Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ihFLySRMFrygKGVG2vvNZ-yd0CQ.roa
File: ihFLySRMFrygKGVG2vvNZ-yd0CQ.roa (raw, json)
Hash identifier: QvyOollp/GacqTx+nBN4oA+9vRI4Lq1klv3fCF+jgW8=
Subject key identifier: 8A:11:4B:C9:24:4C:16:BC:A0:28:65:46:DA:FB:CD:67:EC:9D:D0:24
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F94E3BFAD003A6625741F5EC3DE119CE1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ihFLySRMFrygKGVG2vvNZ-yd0CQ.roa
Signing time: Mon 20 May 2024 07:25:04 +0000
ROA not before: Mon 20 May 2024 07:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64236
IP address blocks: 89.213.211.0/24 maxlen: 24
217.145.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 08:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:e3:bf:ad:00:3a:66:25:74:1f:5e:c3:de:11:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 20 07:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a114bc9244c16bca0286546dafbcd67ec9dd024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:f1:2e:b6:2c:38:a1:d1:9f:c2:fd:a8:fc:
94:9e:20:54:9f:b5:3e:3a:7c:ae:07:78:91:b3:14:
b6:fe:b3:e0:80:63:20:46:45:a6:43:95:e7:05:ef:
3e:7c:89:a4:c8:d5:0b:2d:04:4c:48:d9:da:c8:61:
1d:24:67:1d:b2:b3:5e:f5:d6:87:c5:c8:91:aa:ca:
ba:02:b1:2c:f4:c5:ea:47:f4:bd:3b:0f:11:de:85:
fd:43:6b:d4:7a:3b:16:4b:85:56:bf:a2:08:d7:37:
d4:8c:83:74:ca:4b:49:57:fd:a5:83:4d:67:c5:38:
1e:c5:93:d1:da:fb:5f:e3:06:7f:6b:30:8c:29:b0:
f0:d2:96:08:25:67:72:eb:87:81:ec:50:20:09:08:
5d:a8:8a:81:e8:56:8f:76:d0:83:8f:04:a8:c2:1f:
6a:bf:3b:82:f7:3b:1b:82:cc:25:cf:bf:52:99:56:
4b:03:47:90:0c:8d:71:59:6c:67:c1:f1:2e:01:b9:
d2:e8:35:0a:2c:8e:8f:d9:03:6e:20:39:01:40:d3:
df:b0:e2:55:97:c4:73:9d:19:68:30:21:c1:ae:57:
94:1d:92:f9:8b:02:80:b4:9d:03:24:4c:5e:bc:cf:
c1:49:c0:1c:12:32:af:49:c6:4b:a0:a9:0f:fb:0a:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:4B:C9:24:4C:16:BC:A0:28:65:46:DA:FB:CD:67:EC:9D:D0:24
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ihFLySRMFrygKGVG2vvNZ-yd0CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.211.0/24
217.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:00:db:40:e3:3c:c4:70:07:40:29:4f:0d:d8:5e:4e:94:2e:
50:48:51:ee:2e:03:04:5e:7f:81:8e:29:87:6a:39:36:ab:9c:
fe:76:93:ff:bb:78:80:24:11:25:6c:0a:85:cb:69:26:ad:36:
a8:53:a4:2f:06:f5:4d:b0:14:83:69:3f:bf:c6:3d:80:1a:d7:
ba:f4:a2:46:32:04:64:ec:ef:34:37:cb:7c:fd:27:f9:5c:97:
49:81:26:b9:de:2a:cb:2b:83:bd:45:77:dd:5b:2d:3e:7e:35:
4c:f9:cf:72:b7:fe:46:9e:71:1d:33:ca:1e:d6:0d:e1:3e:41:
e8:a8:7f:23:48:03:40:ae:34:b8:d4:4b:fd:0f:66:83:b2:ec:
a9:12:5c:08:a4:23:25:aa:d6:d6:3a:bb:e2:c8:87:d8:c4:9a:
42:36:e6:8a:c5:3c:6f:be:99:0f:ba:ed:1f:5f:06:e4:72:70:
3f:cc:ad:78:f3:55:71:95:f9:5a:eb:97:9a:82:62:13:70:1a:
45:16:d0:1f:3e:0a:19:a4:24:a7:2f:98:f3:4b:46:cf:ea:db:
92:24:0a:d2:aa:cd:4e:58:b5:11:e1:62:c3:1d:89:47:0c:e1:
53:28:79:d0:bc:c0:71:20:94:6a:bf:68:2a:19:f9:6f:18:ee:
46:7f:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:20:09 2025 by rpki-client