Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y21ONiW83v3JjLz_3KEkqjGHpw0.roa
File: Y21ONiW83v3JjLz_3KEkqjGHpw0.roa (raw, json)
Hash identifier: /JnKbt9JGRgpwhERQiDOs0U9lT1waoe91vswX9sDXb0=
Subject key identifier: 63:6D:4E:36:25:BC:DE:FD:C9:8C:BC:FF:DC:A1:24:AA:31:87:A7:0D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019184FB3C13674C841BAD2F9A960E6B9261
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y21ONiW83v3JjLz_3KEkqjGHpw0.roa
Signing time: Sat 24 Aug 2024 15:22:22 +0000
ROA not before: Sat 24 Aug 2024 15:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262725
IP address blocks: 89.213.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 07:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:84:fb:3c:13:67:4c:84:1b:ad:2f:9a:96:0e:6b:92:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 24 15:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=636d4e3625bcdefdc98cbcffdca124aa3187a70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:4a:26:1e:68:32:41:52:22:25:39:b8:33:
51:a4:dc:b2:5b:c4:b8:b1:fe:ea:df:a2:c3:23:1e:
cd:34:f2:a4:88:cd:02:ff:4f:08:2e:51:8a:bf:42:
5e:a5:2d:d9:81:8b:e0:03:93:59:c0:3c:bb:8b:26:
b6:19:82:6b:ae:44:90:a8:d9:fa:b5:91:fb:fe:98:
92:ea:59:43:d0:22:82:06:c7:b9:33:e2:2b:8e:7b:
b7:cf:81:1a:f5:60:cc:bf:cc:76:a0:a7:d5:d7:c0:
27:91:c4:75:a6:50:40:23:1a:b6:7e:8f:bb:ba:3e:
96:c9:e6:32:f9:9a:11:48:5e:f7:cf:91:e4:52:dc:
47:c1:5d:dc:97:a5:f8:46:eb:f6:47:0c:5d:c6:73:
12:57:e6:e9:d2:f3:96:93:40:af:0c:48:9c:bd:ce:
97:37:a2:0b:55:52:b0:98:a5:3c:01:e5:2e:25:24:
39:5f:ae:07:90:09:4b:b4:ec:b4:af:ae:a4:24:66:
a9:45:38:8a:ba:81:3f:9b:26:3c:fd:44:9d:8b:bb:
83:22:81:1c:3a:9d:f7:4e:51:b4:0d:61:f2:64:01:
f6:42:b2:91:81:c3:ed:7b:37:9d:87:46:45:ef:74:
57:92:99:7a:e2:a9:b6:22:8a:f1:df:ec:5b:ed:e5:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:4E:36:25:BC:DE:FD:C9:8C:BC:FF:DC:A1:24:AA:31:87:A7:0D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y21ONiW83v3JjLz_3KEkqjGHpw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.41.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3a:d9:3b:52:42:8a:6d:d9:42:54:36:27:94:13:39:0b:0a:
4f:88:26:8d:f2:3b:ee:58:f7:b8:f2:92:ac:df:e3:de:47:d9:
2f:c1:b0:ef:2d:8c:8b:01:57:3c:cc:c8:a5:60:ca:bf:0c:40:
8d:f2:96:24:da:73:c3:ae:b8:bb:65:6e:44:2a:0a:70:a6:1a:
6f:70:26:90:37:e9:1a:3b:8c:2c:7d:2c:c5:08:59:43:fd:57:
35:91:fe:d6:12:64:ac:e4:72:08:18:6d:e9:ac:70:c1:9a:62:
95:56:c6:4e:3a:de:51:38:3f:25:f8:ac:42:fb:66:9e:2b:d1:
0e:b4:39:2d:88:75:ff:34:c4:45:f6:2c:2c:17:0e:25:99:08:
df:87:55:7e:8c:6a:e1:1f:0b:8e:cf:cd:7a:a2:a4:d6:67:97:
89:ba:8c:6e:3c:81:4e:47:b5:17:8d:3b:62:ec:02:c9:9d:b2:
e0:07:f7:25:05:75:45:cd:57:8d:0a:f1:31:5d:35:b3:82:98:
7c:31:9e:b0:ff:7f:32:75:02:3e:7b:fc:60:f2:64:f8:20:66:
30:28:ac:18:91:4f:90:20:28:31:dd:74:6e:6a:c8:d5:a5:62:
86:8f:d3:1c:8f:04:1f:4b:de:f9:da:a1:8c:1f:1a:2e:63:bc:
99:ef:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:36 2025 by rpki-client