Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2_tHIvynIN4ol_Kpsd-8p93orlo.roa
File: 2_tHIvynIN4ol_Kpsd-8p93orlo.roa (raw, json)
Hash identifier: JgUv5SJqmCjRNxUXPL4Japu0h+PJO67ctA4ue+Nfm6c=
Subject key identifier: DB:FB:47:22:FC:A7:20:DE:28:97:F2:A9:B1:DF:BC:A7:DD:E8:AE:5A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018ECC1896142B4B1762BB58B00B6F85A9DD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2_tHIvynIN4ol_Kpsd-8p93orlo.roa
Signing time: Thu 11 Apr 2024 07:39:07 +0000
ROA not before: Thu 11 Apr 2024 07:39:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215142
IP address blocks: 89.213.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 12:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:18:96:14:2b:4b:17:62:bb:58:b0:0b:6f:85:a9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 11 07:39:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbfb4722fca720de2897f2a9b1dfbca7dde8ae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:cb:62:30:2e:d6:e4:31:92:f5:e2:35:31:
80:97:40:a8:c5:88:12:10:d4:85:86:46:31:0a:17:
c7:be:ff:df:14:f3:65:b0:08:02:05:0c:cd:1c:32:
f1:99:8f:7a:e4:72:3d:64:63:85:f0:76:0c:91:af:
f0:ac:88:6c:2c:fc:ce:39:08:b6:f4:3b:a1:67:03:
dc:ef:14:96:6c:67:95:eb:1f:80:22:da:fe:e9:b9:
b9:d8:dd:f0:90:ba:de:d3:b5:00:1a:f6:0a:ad:fb:
7c:fa:61:ba:72:93:3c:e8:d2:cd:6c:f3:86:c7:13:
9d:9d:e1:eb:6d:40:69:f5:5b:f5:86:76:c2:85:1a:
55:55:91:a7:38:88:86:b0:ef:56:c7:9f:20:26:b1:
56:f0:a4:32:ae:1c:c7:53:42:3e:b0:77:bb:1e:f2:
8c:94:3e:94:15:45:12:7b:71:fa:12:2d:4f:90:b6:
ff:85:fd:2a:a9:d5:9d:7c:ec:ff:ae:10:3d:6a:7b:
1d:91:e4:de:b0:ee:82:53:8b:e1:a9:72:83:25:17:
0d:e4:bb:ae:23:6e:29:bc:72:56:73:e3:6e:76:46:
4a:6c:82:cb:55:5c:87:ed:a5:6c:fd:d2:f0:26:33:
9a:8d:e5:7a:af:6f:6b:ea:6b:b8:ff:97:c4:59:13:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FB:47:22:FC:A7:20:DE:28:97:F2:A9:B1:DF:BC:A7:DD:E8:AE:5A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2_tHIvynIN4ol_Kpsd-8p93orlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.144.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4b:7c:09:d9:5c:99:5d:ea:2c:a5:9e:91:fd:04:62:69:47:
ca:94:d4:d7:c6:cc:12:5c:e2:bd:46:53:65:c6:1b:47:7f:cc:
48:10:c6:e5:95:37:a9:e1:2a:48:b9:4c:ef:0f:b9:10:30:53:
c5:72:21:dd:6c:40:f0:c7:e2:5e:e1:b5:e5:80:5d:01:f1:7d:
62:03:53:32:62:6a:06:37:51:20:3b:bd:36:48:7c:c6:0c:16:
0f:2c:7c:59:f8:9a:84:7c:4a:08:90:f6:1a:70:c2:56:7b:d7:
ec:75:4b:b1:46:ec:39:f5:66:7a:3c:39:a2:b2:43:9e:c2:ac:
fc:8c:32:a4:b3:fc:9b:97:f1:02:89:b9:61:02:e6:32:61:b5:
d3:08:7f:f8:0c:c1:ee:37:41:d8:ed:a0:24:f2:cf:a4:7e:31:
cf:00:dd:9d:e2:ef:6a:7e:b9:55:84:6a:eb:27:c6:1c:9a:62:
eb:3e:70:a8:3e:8b:14:82:a5:17:d9:41:a5:04:4c:e9:41:9a:
8e:0f:ff:88:79:e5:62:9e:64:19:9a:ca:26:81:9a:95:65:ee:
d6:42:f3:06:29:94:b5:f7:19:ec:49:90:d1:dc:da:f2:a2:cd:
37:53:35:b4:da:87:fa:33:af:3d:f4:aa:2f:32:48:80:18:1e:
e5:f4:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:10:12 2025 by rpki-client