Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kUzW7BIAh5ahSMyc9-qdJ0cnGr4.roa
File: kUzW7BIAh5ahSMyc9-qdJ0cnGr4.roa (raw, json)
Hash identifier: LrvKeD5a6YUAmf3aSetTLVvONHVGpMDQMxr7QE2nJS8=
Subject key identifier: 91:4C:D6:EC:12:00:87:96:A1:48:CC:9C:F7:EA:9D:27:47:27:1A:BE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421440A78A15EA6787CBEA9E937A6B5BF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kUzW7BIAh5ahSMyc9-qdJ0cnGr4.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209181
IP address blocks: 89.213.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 09:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0a:78:a1:5e:a6:78:7c:be:a9:e9:37:a6:b5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=914cd6ec12008796a148cc9cf7ea9d2747271abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:7e:2d:91:bb:02:d5:18:cf:f0:4b:36:85:
b0:a9:ff:04:8a:76:e3:84:ec:dd:a3:44:35:95:ff:
57:6d:be:ef:6e:51:f4:29:de:3c:01:77:06:28:de:
60:35:39:0c:1e:4e:90:d0:d8:c5:e2:8d:1e:c6:02:
d0:87:12:c5:cc:19:68:39:c2:09:e8:74:f0:15:dc:
88:21:0e:05:ab:60:4f:f2:60:ce:93:f1:ec:69:70:
29:3d:1c:76:42:84:b4:19:c1:01:d2:99:a3:fb:03:
1c:8b:04:e4:14:86:af:a2:81:06:86:64:a3:f0:dc:
7b:c7:c4:b3:ff:7d:f9:8a:c6:ff:a9:3c:51:99:0d:
65:7b:e1:af:bd:97:0d:c8:36:db:4f:9c:31:6d:66:
e5:6c:78:86:bf:aa:57:86:3a:0b:be:8e:99:e7:34:
23:a9:b0:47:59:73:cc:a6:5f:f1:8e:d5:e6:a3:a1:
df:a9:83:a1:7b:b7:c7:11:d6:c3:95:40:14:d2:17:
3c:94:86:33:a1:cb:1e:37:55:8e:ae:cb:c8:b6:a3:
64:cd:8b:fc:ce:45:8a:19:2f:3f:79:0a:d0:14:99:
27:f1:ab:f4:6d:f9:58:91:8e:c0:29:c6:35:bc:9a:
e7:4b:8d:9c:e0:22:6d:c4:a2:12:b0:ec:aa:df:40:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:D6:EC:12:00:87:96:A1:48:CC:9C:F7:EA:9D:27:47:27:1A:BE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kUzW7BIAh5ahSMyc9-qdJ0cnGr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.171.0/24
Signature Algorithm: sha256WithRSAEncryption
04:65:cb:c5:9c:96:81:8b:9e:4a:78:89:f3:c3:38:3c:01:1b:
4c:c0:4f:9d:04:50:9e:18:2e:c2:2a:20:16:b5:c1:ef:62:d2:
bb:e2:5b:9d:c5:66:a6:50:af:87:29:97:7b:8b:8c:ad:f8:e5:
c6:1e:e4:65:07:0b:5e:62:18:c6:9e:d5:e0:a5:0b:75:e0:93:
8b:33:53:4e:27:97:00:cd:4e:b8:8a:e1:c8:8b:6d:ca:2b:f4:
86:06:07:2f:c8:d9:5f:0d:51:37:68:7c:f2:e6:e9:26:11:4e:
6e:ed:a5:86:46:58:8b:a7:df:e0:78:f6:c4:7d:b9:5e:fe:00:
cf:38:de:ff:90:0b:3d:48:fd:6f:e5:58:a1:a2:7d:07:f1:34:
45:5c:f9:cb:d9:90:8f:82:d8:20:fa:12:8a:fe:f4:17:d8:10:
46:d6:86:d4:c0:95:44:2d:f5:fa:d8:e8:59:8b:06:cc:7a:39:
7b:d0:45:0c:61:90:57:4c:42:bf:0f:38:bc:df:08:13:d7:cb:
c4:83:72:1d:10:36:b3:70:da:b5:65:54:73:af:2a:b9:6d:92:
7a:26:80:e4:ba:a4:4a:a3:79:02:37:28:97:f3:18:63:71:81:
41:0e:e3:d9:94:9a:cf:61:d6:23:cc:94:dd:27:89:1a:63:b8:
53:d3:0b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:14:01 2025 by rpki-client