Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fPvlBiQAhYOJTKDjlVX-R4AQ408.roa
File: fPvlBiQAhYOJTKDjlVX-R4AQ408.roa (raw, json)
Hash identifier: CIejRUACg8teH3f3UClHH5fmx0v9lL9Q6pEOZaIz7mk=
Subject key identifier: 7C:FB:E5:06:24:00:85:83:89:4C:A0:E3:95:55:FE:47:80:10:E3:4F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E70CBC0A4F629D1E2CD25A63B4740803A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fPvlBiQAhYOJTKDjlVX-R4AQ408.roa
Signing time: Sun 24 Mar 2024 14:09:45 +0000
ROA not before: Sun 24 Mar 2024 14:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 89.213.164.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
213.218.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 08:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:70:cb:c0:a4:f6:29:d1:e2:cd:25:a6:3b:47:40:80:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 24 14:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cfbe50624008583894ca0e39555fe478010e34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:98:48:ee:bf:f6:3c:f7:89:7a:63:04:68:
ad:1c:7b:1f:4c:04:7c:48:a3:c2:49:fa:4a:29:cc:
ee:df:e9:f5:56:e7:2b:88:63:68:d9:76:69:7c:b3:
9f:67:6b:a4:c9:e4:8d:7d:66:32:be:c0:ce:90:0b:
9c:91:9a:85:6a:37:c5:1e:7b:68:48:9d:f2:f2:8d:
a1:03:05:a4:b8:5d:ea:23:51:ef:ce:97:60:43:ac:
ba:93:4f:f6:2b:96:1d:2b:f8:f3:84:c8:45:bc:fb:
f7:0a:fa:8b:42:c1:73:08:17:5d:25:1d:86:38:d8:
b3:ec:b9:13:42:c0:da:74:a6:d3:34:81:61:ab:6c:
24:62:2d:7d:c1:7b:8c:6d:d7:aa:43:e5:6a:04:db:
60:c3:95:3e:a1:09:7b:ee:6e:5d:a7:4a:b7:b3:c3:
69:b6:25:4c:82:3e:19:06:ae:3c:5c:76:33:e7:ac:
c0:46:2f:9c:bb:d6:e9:b6:c2:1d:fb:6d:0e:e3:c7:
a7:83:14:94:94:3f:ba:09:65:6e:32:d5:83:c3:fc:
36:51:fd:24:fa:47:cc:20:88:1e:e7:9c:8e:89:a0:
ed:82:f4:c7:ea:91:12:be:8a:78:43:19:81:67:56:
b3:ef:2d:50:f1:e7:ff:60:81:98:bc:8d:b1:4f:d0:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:E5:06:24:00:85:83:89:4C:A0:E3:95:55:FE:47:80:10:E3:4F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fPvlBiQAhYOJTKDjlVX-R4AQ408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.164.0/24
89.213.184.0/24
213.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c7:c1:a3:57:ee:bd:5e:2b:e4:83:6f:15:b1:a2:51:60:d6:
6d:e3:dc:fd:3a:ec:a7:16:01:3d:65:d4:a3:dc:17:8a:5b:97:
59:66:a8:93:24:4e:46:52:c9:2b:2a:b7:39:b0:63:be:d8:7f:
5d:95:c9:07:08:8e:b7:d7:e0:d6:76:e4:a5:ac:7d:ca:41:b9:
e0:b4:46:76:23:11:b6:09:af:4e:84:0f:2b:9e:a8:52:36:56:
67:6a:1a:27:a3:7f:ac:19:d7:8a:28:ec:8c:84:f8:f4:e7:41:
b0:96:46:ad:8c:37:a0:78:9e:c4:ef:3d:98:05:e5:46:cb:5e:
36:43:0f:9e:dd:e2:34:4d:c2:65:9d:88:a5:a3:ac:1a:8f:41:
b0:94:da:a5:1c:ed:d1:3e:5d:2f:ed:27:2f:94:59:86:3a:bc:
6a:91:3c:32:d0:1d:54:b6:bd:97:0a:bc:4b:f8:14:cf:ba:3a:
c2:6f:11:9f:04:eb:ee:2e:09:0d:35:87:55:c8:7d:08:0c:4f:
4b:aa:82:85:34:b2:84:17:85:61:10:a9:57:d1:6a:27:83:a6:
d1:43:fd:8d:7e:28:f6:8c:f8:1c:65:31:e8:e3:26:b1:be:8e:
64:8e:a9:52:80:bd:8d:a3:7d:24:d7:c0:a3:5e:b1:cf:8a:67:
c7:54:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:11:51 2025 by rpki-client