC9kEGQPd/rUDhmNGao7k
lrXuyxHiJMzX8RQzTgxJv4oldgniee5+m0EtlDC5cBGRCj14XOXp7YSE/D4w6jLP
uo2pfNbHMkHJ+Ok0ljzt5w416HtgZ2F9s/Gr+bMallAAXtXRcY+nFvb0PBGX2Btt
lXVKs0JW59UYFz9UHR7zylEHCUUUUr5MlhkPdw3RafpCn5+8FmKkoemcyDiujA3a
I2lttQh1AmL5wIqOHkKMwFks5ccGb77l0agtgtxWOOTOkCm8Z/SZWgcKYgWvwcOA
I/y1freh7pB5nWBkBRqSUy+j5Ih3rJImT9zHMKGl3Ypd/A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:12 2025 by rpki-client