Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j2EfcOTrb0HizvpPMhscWG91Rv0.roa
File: j2EfcOTrb0HizvpPMhscWG91Rv0.roa (raw, json)
Hash identifier: at/rNtEOWYtNPMKC9egLG+ntJefuWwxPjSW1Mpd6lB8=
Subject key identifier: 8F:61:1F:70:E4:EB:6F:41:E2:CE:FA:4F:32:1B:1C:58:6F:75:46:FD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01912887A9DA4BE99C7B385FD788167D14DF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j2EfcOTrb0HizvpPMhscWG91Rv0.roa
Signing time: Tue 06 Aug 2024 16:31:05 +0000
ROA not before: Tue 06 Aug 2024 16:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211750
IP address blocks: 89.213.210.0/24 maxlen: 24
89.213.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 15:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:87:a9:da:4b:e9:9c:7b:38:5f:d7:88:16:7d:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 6 16:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f611f70e4eb6f41e2cefa4f321b1c586f7546fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:2f:28:3f:bc:ca:b1:17:1a:36:15:51:bd:
40:8c:00:5b:c7:54:82:41:e2:02:00:f0:b4:16:ad:
3c:c0:0a:0d:42:78:8b:fe:bf:05:9a:f5:ac:84:6f:
dc:3a:8e:b0:6e:6d:03:df:02:5e:62:4b:8d:33:d4:
b4:a7:42:6b:c7:21:6a:d7:24:34:76:9a:82:20:f2:
45:d2:04:e2:6b:3e:51:d0:f6:88:a3:01:be:4f:29:
a8:e2:1b:a5:6c:77:44:bb:83:33:5c:90:5c:10:8b:
fa:1f:97:37:d7:d5:88:ff:80:54:a9:4c:b3:b7:10:
31:43:1e:35:11:d2:e5:5a:15:73:12:d0:c6:e2:ec:
66:08:0a:9b:a0:fb:68:1d:65:b4:e0:1f:de:6a:3d:
0c:64:0f:04:85:51:9b:b1:4e:63:aa:3b:95:d5:3d:
2e:f0:ad:a4:a9:4d:dd:76:b0:c4:01:e1:85:86:48:
86:32:3c:56:e1:b1:2b:d5:87:df:fa:47:8b:5d:fa:
a8:94:4f:88:09:d3:68:48:3a:32:5f:89:22:4a:ee:
f6:31:8b:9b:79:86:be:f0:01:65:73:f1:c3:02:64:
e9:9e:67:1a:06:0f:16:44:b4:05:9f:75:78:55:c8:
49:d5:93:97:65:a1:0e:a4:c9:71:5a:f6:fd:cf:47:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:61:1F:70:E4:EB:6F:41:E2:CE:FA:4F:32:1B:1C:58:6F:75:46:FD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j2EfcOTrb0HizvpPMhscWG91Rv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.210.0/24
89.213.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d0:51:f2:8a:ee:2b:ac:0f:91:21:6b:d2:19:d5:5d:bd:91:
27:74:67:a6:a7:fb:b5:51:ba:cc:85:40:48:79:ab:74:45:b5:
6f:fb:74:fc:6c:a3:ef:eb:75:d2:52:a2:20:b4:9e:07:18:ef:
53:7f:5e:07:28:80:39:be:75:9a:0a:4c:42:c5:52:c5:3b:13:
ee:55:17:a3:e5:d6:0c:59:54:cf:cd:d6:d0:9a:b0:bc:53:f6:
04:d4:4d:86:47:82:57:1e:83:8f:b1:54:50:be:36:01:fb:c1:
a1:d8:99:1e:6d:14:56:32:19:06:88:06:d7:dc:0e:ba:d3:40:
03:46:fc:3b:2f:53:6a:d8:6b:17:f8:02:77:66:6c:f3:fe:6a:
c5:39:c1:4e:80:14:a2:a8:fe:7c:a9:39:40:89:73:28:aa:69:
83:6b:04:72:e4:40:19:c7:64:0c:55:05:c2:db:c1:bc:49:e4:
8d:c9:86:0f:8f:d7:d5:63:cf:b9:5d:0c:3c:36:51:3c:5a:8d:
1d:18:ec:47:01:a4:af:88:06:14:8f:68:ba:6d:dd:4f:50:41:
f7:2b:18:3f:96:a6:b0:0b:ac:c3:44:22:00:d1:8e:09:a1:6a:
9a:18:e6:2f:60:44:2b:24:6b:a4:a1:43:6e:94:6e:23:61:64:
66:ba:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:37 2025 by rpki-client