Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NaTP8uTogp3vtVxQEA35A2Iaaek.roa
File: NaTP8uTogp3vtVxQEA35A2Iaaek.roa (raw, json)
Hash identifier: /4nKz1tzGDeFl2h13aZ1xQ+qQ6pZeLUcZZVgUeFLC6I=
Subject key identifier: 35:A4:CF:F2:E4:E8:82:9D:EF:B5:5C:50:10:0D:F9:03:62:1A:69:E9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E61B9B9155E1A7BB630D368996BAF83B3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NaTP8uTogp3vtVxQEA35A2Iaaek.roa
Signing time: Thu 21 Mar 2024 15:55:45 +0000
ROA not before: Thu 21 Mar 2024 15:55:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63150
IP address blocks: 89.213.150.0/24 maxlen: 24
213.218.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 13:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:b9:b9:15:5e:1a:7b:b6:30:d3:68:99:6b:af:83:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 21 15:55:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35a4cff2e4e8829defb55c50100df903621a69e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:f0:3d:ec:81:fc:61:ab:ab:9c:e6:5b:f8:
ba:54:95:09:28:ea:a5:4d:67:42:49:fb:b9:4f:61:
9c:bd:cb:5d:5f:71:b7:a7:30:05:71:7f:0e:e4:70:
a2:3a:4e:c2:46:0f:96:1f:46:c3:d0:5b:50:29:fb:
d1:b8:7c:94:5d:7d:b9:ca:45:b8:b4:79:ea:71:ae:
93:1f:b5:48:6f:f0:81:96:24:09:37:eb:77:ad:89:
c8:96:ad:ee:be:93:37:6c:b7:86:58:0c:4e:03:c5:
d3:53:36:02:44:59:6d:74:f4:30:75:04:56:f9:9a:
d4:95:1d:81:88:c5:e4:49:da:a6:7e:57:a1:de:28:
43:1a:2a:ef:cb:40:9f:65:ab:6f:57:df:5a:ae:a8:
46:54:ed:24:e4:2b:df:d2:d8:69:15:26:5c:d2:ef:
bb:30:0e:7f:03:06:23:f2:b3:3b:d6:29:80:07:d8:
8a:97:a9:8f:f0:1f:be:72:ba:6f:ef:8a:ae:14:92:
cd:89:2f:3f:bf:ca:26:f8:9b:12:a6:91:a0:c2:7f:
d7:ea:d7:ab:d3:b3:e7:88:94:d5:3d:ce:60:20:a0:
3a:a4:f5:c9:58:4b:a7:58:53:0f:38:4c:b8:e8:f9:
55:d3:79:68:fb:f1:18:d2:cd:84:29:e1:dc:45:77:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A4:CF:F2:E4:E8:82:9D:EF:B5:5C:50:10:0D:F9:03:62:1A:69:E9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NaTP8uTogp3vtVxQEA35A2Iaaek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.150.0/24
213.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
69:6e:7a:8f:15:b0:06:27:f9:56:d7:22:f1:8d:57:44:ac:1b:
64:64:40:69:07:38:8f:2a:ab:10:63:88:0b:7c:67:92:d7:fc:
cc:26:fd:d1:59:a9:db:b7:24:45:a2:71:92:37:d5:ad:68:63:
10:48:00:e0:65:15:55:55:ac:ac:c5:3b:0c:66:21:a6:3a:39:
76:5f:a4:ea:3c:8d:52:f9:47:70:2c:8f:4f:4c:c0:40:c8:a3:
bf:18:53:a3:fa:cb:39:84:7a:d3:33:09:4e:74:d1:40:f0:01:
8b:65:71:7c:43:1d:6d:08:1c:67:7a:98:1f:31:61:cc:f9:35:
56:0c:6e:3f:76:f7:d1:42:51:2d:14:22:e4:24:9b:1d:3a:83:
64:fb:b5:7c:d8:45:4c:8b:81:77:16:d8:9f:b1:06:16:a2:0c:
fa:86:86:b9:68:fa:7b:3b:f0:78:e8:aa:3c:71:8d:bf:c2:bd:
23:01:64:c1:35:e4:48:a6:d2:70:d7:38:34:fe:86:d1:4c:0f:
8a:a4:88:f6:db:7d:7d:2a:7a:da:d2:24:04:34:8d:eb:63:63:
ed:f7:4b:46:11:b4:8c:4e:e0:8b:5f:e3:31:b4:bd:99:c9:36:
40:83:e3:a4:17:39:e0:3d:71:39:71:03:46:ec:8c:f2:5a:66:
6e:cb:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:14:12 2025 by rpki-client