Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ikLe74T3LpnD3MA-EpXW3q9SuA8.roa
File: ikLe74T3LpnD3MA-EpXW3q9SuA8.roa (raw, json)
Hash identifier: OZLePhuv1xesaNIP44RgsUrodsiviw4flCZusMO5gJY=
Subject key identifier: 8A:42:DE:EF:84:F7:2E:99:C3:DC:C0:3E:12:95:D6:DE:AF:52:B8:0F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3495BE26CFA69BBD9296A890DECD46F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ikLe74T3LpnD3MA-EpXW3q9SuA8.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198825
IP address blocks: 89.213.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 15:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5b:e2:6c:fa:69:bb:d9:29:6a:89:0d:ec:d4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a42deef84f72e99c3dcc03e1295d6deaf52b80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:e9:a4:3a:86:74:60:a5:0b:c9:10:0f:61:
4f:be:98:60:73:7d:93:83:07:8e:1f:41:b5:dd:74:
3f:b7:8e:c9:70:a6:c9:e1:a0:6b:c2:9c:73:42:0a:
60:ce:0a:c5:77:f2:47:c6:eb:7f:71:3d:64:3f:96:
f4:2b:10:5d:5d:5d:8c:3d:02:15:f7:0c:8e:22:6a:
05:d5:69:32:fd:37:09:d7:cc:55:a4:5d:87:d7:b2:
5d:36:db:e3:1d:cc:db:b0:b7:06:92:ca:cf:ec:67:
f9:ea:95:07:ec:b4:30:c1:27:ba:9b:53:3b:67:08:
86:7d:83:47:88:bf:06:35:8c:ff:d7:41:ad:48:36:
01:ca:55:c5:e7:62:3d:30:23:7a:32:16:ae:e4:aa:
e4:f9:d8:d6:fb:c1:52:58:ae:c9:44:22:97:a6:84:
62:41:f8:f2:a5:7b:00:f5:b2:65:4e:2f:49:c3:78:
5e:60:98:94:93:31:8d:46:b3:1c:91:1e:9f:ca:fa:
54:f4:ef:75:9b:ca:4b:06:bf:a7:82:f7:c5:01:9b:
8e:48:20:33:d5:91:36:83:c9:32:f6:c8:1a:59:4b:
76:ed:61:5e:8c:2d:5d:53:4a:5b:c0:f6:66:cf:1f:
0f:a4:e4:17:5b:65:fc:aa:3f:ba:17:d4:7e:44:60:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:42:DE:EF:84:F7:2E:99:C3:DC:C0:3E:12:95:D6:DE:AF:52:B8:0F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ikLe74T3LpnD3MA-EpXW3q9SuA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.175.0/24
Signature Algorithm: sha256WithRSAEncryption
35:37:4b:80:a6:a0:ad:a3:fe:2d:73:43:d1:22:5a:7a:32:74:
61:c3:d5:3e:6d:fd:06:06:57:9f:33:fd:c7:07:c1:64:43:36:
3a:f6:67:7a:bf:ed:c6:d4:4b:5e:8b:de:31:c9:2e:21:a1:80:
79:a6:d0:1c:83:0f:83:8d:43:9a:e2:cc:02:31:2a:6f:fb:22:
ee:14:e1:44:82:fa:c8:2a:6b:67:77:b3:bf:9e:bf:62:aa:a8:
2b:df:39:13:f4:c3:7c:e2:d6:6b:3d:14:7c:bd:4d:b0:1d:29:
fb:9b:dc:49:78:2c:3f:e1:ee:dd:05:f0:7c:7a:9e:98:cf:e0:
aa:68:4a:5c:1c:ff:e6:95:6e:94:c5:27:9d:08:44:e5:1f:0a:
b1:27:0c:f4:e7:65:ac:c3:c4:0b:c8:1a:cf:3d:7e:7b:60:99:
0a:8d:0b:c7:c1:dd:4e:f8:4d:42:67:df:15:c5:04:d6:d2:11:
1b:fc:c2:9a:0d:fe:9b:9a:60:26:76:73:02:2b:01:1f:60:6f:
90:7c:f9:68:ae:c7:81:4b:1d:be:a2:3d:54:74:ab:38:53:c8:
d9:79:27:26:79:c9:65:0b:fd:8c:b3:8a:0e:fd:bd:38:09:73:
70:c7:14:67:72:f0:76:e0:aa:12:b8:8e:af:0d:0e:61:b6:f9:
72:5e:60:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSVvibPppu9kpaokN7NRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMTAxMDQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTQyZGVlZjg0ZjcyZTk5YzNkY2MwM2UxMjk1ZDZkZWFmNTJiODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEjppDqGdGClC8kQD2FPvphgc32T
gweOH0G13XQ/t47JcKbJ4aBrwpxzQgpgzgrFd/JHxut/cT1kP5b0KxBdXV2MPQIV
9wyOImoF1Wky/TcJ18xVpF2H17JdNtvjHczbsLcGksrP7Gf56pUH7LQwwSe6m1M7
ZwiGfYNHiL8GNYz/10GtSDYBylXF52I9MCN6Mhau5Krk+djW+8FSWK7JRCKXpoRi
QfjypXsA9bJlTi9Jw3heYJiUkzGNRrMckR6fyvpU9O91m8pLBr+ngvfFAZuOSCAz
1ZE2g8ky9sgaWUt27WFejC1dU0pbwPZmzx8PpOQXW2X8qj+6F9R+RGBLrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpC3u+E9y6Zw9zAPhKV1t6vUrgPMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvaWtMZTc0VDNMcG5EM01BLUVwWFczcTlTdUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWvMA0G
CSqGSIb3DQEBCwUAA4IBAQA1N0uApqCto/4tc0PRIlp6MnRhw9U+bf0GBlefM/3H
B8FkQzY69md6v+3G1Etei94xyS4hoYB5ptAcgw+DjUOa4swCMSpv+yLuFOFEgvrI
Kmtnd7O/nr9iqqgr3zkT9MN84tZrPRR8vU2wHSn7m9xJeCw/4e7dBfB8ep6Yz+Cq
aEpcHP/mlW6UxSedCETlHwqxJwz052Wsw8QLyBrPPX57YJkKjQvHwd1O+E1CZ98V
xQTW0hEb/MKaDf6bmmAmdnMCKwEfYG+QfPlorseBSx2+oj1UdKs4U8jZeScmecll
C/2Ms4oO/b04CXNwxxRncvB24KoSuI6vDQ5htvlyXmDa
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:25:15 2025 by rpki-client