Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MkdPdAwdElLtB8C6R2bjQGXVkOU.roa
File: MkdPdAwdElLtB8C6R2bjQGXVkOU.roa (raw, json)
Hash identifier: wG1MtCMiMsh/CP8JmFxSNxOYZLqHivhG46bLluDouaA=
Subject key identifier: 32:47:4F:74:0C:1D:12:52:ED:07:C0:BA:47:66:E3:40:65:D5:90:E5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143EC68729213D4EC38CCC19E920BC5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MkdPdAwdElLtB8C6R2bjQGXVkOU.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58289
IP address blocks: 89.213.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 15:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ec:68:72:92:13:d4:ec:38:cc:c1:9e:92:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32474f740c1d1252ed07c0ba4766e34065d590e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:75:00:33:6c:8c:28:6c:92:c6:ce:8a:fa:
42:a7:9a:57:67:95:38:39:22:f1:97:f0:b9:7d:3f:
04:e7:d0:08:be:fc:24:cc:93:21:ed:a9:cc:d4:ba:
a4:21:bc:49:0c:41:f7:16:67:ab:74:d8:d5:fd:e6:
a1:61:a6:35:8b:ab:af:0c:8d:d3:15:79:d2:35:14:
15:9b:ba:d2:f5:48:f9:e6:d1:17:62:71:a9:3a:eb:
0c:90:a8:d2:d1:84:49:4f:8f:89:2b:6e:df:7a:01:
14:da:10:4a:3f:0e:3e:f3:09:70:cb:68:3c:d4:6e:
19:0b:4b:8c:ee:21:ce:b3:d6:98:df:d9:66:bb:e9:
71:41:31:4c:cd:ef:5d:d9:45:e8:c0:60:3e:bc:71:
74:70:e7:96:59:b2:70:c5:7d:ce:bb:8a:c4:aa:a3:
23:d6:15:93:2c:d5:94:f4:d8:04:0f:e1:c3:66:9e:
e5:b9:b6:ae:ab:d0:58:af:95:94:6b:29:6e:09:e0:
8f:95:37:d1:86:10:e5:9a:74:45:d9:b7:a2:73:74:
33:92:12:79:f4:27:19:7c:1b:0a:46:12:db:7e:cf:
d7:34:ac:0d:97:51:a6:f2:6b:75:ad:75:9b:38:d6:
86:85:85:11:af:76:6f:2f:dc:aa:4e:bf:b6:16:53:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:47:4F:74:0C:1D:12:52:ED:07:C0:BA:47:66:E3:40:65:D5:90:E5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MkdPdAwdElLtB8C6R2bjQGXVkOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.196.0/24
Signature Algorithm: sha256WithRSAEncryption
68:cb:41:89:01:ca:57:60:fa:44:79:75:a3:b9:eb:7c:d5:46:
3f:6e:ab:5c:49:0a:1d:94:ae:a0:d9:9f:99:e1:d0:28:ba:b7:
38:0c:89:4a:3c:62:83:ac:ee:42:16:4b:87:5b:06:e3:04:e2:
d3:7e:8a:17:a8:7f:77:3e:b5:ac:b8:82:3c:da:ea:a0:b1:8b:
bd:25:a1:21:d3:9e:e3:e5:3d:53:dd:3f:de:53:1d:08:66:9c:
3b:7d:1c:eb:48:87:8e:6f:d5:d3:56:a9:7c:2c:ac:ef:4b:c7:
05:13:9f:c2:e4:3f:41:5b:b8:72:73:0a:58:54:d3:d3:74:46:
f9:56:c6:29:6a:73:98:d1:2a:9a:51:ec:ec:f3:43:75:16:35:
46:60:54:1e:0b:8c:53:6d:94:ce:26:6e:1a:75:f4:60:61:1a:
31:85:5b:55:76:ab:28:48:62:a9:eb:0a:bb:df:95:75:f7:24:
3f:18:b5:ae:43:eb:ca:9a:07:91:72:69:6e:f5:f6:ba:59:e3:
12:60:bc:7a:57:cb:18:1d:5b:b4:eb:63:df:24:78:f2:0f:2d:
e1:9f:00:41:74:9e:51:64:43:91:27:25:45:02:25:38:3d:57:
98:af:47:ea:e4:81:e9:36:72:f2:03:57:7b:89:26:42:f2:17:
d8:3a:d4:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ+xocpIT1Ow4zMGekgvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjQ3NGY3NDBjMWQxMjUyZWQwN2MwYmE0NzY2ZTM0MDY1ZDU5MGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuax1ADNsjChsksbOivpCp5pXZ5U4
OSLxl/C5fT8E59AIvvwkzJMh7anM1LqkIbxJDEH3FmerdNjV/eahYaY1i6uvDI3T
FXnSNRQVm7rS9Uj55tEXYnGpOusMkKjS0YRJT4+JK27fegEU2hBKPw4+8wlwy2g8
1G4ZC0uM7iHOs9aY39lmu+lxQTFMze9d2UXowGA+vHF0cOeWWbJwxX3Ou4rEqqMj
1hWTLNWU9NgED+HDZp7lubauq9BYr5WUayluCeCPlTfRhhDlmnRF2beic3QzkhJ5
9CcZfBsKRhLbfs/XNKwNl1Gm8mt1rXWbONaGhYURr3ZvL9yqTr+2FlPg3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJHT3QMHRJS7QfAukdm40Bl1ZDlMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTWtkUGRBd2RFbEx0QjhDNlIyYmpRR1hWa09VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdXEMA0G
CSqGSIb3DQEBCwUAA4IBAQBoy0GJAcpXYPpEeXWjuet81UY/bqtcSQodlK6g2Z+Z
4dAourc4DIlKPGKDrO5CFkuHWwbjBOLTfooXqH93PrWsuII82uqgsYu9JaEh057j
5T1T3T/eUx0IZpw7fRzrSIeOb9XTVql8LKzvS8cFE5/C5D9BW7hycwpYVNPTdEb5
VsYpanOY0SqaUezs80N1FjVGYFQeC4xTbZTOJm4adfRgYRoxhVtVdqsoSGKp6wq7
35V19yQ/GLWuQ+vKmgeRcmlu9fa6WeMSYLx6V8sYHVu062PfJHjyDy3hnwBBdJ5R
ZEORJyVFAiU4PVeYr0fq5IHpNnLyA1d7iSZC8hfYOtSo
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:41:24 2025 by rpki-client