Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8u3otDOxC5C-xpjhZRkcmbpsJyw.roa
File: 8u3otDOxC5C-xpjhZRkcmbpsJyw.roa (raw, json)
Hash identifier: C7smEmF6jN88sNkqzS05mtURFXKWv0HW0JGIlfonFNU=
Subject key identifier: F2:ED:E8:B4:33:B1:0B:90:BE:C6:98:E1:65:19:1C:99:BA:6C:27:2C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190E419F554B48B2E151425832E348A94E3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8u3otDOxC5C-xpjhZRkcmbpsJyw.roa
Signing time: Wed 24 Jul 2024 09:37:04 +0000
ROA not before: Wed 24 Jul 2024 09:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.213.50.0/24 maxlen: 24
213.210.39.0/24 maxlen: 24
213.218.234.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:19:f5:54:b4:8b:2e:15:14:25:83:2e:34:8a:94:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 24 09:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2ede8b433b10b90bec698e165191c99ba6c272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:88:33:69:71:a2:82:fa:d8:ba:2c:4c:10:
5c:c8:f7:91:d2:b4:ca:0e:57:ba:6a:2f:b0:83:58:
3b:48:d0:4f:ed:75:0a:2f:fe:77:7b:93:8f:c7:19:
66:cb:88:75:c2:24:17:e2:d9:ca:5f:80:04:f8:1b:
90:25:d4:2b:17:e3:c6:e7:a2:c9:bb:27:c2:bd:50:
61:2d:20:b0:bb:f0:64:83:81:e7:42:45:59:70:d8:
3f:83:15:1a:f9:6b:91:98:00:27:47:31:1f:1b:38:
0f:b8:b9:d1:fc:87:3d:96:cc:58:65:bf:ed:13:28:
4b:e8:44:bc:d9:4d:07:a5:08:c9:bb:05:51:c9:aa:
45:c7:4e:58:ba:69:84:cb:bb:51:bc:0b:ea:a6:86:
b4:43:c6:27:96:68:87:a8:9b:5f:14:4b:d2:fc:ac:
7c:83:45:25:1b:9d:69:1f:1d:15:88:f1:c9:6c:04:
30:bd:3c:1a:bb:3d:ec:f4:dc:95:96:75:f1:18:f4:
71:0e:63:98:4a:0f:e3:cf:f3:0c:0e:c2:77:45:aa:
2e:43:5c:e6:f9:7e:42:82:81:b9:83:77:45:33:06:
fd:7c:82:46:ab:66:b4:bc:76:a1:f7:78:5e:e5:d1:
7f:19:61:cf:3a:09:0f:84:79:4d:df:f2:c4:e3:8e:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:ED:E8:B4:33:B1:0B:90:BE:C6:98:E1:65:19:1C:99:BA:6C:27:2C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8u3otDOxC5C-xpjhZRkcmbpsJyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.50.0/24
213.210.39.0/24
213.218.234.0/24
217.145.68.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6c:45:79:c5:8b:86:41:ee:ee:ba:d1:c0:2c:1f:96:c7:40:
ce:be:c9:f6:fd:e1:01:2f:77:1d:61:f8:74:4e:db:d4:47:6e:
8e:19:8e:21:c2:ab:54:90:5a:0f:1e:7b:e6:95:28:e3:bb:ff:
8b:bf:7c:67:ae:27:b2:73:95:cf:c9:b1:38:e6:b9:84:e5:4c:
98:2d:25:00:c1:b8:da:f6:5f:91:44:a2:fd:3a:2f:89:24:06:
a0:0a:03:b8:f3:d3:be:02:db:2a:ba:11:48:8c:c9:08:3c:0b:
94:32:93:af:58:c0:cf:64:16:c2:65:33:2b:db:50:6d:40:c2:
fb:ae:23:14:a4:4a:f9:8d:8a:bd:3c:dd:72:5f:20:40:a0:fa:
37:b6:54:61:b0:f1:1e:38:d9:06:e2:44:4c:7d:1c:66:15:77:
15:60:d9:3e:c0:c4:16:91:4f:88:5a:8b:03:64:b0:bf:7f:22:
d4:1f:b9:ed:e0:73:a4:f0:83:78:0e:bd:81:23:f3:be:06:f7:
2f:e4:c3:3c:9b:c9:47:6b:67:58:69:ef:01:2e:36:6d:17:7b:
81:b3:96:fd:4a:f1:28:f5:3c:08:df:31:e0:e8:86:e8:14:41:
42:fb:6f:68:55:d0:7a:32:2c:b4:ef:78:6c:1f:49:4f:c3:34:
c3:e8:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:53 2025 by rpki-client