Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GOq199AQIOsgJFAvRk-NGPgtuOY.roa
File: GOq199AQIOsgJFAvRk-NGPgtuOY.roa (raw, json)
Hash identifier: L9lCFkVc5bxr8Ah6bwYHKlDfOpja93DP5nBSdbustZI=
Subject key identifier: 18:EA:B5:F7:D0:10:20:EB:20:24:50:2F:46:4F:8D:18:F8:2D:B8:E6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FC460B4BD3373720BCB858BB3147F2B81
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GOq199AQIOsgJFAvRk-NGPgtuOY.roa
Signing time: Wed 29 May 2024 12:43:43 +0000
ROA not before: Wed 29 May 2024 12:43:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211750
IP address blocks: 89.213.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jun 2024 15:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:60:b4:bd:33:73:72:0b:cb:85:8b:b3:14:7f:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 29 12:43:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18eab5f7d01020eb2024502f464f8d18f82db8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:d8:d0:17:47:04:18:1e:c3:c4:90:14:5a:
0a:db:9a:31:11:d7:36:81:ae:be:cc:21:76:be:9f:
c2:af:a5:30:62:f6:02:b2:de:5b:14:d6:24:34:ad:
01:33:ca:0e:ab:16:73:0f:83:7e:1a:34:d9:ca:e2:
82:28:d9:d3:f2:76:2a:43:c5:16:60:7e:aa:6a:b9:
a5:6d:76:65:bd:89:48:4e:f6:78:de:4e:98:44:b6:
fa:6d:c0:3c:70:1b:05:74:53:cc:ad:dd:88:dc:b9:
c3:8f:c8:7e:7a:cb:af:cf:8a:4c:9a:09:00:93:1f:
45:3b:a0:21:ae:47:7d:26:df:b5:d3:0a:8b:e4:87:
5e:4e:54:f4:c3:e1:bb:d7:72:b5:15:e1:ab:0a:74:
ee:cc:7d:fe:33:9c:c2:a4:b1:1c:9c:d6:fb:be:98:
da:32:b1:c0:aa:6f:84:8b:70:b6:1f:d4:d4:e3:4d:
2c:c9:44:fa:48:50:a9:0e:67:f0:00:69:3c:71:cf:
53:02:f3:17:61:84:3e:9d:c9:18:e8:0f:58:2d:6b:
0b:dd:de:fd:b2:60:50:dc:92:a6:b4:f6:d7:76:62:
01:ba:5a:d5:e3:82:e8:b4:7f:fe:1d:71:cd:50:2f:
4b:02:3c:df:89:c3:8d:38:7d:53:2f:cf:5e:37:26:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EA:B5:F7:D0:10:20:EB:20:24:50:2F:46:4F:8D:18:F8:2D:B8:E6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GOq199AQIOsgJFAvRk-NGPgtuOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.210.0/24
Signature Algorithm: sha256WithRSAEncryption
17:47:51:2c:d7:a6:4f:17:3c:4d:d5:01:df:5c:40:ff:bc:cd:
79:0a:d5:0b:dc:da:60:b7:90:b1:ad:b5:0b:7b:ce:66:7f:6a:
7f:9e:f9:f2:60:b6:09:b8:19:53:9d:34:9f:0a:66:5e:6b:c4:
1a:f8:56:d7:7a:c3:1a:9e:1e:4a:76:9d:f7:6c:4b:40:da:96:
5e:eb:ec:44:4a:5b:db:17:b9:0a:7a:68:0c:79:3b:23:5d:ac:
eb:91:c7:60:4c:b7:ca:44:bc:6b:11:0b:32:cc:d5:e1:0a:e0:
c1:5d:00:89:75:90:da:dc:e2:bc:7b:ee:63:c3:e3:1e:f9:16:
ad:53:be:02:30:8c:24:ae:c9:f3:74:5e:88:35:78:46:33:bb:
60:51:e5:ef:a5:87:aa:2f:ea:d3:6b:e1:63:82:8d:bd:2b:d5:
2c:24:02:1a:5b:bf:f9:90:76:c9:61:a7:c1:87:9a:bf:c0:3d:
33:fd:f2:14:2b:b4:3e:6a:79:ed:33:16:9c:e3:30:3d:b3:c8:
80:05:60:84:32:e7:3c:51:4c:88:92:73:4f:24:71:79:58:f1:
35:a4:fd:a5:bc:e9:2b:73:ad:5f:a2:9d:7d:15:5c:af:e3:1f:
7e:13:34:45:49:8c:a6:09:d2:c8:01:43:cf:00:7e:42:42:f5:
9b:55:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:04:33 2025 by rpki-client