Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/89zEz0HYplqE6YnWNn5Q8M8NBDE.roa
File: 89zEz0HYplqE6YnWNn5Q8M8NBDE.roa (raw, json)
Hash identifier: x9HI75zhu8ZGJ7jTpU2DUMgEHH8ti4sEayAfjEv/JXI=
Subject key identifier: F3:DC:C4:CF:41:D8:A6:5A:84:E9:89:D6:36:7E:50:F0:CF:0D:04:31
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194DB4913423128A196A8F1B9EAB2B45FA9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/89zEz0HYplqE6YnWNn5Q8M8NBDE.roa
Signing time: Thu 06 Feb 2025 12:43:06 +0000
ROA not before: Thu 06 Feb 2025 12:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215184
IP address blocks: 82.152.105.0/24 maxlen: 24
213.130.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 15:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:49:13:42:31:28:a1:96:a8:f1:b9:ea:b2:b4:5f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 6 12:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3dcc4cf41d8a65a84e989d6367e50f0cf0d0431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:90:33:16:48:2b:4f:17:65:c4:8d:3c:26:
94:03:c3:cf:29:d2:00:56:f8:6b:d2:b6:01:6e:c7:
14:39:0c:b7:10:49:60:9f:29:7e:87:fc:ab:9d:f7:
37:19:d5:b5:45:6e:85:b7:46:42:9e:de:76:12:41:
7c:14:f8:f7:a4:8d:9a:bc:eb:a2:aa:ce:e1:a0:93:
8d:f3:72:37:e2:66:e4:1d:cd:af:d7:52:02:5d:55:
70:2d:4b:1c:54:41:f9:86:3d:bb:20:fc:ac:23:64:
0f:d0:3f:ae:e3:c3:ca:bc:81:ca:f0:5b:05:4b:cd:
96:cb:e0:96:cc:62:e3:09:d8:f1:95:44:b4:e9:0e:
da:e2:26:f0:e8:a2:e8:ef:8f:01:99:09:50:77:da:
a0:f1:c0:99:d7:83:bc:b1:5f:9c:ca:c0:5e:25:2f:
8f:b2:4e:19:37:8d:f2:f9:28:43:23:5d:3c:20:96:
c1:cf:c4:ae:b5:1a:8b:3e:bf:60:14:50:2c:a2:b9:
c8:68:77:5f:7b:dd:a4:45:6c:6b:34:80:f2:3e:0f:
4b:e8:b4:9e:c5:6a:58:12:81:95:ca:f5:ab:4a:cc:
93:0d:7f:98:82:89:0d:79:1c:4b:74:12:c7:38:7e:
41:9f:d8:28:5b:32:04:94:e4:ed:f3:50:ee:a8:ce:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DC:C4:CF:41:D8:A6:5A:84:E9:89:D6:36:7E:50:F0:CF:0D:04:31
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/89zEz0HYplqE6YnWNn5Q8M8NBDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.105.0/24
213.130.140.0/22
Signature Algorithm: sha256WithRSAEncryption
38:17:d2:7d:5c:51:fc:ef:c9:7f:2f:0e:77:7e:75:32:2e:28:
cf:77:ec:fb:56:0e:3f:ee:95:ad:d8:67:a0:45:c1:89:5a:dd:
09:1c:d7:68:21:d5:bc:af:35:34:88:5b:01:4d:6e:e5:7c:96:
ec:59:f2:fc:52:e4:d6:96:82:eb:d8:67:87:a7:38:de:a9:ff:
1d:1e:05:1f:30:1c:ed:3a:05:f4:ee:64:cd:8e:7e:91:be:90:
0e:de:36:1c:57:36:3e:8c:6e:3c:fe:f7:a6:3c:aa:2b:4a:b0:
e9:03:a7:e7:e8:99:62:8a:a7:9f:19:e5:c7:7f:09:ca:ca:a3:
e2:d3:1b:da:72:62:d1:c5:9b:30:67:ff:da:81:46:e1:12:f9:
88:b0:ed:a6:41:ee:c6:07:bd:59:27:92:b1:26:d1:e5:ff:c4:
f4:ad:99:a3:f2:8b:24:c8:47:5a:66:88:b3:ca:98:62:95:47:
0c:d5:c3:b6:38:3e:8f:f8:0e:fd:3f:bc:58:80:a8:fd:9b:fc:
3f:ac:29:c2:2b:8b:3e:71:1c:f4:28:51:2c:b7:1b:9f:f0:74:
d4:bd:74:bd:59:f5:a9:83:83:8e:61:87:bd:86:f4:bf:d4:af:
d9:86:35:4d:49:a4:56:3b:e4:f6:63:85:64:99:62:b5:bc:9b:
0b:07:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:21 2025 by rpki-client