Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ibgKwZUeVbxR6LM9Pho1IEvBkjg.roa
File: ibgKwZUeVbxR6LM9Pho1IEvBkjg.roa (raw, json)
Hash identifier: PFU8qo3swlU00emqUewf+RVx1xDGBV82ekDdiqp2ru0=
Subject key identifier: 89:B8:0A:C1:95:1E:55:BC:51:E8:B3:3D:3E:1A:35:20:4B:C1:92:38
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01934481620F6B395DB797442528088CCD83
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ibgKwZUeVbxR6LM9Pho1IEvBkjg.roa
Signing time: Tue 19 Nov 2024 12:59:10 +0000
ROA not before: Tue 19 Nov 2024 12:59:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 82.153.231.0/24 maxlen: 24
109.176.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:81:62:0f:6b:39:5d:b7:97:44:25:28:08:8c:cd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 19 12:59:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89b80ac1951e55bc51e8b33d3e1a35204bc19238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:79:38:be:94:42:99:32:23:e0:6e:8c:5f:
f8:e7:0b:fd:e7:8f:37:7c:8a:c5:b1:13:59:3a:42:
1e:57:09:44:9d:8a:26:8c:11:7e:99:15:64:af:a4:
e6:0c:d4:b0:30:d3:60:c9:49:c7:62:cc:9f:c9:98:
54:51:e5:01:f6:ae:e5:f5:41:73:6e:ab:9f:8b:1b:
c1:14:1e:ac:b4:05:94:91:28:17:85:1d:5c:1f:f7:
50:73:5c:7c:45:c9:bd:95:b4:00:d8:5e:4a:a9:41:
fd:e1:7a:d4:79:fa:f5:3b:d7:fb:f1:64:6a:4e:e4:
0f:58:4b:20:f8:bb:c1:d9:f3:22:58:1f:52:89:94:
c9:7c:45:33:a3:3c:8d:a2:27:72:7f:5e:e3:e0:ae:
13:2a:17:f1:35:0a:00:10:85:b2:7a:a6:75:4c:54:
44:fc:6f:98:f1:79:62:ec:d5:f3:af:28:bd:d4:99:
16:52:8e:6d:cf:c8:4a:12:34:8a:78:f8:31:bb:f1:
2d:6d:41:ad:95:59:f5:3a:7e:31:41:8c:71:65:78:
de:b9:27:d5:d0:45:48:64:01:e5:e5:d2:ad:2c:23:
39:aa:26:1f:e5:13:8c:af:a5:97:e5:44:b9:19:35:
f6:ff:f8:0f:bf:08:7a:6c:44:09:f6:39:bf:23:50:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:0A:C1:95:1E:55:BC:51:E8:B3:3D:3E:1A:35:20:4B:C1:92:38
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ibgKwZUeVbxR6LM9Pho1IEvBkjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.231.0/24
109.176.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c2:b7:c4:bd:4f:ff:b4:fb:ab:de:a0:f4:d2:38:0a:c8:9f:
4e:6e:cc:1b:0a:02:44:47:45:eb:b1:15:2a:ed:83:55:45:9e:
76:3a:43:24:36:6e:98:bb:d1:24:f6:b9:73:a0:9d:67:95:c1:
43:90:10:05:d1:7d:37:1c:5e:a7:a2:df:12:2b:df:6b:94:3a:
1d:7b:42:36:59:4b:63:af:6c:cc:d8:ab:67:25:2b:f7:22:dc:
59:47:27:dd:4c:d0:ea:a0:a6:18:af:67:44:6e:88:3c:a3:88:
55:2d:74:93:08:7d:3a:80:52:6c:8a:0e:e1:f3:7e:f3:6a:4f:
e6:24:57:19:ec:cf:6c:3c:b1:ac:e3:a7:f8:3c:17:93:63:c3:
e0:88:a0:fe:a3:9d:e4:1a:36:c4:7e:b3:2a:76:48:2a:10:ee:
4a:ff:b3:6b:1b:9c:7b:3c:15:3f:5d:28:cc:8b:25:da:d4:2a:
46:31:c2:31:68:2e:ab:1b:22:13:79:28:81:f4:f5:df:0f:b9:
c5:28:1f:9e:5f:93:7c:5c:f6:a0:68:bb:6c:67:fc:da:56:b9:
f2:a3:e8:3b:2f:ab:5b:7a:54:b2:bd:2e:15:2b:5c:e7:64:31:
d6:65:6d:5b:7c:78:95:8b:44:d8:9d:da:88:35:ff:a7:f0:99:
61:07:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:46 2025 by rpki-client