Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6xMaQlBB-_IsmCHDXwCWKyquLWs.roa
File: 6xMaQlBB-_IsmCHDXwCWKyquLWs.roa (raw, json)
Hash identifier: Bil410SBeE9s3bSd5/j51OEI6WrL2ZnF7qpg5tCvEMw=
Subject key identifier: EB:13:1A:42:50:41:FB:F2:2C:98:21:C3:5F:00:96:2B:2A:AE:2D:6B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191B35F7526EA5C9CF8D1F45A1451B761CC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6xMaQlBB-_IsmCHDXwCWKyquLWs.roa
Signing time: Mon 02 Sep 2024 15:34:23 +0000
ROA not before: Mon 02 Sep 2024 15:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215269
IP address blocks: 89.213.44.0/24 maxlen: 24
89.213.49.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
109.176.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 17 Sep 2024 12:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:5f:75:26:ea:5c:9c:f8:d1:f4:5a:14:51:b7:61:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 2 15:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb131a425041fbf22c9821c35f00962b2aae2d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:66:91:72:9b:ac:20:b4:4c:b5:b3:fa:37:
fc:25:a3:7e:5f:31:df:0e:8d:a9:37:0a:7b:19:30:
f1:29:ca:52:c2:d5:31:f1:21:48:1d:ea:60:24:36:
6f:4e:72:27:1c:a0:3e:7a:88:66:f4:d8:b2:dd:6f:
71:32:e9:01:7f:5f:71:04:dd:36:61:c1:87:a9:5c:
1b:24:ae:7a:b6:f9:e1:90:22:91:cb:7d:48:4a:0c:
65:af:49:73:4c:6e:e9:3d:01:4b:43:39:f4:c6:74:
34:4f:22:0a:a0:ef:59:3f:bf:81:ed:ae:4b:90:dc:
b7:d2:4d:0a:0d:64:8d:e5:0a:fb:d6:a0:97:b5:d3:
17:ea:dd:93:0a:e4:88:d5:f6:b1:dc:de:3b:d6:b2:
d8:e0:e3:c3:33:40:92:a8:1d:fc:40:ff:8e:01:34:
67:d3:a7:ee:c1:61:c0:e3:c7:21:87:9e:4a:dd:91:
f4:0f:d7:74:61:94:72:67:df:ad:2c:4e:fe:f0:c8:
4b:72:b0:46:b9:03:80:24:6e:f8:80:98:af:02:4c:
10:d4:83:ea:0b:89:b5:6b:57:91:f2:56:10:57:03:
9c:e3:83:e4:7c:de:8e:f8:98:ee:97:c9:ed:8f:c2:
e2:41:61:f7:35:82:1e:5a:27:84:38:55:ec:d6:28:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:1A:42:50:41:FB:F2:2C:98:21:C3:5F:00:96:2B:2A:AE:2D:6B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6xMaQlBB-_IsmCHDXwCWKyquLWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.44.0/24
89.213.49.0/24
89.213.51.0/24
109.176.254.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:9c:f7:e9:90:f3:cf:cb:1c:89:6e:7a:81:4f:5b:95:ba:d3:
3f:f6:02:e6:9c:fd:9e:cf:28:14:12:40:eb:c7:5e:40:5b:98:
b1:d8:15:54:cf:df:8d:da:a8:39:11:3a:84:8e:83:6d:3d:0c:
05:dc:94:e3:49:6f:21:9c:5e:cc:02:70:0c:bd:e0:c0:14:2a:
bd:94:49:dd:71:a4:63:04:37:ba:30:73:1f:ef:8c:84:f4:a0:
8c:0d:2c:a8:39:f6:88:0a:3b:40:e2:07:de:a5:e7:e5:f8:81:
07:52:e2:f3:bb:30:ee:2e:9b:ee:34:67:a0:85:06:48:88:e6:
ff:be:78:f5:87:2f:dc:c0:2c:0b:0f:ca:90:37:a4:e8:63:4f:
7c:a5:7e:6b:60:56:57:df:7b:ec:90:cd:a8:d8:8e:99:6f:65:
e8:b3:7a:23:3a:11:6a:70:18:15:31:68:f6:40:0a:6f:81:cd:
63:04:d9:7e:34:19:1b:99:59:a1:a7:01:cf:70:e0:f4:00:24:
0d:be:ea:f5:0b:70:d8:65:71:04:f7:6a:d4:1e:42:f2:6b:2d:
0f:ff:cc:08:d9:43:8a:13:2b:75:f8:ec:2e:ad:65:d2:f9:f2:
c7:ed:11:df:ac:49:1b:dd:3c:aa:c4:92:1c:7c:e5:1a:58:81:
f6:4a:d7:a2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZGzX3Um6lyc+NH0WhRRt2HMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwOTAyMTUzNDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjEzMWE0MjUwNDFmYmYyMmM5ODIxYzM1ZjAwOTYyYjJhYWUyZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuZmkXKbrCC0TLWz+jf8JaN+XzHf
Do2pNwp7GTDxKcpSwtUx8SFIHepgJDZvTnInHKA+eohm9Niy3W9xMukBf19xBN02
YcGHqVwbJK56tvnhkCKRy31ISgxlr0lzTG7pPQFLQzn0xnQ0TyIKoO9ZP7+B7a5L
kNy30k0KDWSN5Qr71qCXtdMX6t2TCuSI1fax3N471rLY4OPDM0CSqB38QP+OATRn
06fuwWHA48chh55K3ZH0D9d0YZRyZ9+tLE7+8MhLcrBGuQOAJG74gJivAkwQ1IPq
C4m1a1eR8lYQVwOc44PkfN6O+Jjul8ntj8LiQWH3NYIeWieEOFXs1ii9KQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOsTGkJQQfvyLJghw18Alisqri1rMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNnhNYVFsQkItX0lzbUNIRFh3Q1dLeXF1TFdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWdUsAwQA
WdUxAwQAWdUzAwQBbbD+MA0GCSqGSIb3DQEBCwUAA4IBAQCPnPfpkPPPyxyJbnqB
T1uVutM/9gLmnP2ezygUEkDrx15AW5ix2BVUz9+N2qg5ETqEjoNtPQwF3JTjSW8h
nF7MAnAMveDAFCq9lEndcaRjBDe6MHMf74yE9KCMDSyoOfaICjtA4gfepefl+IEH
UuLzuzDuLpvuNGeghQZIiOb/vnj1hy/cwCwLD8qQN6ToY098pX5rYFZX33vskM2o
2I6Zb2Xos3ojOhFqcBgVMWj2QApvgc1jBNl+NBkbmVmhpwHPcOD0ACQNvur1C3DY
ZXEE92rUHkLyay0P/8wI2UOKEyt1+OwurWXS+fLH7RHfrEkb3TyqxJIcfOUaWIH2
Stei
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:02 2025 by rpki-client