Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FvONVXCbeP10Bdfkodg_1lHGxOQ.roa
File: FvONVXCbeP10Bdfkodg_1lHGxOQ.roa (raw, json)
Hash identifier: DkXFpugjddRXtgrnnPF1kAXOGzPr41bQfxK3BwXpXYk=
Subject key identifier: 16:F3:8D:55:70:9B:78:FD:74:05:D7:E4:A1:D8:3F:D6:51:C6:C4:E4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E8F347B700A92A221F234CBA31ACCC853
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FvONVXCbeP10Bdfkodg_1lHGxOQ.roa
Signing time: Sat 30 Mar 2024 11:52:45 +0000
ROA not before: Sat 30 Mar 2024 11:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3214
IP address blocks: 89.213.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 21:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8f:34:7b:70:0a:92:a2:21:f2:34:cb:a3:1a:cc:c8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 30 11:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16f38d55709b78fd7405d7e4a1d83fd651c6c4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:e8:d1:3e:72:ea:30:a4:de:3c:13:30:51:
05:b9:a9:ed:0d:4a:5e:fe:42:41:b1:b2:60:c1:8a:
d7:2e:57:c1:8a:f4:4a:92:09:01:bb:a8:6b:0f:fd:
13:f1:c4:3e:59:0a:89:05:10:88:19:bf:38:0f:16:
a4:66:ca:b8:a7:99:54:46:52:aa:48:90:d1:a8:b7:
e1:4f:a5:5f:3e:40:f8:39:dd:ee:87:d4:19:77:bd:
26:11:f1:75:df:32:1b:4b:ad:f0:62:78:9c:20:6f:
2a:9b:7e:22:54:b4:8b:9f:c4:1c:fb:86:71:ef:a9:
15:47:4b:d2:85:d3:1a:92:8b:99:09:53:e4:84:33:
58:3a:2b:9f:58:79:35:6f:b3:2e:9f:bb:25:1e:a0:
bf:18:d6:4b:eb:63:d6:06:51:f7:a4:2f:ef:0e:3c:
eb:61:a7:59:b8:db:c7:aa:2b:ae:1b:df:8b:6a:cd:
37:5f:0f:c7:a9:0a:c2:73:05:b2:64:0f:44:6c:ba:
8b:27:41:3a:c8:79:78:4c:e4:23:36:f3:fe:60:1d:
85:5c:ad:15:84:42:76:e8:1f:e2:f2:37:e0:d4:b8:
9c:ab:91:b5:d4:61:7f:54:e9:da:0e:0d:87:51:52:
95:2f:8a:6e:6d:81:1b:2f:3f:c2:3c:cb:21:71:9e:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F3:8D:55:70:9B:78:FD:74:05:D7:E4:A1:D8:3F:D6:51:C6:C4:E4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FvONVXCbeP10Bdfkodg_1lHGxOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
68:81:25:1c:b4:d4:05:5a:f8:21:e0:4e:0b:d1:b4:71:91:97:
ff:c2:54:7f:b1:ba:69:66:ec:45:39:2d:b5:ce:b5:ba:f2:e4:
43:c6:e6:73:f8:03:63:04:0d:52:ed:48:02:7b:c2:bb:ab:a2:
62:d4:c2:65:38:4f:eb:3b:00:e8:21:dd:16:71:c3:d8:d9:52:
c6:34:bd:9f:bf:f2:8c:95:0c:3c:6d:63:67:64:5a:e9:3b:cf:
fb:59:56:55:63:c9:ce:57:f0:b9:f4:24:3f:50:db:58:6e:d1:
7f:a0:80:0e:6b:07:81:81:23:92:a2:22:9a:b6:10:26:8d:b6:
7c:df:e3:b1:3f:63:0d:97:18:d1:e8:8e:6e:e5:e2:5f:8a:3a:
1f:c4:5e:08:67:7f:0e:d9:5d:f9:fc:fe:7d:18:20:52:df:31:
2e:ad:f1:55:5a:24:1a:6d:3f:48:1a:46:27:1f:c4:44:f3:bf:
cc:7d:28:9b:cf:4a:ce:66:f4:55:48:a8:ff:ea:ab:8e:2c:ed:
57:d7:03:de:86:89:fd:24:0d:eb:5e:b4:3b:4c:3c:30:33:3f:
33:33:b1:a8:46:67:46:6c:83:1f:83:a9:23:5a:b1:8d:2a:89:
76:0a:88:76:2a:0a:4d:68:8d:49:93:87:9e:c9:f4:8b:97:a7:
be:3e:b1:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6PNHtwCpKiIfI0y6MazMhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMzMwMTE1MjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmYzOGQ1NTcwOWI3OGZkNzQwNWQ3ZTRhMWQ4M2ZkNjUxYzZjNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Xo0T5y6jCk3jwTMFEFuantDUpe
/kJBsbJgwYrXLlfBivRKkgkBu6hrD/0T8cQ+WQqJBRCIGb84DxakZsq4p5lURlKq
SJDRqLfhT6VfPkD4Od3uh9QZd70mEfF13zIbS63wYnicIG8qm34iVLSLn8Qc+4Zx
76kVR0vShdMakouZCVPkhDNYOiufWHk1b7Mun7slHqC/GNZL62PWBlH3pC/vDjzr
YadZuNvHqiuuG9+Las03Xw/HqQrCcwWyZA9EbLqLJ0E6yHl4TOQjNvP+YB2FXK0V
hEJ26B/i8jfg1Licq5G11GF/VOnaDg2HUVKVL4pubYEbLz/CPMshcZ6SEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBbzjVVwm3j9dAXX5KHYP9ZRxsTkMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRnZPTlZYQ2JlUDEwQmRma29kZ18xbEhHeE9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdXAMA0G
CSqGSIb3DQEBCwUAA4IBAQBogSUctNQFWvgh4E4L0bRxkZf/wlR/sbppZuxFOS21
zrW68uRDxuZz+ANjBA1S7UgCe8K7q6Ji1MJlOE/rOwDoId0WccPY2VLGNL2fv/KM
lQw8bWNnZFrpO8/7WVZVY8nOV/C59CQ/UNtYbtF/oIAOaweBgSOSoiKathAmjbZ8
3+OxP2MNlxjR6I5u5eJfijofxF4IZ38O2V35/P59GCBS3zEurfFVWiQabT9IGkYn
H8RE87/MfSibz0rOZvRVSKj/6quOLO1X1wPehon9JA3rXrQ7TDwwMz8zM7GoRmdG
bIMfg6kjWrGNKol2Coh2KgpNaI1Jk4eeyfSLl6e+PrHo
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:31:01 2025 by rpki-client