Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aIHuDHRx_0-d2BsxH0dhsGLuj3g.roa
File: aIHuDHRx_0-d2BsxH0dhsGLuj3g.roa (raw, json)
Hash identifier: 97HRN1YpaMVap4PXEiqMmfM+k1OlNnU2x7LXzzYIYkk=
Subject key identifier: 68:81:EE:0C:74:71:FF:4F:9D:D8:1B:31:1F:47:61:B0:62:EE:8F:78
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193826CD3F6C945C9A93B341B36907DC017
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aIHuDHRx_0-d2BsxH0dhsGLuj3g.roa
Signing time: Sun 01 Dec 2024 13:33:10 +0000
ROA not before: Sun 01 Dec 2024 13:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50124
IP address blocks: 89.213.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:82:6c:d3:f6:c9:45:c9:a9:3b:34:1b:36:90:7d:c0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 1 13:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6881ee0c7471ff4f9dd81b311f4761b062ee8f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:7a:49:c6:cb:ff:02:d9:a2:9f:de:be:4f:
36:27:99:77:c9:0c:6e:47:42:93:3a:44:1f:cb:53:
bf:a3:06:83:4c:bd:7f:d9:f3:15:a2:c0:0c:10:4d:
20:eb:fb:68:3c:8e:84:9b:af:b7:82:a7:8d:5e:85:
e2:8f:ba:fd:0a:7c:f7:f7:8a:01:e2:16:57:cb:31:
ee:a2:62:3d:14:f2:22:46:2c:09:09:61:4a:7f:78:
3b:d7:77:10:ce:e0:48:69:22:bd:3a:c3:ac:62:6c:
60:20:7a:c3:ea:a6:be:dc:10:f9:00:12:75:2d:ca:
5f:83:3f:7b:8f:af:3a:4d:07:ca:1a:20:ef:3b:1d:
31:70:34:bd:17:f9:1e:d9:cf:01:6c:d7:22:08:33:
82:9d:1d:d1:55:db:24:3e:55:eb:8d:4a:e0:a6:52:
9a:a1:3c:c2:53:74:4f:68:6b:f7:87:ce:4c:91:9b:
9c:10:8b:50:66:e6:37:82:87:5c:47:6e:b7:d6:9c:
c4:e2:59:93:ad:60:20:93:7e:ef:e3:9b:ed:b0:b4:
59:69:c6:79:fd:32:70:8d:53:50:35:e8:9e:fa:fe:
13:45:bf:86:db:df:44:71:db:76:6a:9d:e3:f1:11:
ba:c1:e5:ca:13:fd:79:4d:ce:82:5e:b1:95:f4:32:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:EE:0C:74:71:FF:4F:9D:D8:1B:31:1F:47:61:B0:62:EE:8F:78
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aIHuDHRx_0-d2BsxH0dhsGLuj3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.131.0/24
Signature Algorithm: sha256WithRSAEncryption
93:98:53:aa:0b:62:d6:21:ae:9a:26:70:7c:65:89:00:63:3f:
a8:60:1b:a0:54:9e:25:49:86:cb:09:59:04:f9:49:58:c5:ac:
1a:ee:b7:a0:f2:06:26:d2:8c:53:b6:64:60:7a:9f:6c:1d:27:
54:14:2d:27:3e:2c:79:40:28:87:16:f6:4e:f3:f1:39:9b:6d:
a7:69:99:b4:57:d2:d8:b1:70:d3:6e:9b:30:85:2a:fa:a4:34:
a8:76:84:90:2d:5d:ba:ce:e1:fa:bc:69:c9:38:b3:b7:ca:cd:
0c:43:1a:2d:da:5c:41:a4:4e:f9:49:0e:96:c7:bf:35:1d:eb:
20:73:40:86:ce:fd:15:55:62:cd:15:0a:02:a9:8d:bc:0a:74:
d4:68:04:13:d6:b9:97:88:21:5b:93:98:67:4b:f7:7c:8c:b4:
bb:08:57:3d:9f:8f:a8:65:c7:12:92:72:ea:38:ba:54:66:d2:
17:9a:b9:df:5c:06:e3:5e:28:59:a2:eb:2b:3a:80:46:99:36:
ab:92:1e:dc:db:4c:19:eb:30:77:24:8a:5e:d6:3f:ec:ea:0a:
dc:76:f8:95:f1:c8:b6:7e:30:cd:62:e1:54:56:0c:7f:2a:ae:
1a:d3:41:c7:24:b8:3b:0b:42:4b:17:c5:c5:e0:c1:11:36:49:
16:4e:41:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOCbNP2yUXJqTs0GzaQfcAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMjAxMTMzMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODgxZWUwYzc0NzFmZjRmOWRkODFiMzExZjQ3NjFiMDYyZWU4Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZp6ScbL/wLZop/evk82J5l3yQxu
R0KTOkQfy1O/owaDTL1/2fMVosAMEE0g6/toPI6Em6+3gqeNXoXij7r9Cnz394oB
4hZXyzHuomI9FPIiRiwJCWFKf3g713cQzuBIaSK9OsOsYmxgIHrD6qa+3BD5ABJ1
Lcpfgz97j686TQfKGiDvOx0xcDS9F/ke2c8BbNciCDOCnR3RVdskPlXrjUrgplKa
oTzCU3RPaGv3h85MkZucEItQZuY3godcR2631pzE4lmTrWAgk37v45vtsLRZacZ5
/TJwjVNQNeie+v4TRb+G299Ecdt2ap3j8RG6weXKE/15Tc6CXrGV9DKvawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGiB7gx0cf9PndgbMR9HYbBi7o94MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYUlIdURIUnhfMC1kMkJzeEgwZGhzR0x1ajNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWDMA0G
CSqGSIb3DQEBCwUAA4IBAQCTmFOqC2LWIa6aJnB8ZYkAYz+oYBugVJ4lSYbLCVkE
+UlYxawa7reg8gYm0oxTtmRgep9sHSdUFC0nPix5QCiHFvZO8/E5m22naZm0V9LY
sXDTbpswhSr6pDSodoSQLV26zuH6vGnJOLO3ys0MQxot2lxBpE75SQ6Wx781Hesg
c0CGzv0VVWLNFQoCqY28CnTUaAQT1rmXiCFbk5hnS/d8jLS7CFc9n4+oZccSknLq
OLpUZtIXmrnfXAbjXihZousrOoBGmTarkh7c20wZ6zB3JIpe1j/s6grcdviV8ci2
fjDNYuFUVgx/Kq4a00HHJLg7C0JLF8XF4MERNkkWTkEn
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:33:35 2025 by rpki-client