Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DA3eaxYBUiWtZolSkbbI1OlASp8.roa
File: DA3eaxYBUiWtZolSkbbI1OlASp8.roa (raw, json)
Hash identifier: q7ayPYPLVUmmaikjE+jzXSwWdpJ/ZoeoJKK8ADmCwFA=
Subject key identifier: 0C:0D:DE:6B:16:01:52:25:AD:66:89:52:91:B6:C8:D4:E9:40:4A:9F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F2E9CDC369738CD48CFB3EB76ACE9BD07
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DA3eaxYBUiWtZolSkbbI1OlASp8.roa
Signing time: Tue 30 Apr 2024 10:46:22 +0000
ROA not before: Tue 30 Apr 2024 10:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63801
IP address blocks: 89.213.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 14:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:9c:dc:36:97:38:cd:48:cf:b3:eb:76:ac:e9:bd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 10:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c0dde6b16015225ad66895291b6c8d4e9404a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:a1:c5:e2:30:47:4f:e6:8a:f4:41:dc:5e:
d9:b3:bd:73:00:be:f4:61:2f:e3:36:93:21:cd:bc:
ca:aa:ae:5b:ff:ab:83:73:2e:ff:ed:6e:d8:07:d6:
06:5e:ed:4a:e6:c4:17:88:68:3e:b4:e2:c1:a8:9f:
f1:86:bf:9a:fa:bb:95:70:68:de:be:89:e7:2b:d2:
dd:f9:d7:9f:fc:e6:20:fa:ba:5a:88:ef:e8:c1:a9:
4f:0b:ce:18:3a:ea:ce:39:6a:a1:ff:62:d8:6e:0d:
a0:13:22:d3:d4:97:83:f7:08:95:e5:bc:7f:2d:ae:
20:5b:65:91:06:59:64:dd:3e:a3:4e:c4:83:f7:b2:
03:cf:c8:05:6e:86:b5:79:7e:ed:90:d2:7a:b2:0c:
26:09:f5:f9:8b:f5:cb:b9:2c:8a:55:7b:ba:01:4c:
6e:91:53:e0:2c:33:c4:bd:bb:ef:4b:32:01:b7:da:
da:cd:c9:92:3a:85:46:33:8d:2f:f4:4a:5c:d6:20:
d1:0f:dd:0b:3f:0e:51:ca:1b:80:a0:c5:5e:b9:30:
1c:b4:37:d0:a8:c9:bc:6b:b1:c0:61:94:5e:86:1f:
5d:85:e4:a5:3a:d5:0e:7c:90:28:ca:78:e5:65:9d:
a4:24:ca:fd:d1:1d:b2:87:df:38:d2:0c:d4:8d:17:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0D:DE:6B:16:01:52:25:AD:66:89:52:91:B6:C8:D4:E9:40:4A:9F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DA3eaxYBUiWtZolSkbbI1OlASp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:22:d9:5b:93:8a:e2:d0:5e:76:1d:c2:b5:28:dd:eb:81:5a:
92:03:20:57:e9:7b:eb:e4:b6:1b:65:19:24:cc:10:67:ef:0d:
0a:3c:68:37:79:b8:bf:8c:43:a9:e2:45:77:29:1c:d2:c2:9e:
18:ee:1e:32:3f:28:96:4d:3d:74:9a:bf:e6:26:27:cc:f2:15:
6c:e8:39:8c:9c:39:08:72:8f:fb:b5:10:f3:19:bd:0a:8d:7a:
76:20:a1:04:91:bd:6d:40:33:ac:89:08:bc:83:eb:0a:28:e4:
7b:ab:75:47:3a:e3:f0:12:73:df:32:ca:79:5b:6e:99:85:8b:
db:9a:f5:51:ea:d5:be:63:ad:70:a1:60:34:7d:c5:56:77:8b:
c5:a3:03:e3:8e:6e:2f:e8:15:14:a4:5a:7d:81:a2:af:0b:86:
bb:33:04:5d:70:62:1e:16:07:cc:4a:74:7c:5c:a4:a2:62:f2:
ca:7c:b4:9b:e7:02:fc:cb:0e:e8:02:ef:fd:77:6f:f0:a0:ff:
36:0c:ba:4a:d3:c0:10:f0:26:85:14:c1:95:73:78:c7:4d:63:
26:c0:a0:f7:c0:5b:d9:6f:c7:4a:12:a5:65:5c:b9:c4:41:e7:
60:f5:54:2b:e0:70:03:c1:c2:c7:d2:e7:5d:b6:45:da:2c:10:
95:05:27:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8unNw2lzjNSM+z63as6b0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDMwMTA0NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzBkZGU2YjE2MDE1MjI1YWQ2Njg5NTI5MWI2YzhkNGU5NDA0YTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFKhxeIwR0/mivRB3F7Zs71zAL70
YS/jNpMhzbzKqq5b/6uDcy7/7W7YB9YGXu1K5sQXiGg+tOLBqJ/xhr+a+ruVcGje
vonnK9Ld+def/OYg+rpaiO/owalPC84YOurOOWqh/2LYbg2gEyLT1JeD9wiV5bx/
La4gW2WRBllk3T6jTsSD97IDz8gFboa1eX7tkNJ6sgwmCfX5i/XLuSyKVXu6AUxu
kVPgLDPEvbvvSzIBt9razcmSOoVGM40v9Epc1iDRD90LPw5RyhuAoMVeuTActDfQ
qMm8a7HAYZRehh9dheSlOtUOfJAoynjlZZ2kJMr90R2yh9840gzUjRfzmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwN3msWAVIlrWaJUpG2yNTpQEqfMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvREEzZWF4WUJVaVd0Wm9sU2tiYkkxT2xBU3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdXfMA0G
CSqGSIb3DQEBCwUAA4IBAQCLItlbk4ri0F52HcK1KN3rgVqSAyBX6Xvr5LYbZRkk
zBBn7w0KPGg3ebi/jEOp4kV3KRzSwp4Y7h4yPyiWTT10mr/mJifM8hVs6DmMnDkI
co/7tRDzGb0KjXp2IKEEkb1tQDOsiQi8g+sKKOR7q3VHOuPwEnPfMsp5W26ZhYvb
mvVR6tW+Y61woWA0fcVWd4vFowPjjm4v6BUUpFp9gaKvC4a7MwRdcGIeFgfMSnR8
XKSiYvLKfLSb5wL8yw7oAu/9d2/woP82DLpK08AQ8CaFFMGVc3jHTWMmwKD3wFvZ
b8dKEqVlXLnEQedg9VQr4HADwcLH0uddtkXaLBCVBScU
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:05 2025 by rpki-client