Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EJzT2lj4f7lcs5oxynP2uvUSHN0.roa
File: EJzT2lj4f7lcs5oxynP2uvUSHN0.roa (raw, json)
Hash identifier: dmEHo/hBqYaHT3UQO34TQ17lzzi2Dui5/ZCaShVeLqs=
Subject key identifier: 10:9C:D3:DA:58:F8:7F:B9:5C:B3:9A:31:CA:73:F6:BA:F5:12:1C:DD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193699767E80BBA485372999395197D9211
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EJzT2lj4f7lcs5oxynP2uvUSHN0.roa
Signing time: Tue 26 Nov 2024 17:49:10 +0000
ROA not before: Tue 26 Nov 2024 17:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214693
IP address blocks: 89.213.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:97:67:e8:0b:ba:48:53:72:99:93:95:19:7d:92:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 26 17:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=109cd3da58f87fb95cb39a31ca73f6baf5121cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:56:3f:db:3f:ed:aa:1e:12:ec:fa:12:51:
57:1c:82:df:d6:71:af:c1:c3:e9:fd:e2:ee:16:d0:
92:ae:88:e8:29:d7:84:26:ca:61:76:1b:a6:15:67:
96:42:ee:10:7b:cd:5e:1f:90:78:8f:aa:fd:d0:8a:
bf:d9:39:af:d2:dc:4f:d5:59:69:1d:5a:b6:68:a1:
db:e1:1a:e4:79:2a:59:f6:51:d6:09:9a:ba:b5:39:
80:c4:62:6d:46:d8:d4:a8:2d:ff:90:73:a8:52:99:
4e:dd:6e:08:3c:81:da:ae:8f:be:98:86:00:da:82:
a9:02:fe:d7:21:79:d9:9d:54:5d:8d:1e:71:f5:d4:
15:ee:67:35:8e:21:16:25:4a:54:64:94:e0:b0:bb:
1c:c8:52:cf:a2:d8:d8:91:f3:a9:d7:e8:b1:5d:3f:
1e:8b:3d:99:fe:2e:cf:b2:e5:22:45:80:db:e4:b6:
07:cc:13:29:63:28:b6:2f:9e:34:00:fe:ec:ff:d5:
5c:86:77:9b:a5:3c:7d:08:91:d0:15:d3:3f:9f:0b:
24:f0:25:eb:8a:40:fc:4f:f7:5d:de:7f:bd:5b:f1:
d8:fd:1c:c2:11:d3:7c:12:bf:95:0a:8d:86:f0:67:
32:54:5e:eb:50:78:2f:40:d7:f0:7c:27:4a:0e:d0:
b2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:D3:DA:58:F8:7F:B9:5C:B3:9A:31:CA:73:F6:BA:F5:12:1C:DD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EJzT2lj4f7lcs5oxynP2uvUSHN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d9:c2:eb:9c:00:e2:5b:8a:0b:01:82:f9:86:9e:65:ec:1c:
26:e8:92:25:02:94:40:9a:b8:83:fb:24:53:3b:81:a5:de:37:
2c:15:20:10:d6:9b:b6:89:bc:13:d5:2c:c5:c0:b3:ac:47:e1:
dd:a9:b5:0b:8b:3f:05:50:bb:f0:8a:b6:15:85:bd:1f:3d:af:
e3:e0:96:e8:8f:ac:2b:db:0a:d4:1f:c1:f9:b8:81:a1:5e:92:
9f:1e:fa:fd:37:04:4b:26:73:ce:8d:fe:45:8f:2e:1f:ae:cd:
d5:f3:bb:33:7b:05:58:d4:df:79:ba:49:1f:55:33:37:14:b7:
ef:54:63:1f:78:2b:23:5d:83:6b:07:bd:68:27:71:a8:af:f3:
77:7b:2c:eb:ff:54:8e:5a:37:aa:0f:fc:f9:af:6d:d9:47:79:
ff:a3:c9:43:d5:22:bb:47:76:de:f4:87:75:c7:77:59:92:02:
f2:ca:1b:ea:e1:df:6d:f0:be:bf:30:db:61:1d:2c:4c:64:8b:
93:79:20:f3:f2:e5:15:1c:5f:7d:41:73:7b:58:9f:03:fa:e7:
50:b5:ac:52:7c:2e:15:2d:15:22:11:10:b8:a9:1f:9d:56:a9:
1c:93:bf:a1:cb:ec:8b:85:9c:56:d7:ec:87:97:a5:98:ed:57:
69:cd:9c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:18 2025 by rpki-client