Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lbZqdbsU6VuhZzqf1orDrIbKxCY.roa
File: lbZqdbsU6VuhZzqf1orDrIbKxCY.roa (raw, json)
Hash identifier: k/h4V+h8zN8SdDU3SoChO6KHC3Z/E8yjXMSrNNSBY+w=
Subject key identifier: 95:B6:6A:75:BB:14:E9:5B:A1:67:3A:9F:D6:8A:C3:AC:86:CA:C4:26
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019373CFFBB62FBCEC845531019E1876DB7C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lbZqdbsU6VuhZzqf1orDrIbKxCY.roa
Signing time: Thu 28 Nov 2024 17:27:10 +0000
ROA not before: Thu 28 Nov 2024 17:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 89.213.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:cf:fb:b6:2f:bc:ec:84:55:31:01:9e:18:76:db:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 28 17:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95b66a75bb14e95ba1673a9fd68ac3ac86cac426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:64:5e:ee:4f:80:f3:82:ba:85:e4:77:cf:
54:cf:28:ba:ea:76:3e:1e:b4:e0:5a:04:65:53:33:
b7:de:57:ba:97:75:dd:18:91:70:f8:d4:be:50:17:
0f:10:2e:cc:cc:3f:06:14:87:4d:1c:8a:9b:02:09:
cf:31:67:9a:2d:a4:5e:b9:fa:aa:01:78:c3:07:57:
fe:1b:c4:4f:6d:42:f3:7e:17:a8:10:fb:0e:f4:d1:
4c:04:6a:8e:c6:1b:e3:4d:8d:f6:0c:ad:98:c7:71:
f5:32:91:5e:18:bd:60:bd:b7:d4:71:19:f0:42:06:
96:38:9e:7e:bc:f7:07:09:70:87:77:f3:72:61:f8:
02:6b:c0:45:b5:d0:6b:32:2a:f3:f0:d6:33:a1:fc:
e8:e8:6d:f3:9c:50:30:8a:4a:c0:2a:eb:48:6f:e6:
fb:15:41:f2:ff:8d:30:88:ff:41:a9:e2:e5:f0:54:
64:97:c5:1f:24:b0:e6:86:7b:c4:63:0b:9d:81:60:
d3:d9:12:50:8b:e8:90:6f:68:79:c8:44:04:56:1c:
77:00:c4:69:0b:f2:7f:da:54:17:d4:31:7d:7e:30:
b4:d9:ae:31:cc:07:ea:1a:eb:9f:11:4e:97:b9:63:
81:01:9a:8c:f9:09:46:ac:ec:6b:42:db:ae:fa:9f:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B6:6A:75:BB:14:E9:5B:A1:67:3A:9F:D6:8A:C3:AC:86:CA:C4:26
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lbZqdbsU6VuhZzqf1orDrIbKxCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.173.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f3:20:c2:2e:00:6d:f9:7b:fb:25:90:56:57:e3:ff:cd:aa:
d0:29:76:90:60:d2:f6:74:ff:dc:fe:d8:8b:05:0c:8c:b0:c4:
78:76:d8:0a:f4:24:b2:e4:c8:dc:46:1e:b7:11:81:a0:2e:a0:
58:2a:ad:fe:6d:94:25:cf:c2:95:4e:11:70:18:52:cd:ff:3d:
e2:95:b3:b9:1e:7d:e8:39:ea:45:05:8a:ee:d1:36:b4:4b:51:
02:9e:81:a1:4e:a1:4e:a4:08:c8:74:53:a4:c3:f5:e4:40:28:
5b:3a:47:c8:59:70:82:61:b9:ab:f7:9c:50:34:68:bb:b0:75:
2a:00:7c:84:f0:51:3c:7a:ae:ca:9f:e6:6d:89:8f:52:10:ea:
cf:74:65:fa:e3:7f:9b:58:ca:af:30:c7:98:8b:b7:5a:6f:0f:
f1:11:6c:88:7d:0e:b6:1e:63:dd:8c:c9:21:84:ed:9a:9c:ff:
6f:3b:43:f9:69:49:e4:71:eb:ee:91:10:ea:44:05:ad:4d:ae:
cc:52:25:3c:0d:72:f1:9e:b3:c8:7d:ef:90:b5:fe:ba:20:da:
e3:d0:61:8d:cb:4a:07:b0:92:eb:60:61:1c:61:a1:ed:cc:9a:
56:94:df:ea:fd:33:f4:b3:a2:cd:a6:19:13:a9:69:90:27:73:
64:f3:c9:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNzz/u2L7zshFUxAZ4Ydtt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMTI4MTcyNzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWI2NmE3NWJiMTRlOTViYTE2NzNhOWZkNjhhYzNhYzg2Y2FjNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/BkXu5PgPOCuoXkd89Uzyi66nY+
HrTgWgRlUzO33le6l3XdGJFw+NS+UBcPEC7MzD8GFIdNHIqbAgnPMWeaLaReufqq
AXjDB1f+G8RPbULzfheoEPsO9NFMBGqOxhvjTY32DK2Yx3H1MpFeGL1gvbfUcRnw
QgaWOJ5+vPcHCXCHd/NyYfgCa8BFtdBrMirz8NYzofzo6G3znFAwikrAKutIb+b7
FUHy/40wiP9BqeLl8FRkl8UfJLDmhnvEYwudgWDT2RJQi+iQb2h5yEQEVhx3AMRp
C/J/2lQX1DF9fjC02a4xzAfqGuufEU6XuWOBAZqM+QlGrOxrQtuu+p/h4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJW2anW7FOlboWc6n9aKw6yGysQmMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbGJacWRic1U2VnVoWnpxZjFvckRySWJLeENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWtMA0G
CSqGSIb3DQEBCwUAA4IBAQB48yDCLgBt+Xv7JZBWV+P/zarQKXaQYNL2dP/c/tiL
BQyMsMR4dtgK9CSy5MjcRh63EYGgLqBYKq3+bZQlz8KVThFwGFLN/z3ilbO5Hn3o
OepFBYru0Ta0S1ECnoGhTqFOpAjIdFOkw/XkQChbOkfIWXCCYbmr95xQNGi7sHUq
AHyE8FE8eq7Kn+ZtiY9SEOrPdGX643+bWMqvMMeYi7dabw/xEWyIfQ62HmPdjMkh
hO2anP9vO0P5aUnkcevukRDqRAWtTa7MUiU8DXLxnrPIfe+Qtf66INrj0GGNy0oH
sJLrYGEcYaHtzJpWlN/q/TP0s6LNphkTqWmQJ3Nk88nn
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:19:41 2025 by rpki-client