Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rd1ixi4ooKEl1YFlSaTZ6kpX_Mo.roa
File: rd1ixi4ooKEl1YFlSaTZ6kpX_Mo.roa (raw, json)
Hash identifier: j8xGCvnzL5/1VD0WCV09lDHKhp8SqfPnX49Z5e/9V8w=
Subject key identifier: AD:DD:62:C6:2E:28:A0:A1:25:D5:81:65:49:A4:D9:EA:4A:57:FC:CA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019584E6E6153C26C9523E4E480CE2C4FA2D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rd1ixi4ooKEl1YFlSaTZ6kpX_Mo.roa
Signing time: Tue 11 Mar 2025 11:11:19 +0000
ROA not before: Tue 11 Mar 2025 11:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 89.213.206.0/23 maxlen: 24
213.218.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 18:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:e6:e6:15:3c:26:c9:52:3e:4e:48:0c:e2:c4:fa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 11 11:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=addd62c62e28a0a125d5816549a4d9ea4a57fcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:85:9d:d7:cb:19:b6:f9:8d:f7:a8:7c:dc:
3f:64:7f:33:eb:49:3f:a2:48:f4:97:e9:c3:2e:0d:
c7:56:7c:da:e6:b2:ed:17:0e:6b:15:b5:8d:fe:78:
48:9a:31:92:2a:df:4f:47:b1:0c:2f:01:1b:17:42:
68:84:73:54:52:0c:74:7e:d3:6b:0f:28:b5:ae:4c:
5f:b2:e6:69:e7:d2:2d:1b:72:9d:c8:82:b6:c7:ae:
36:8d:2f:4c:94:6e:45:14:69:5d:e2:25:15:8f:03:
28:81:17:46:d5:1f:ae:27:da:cc:a0:61:23:af:30:
a7:68:db:c1:f2:35:c3:68:73:a0:1a:77:68:2b:f1:
a0:70:cd:2e:f5:97:62:f8:c1:48:96:f1:95:75:82:
b5:a4:90:a1:49:fc:76:ae:ac:c8:45:a7:46:5d:e6:
fa:4e:15:bc:53:9b:c5:ac:51:f1:76:94:47:5d:dd:
3d:ea:aa:d7:3e:29:e5:29:9e:cf:26:ba:85:23:d2:
97:15:78:88:91:3c:6b:72:fc:2a:ef:83:ea:78:57:
d5:0a:78:6e:6d:c9:94:cc:2c:8e:e4:b4:f8:a1:d2:
f2:ee:08:2f:25:47:14:0c:66:43:e6:7d:bf:4e:2d:
9f:2c:a9:5a:20:f4:30:0a:76:86:06:65:06:0e:dd:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DD:62:C6:2E:28:A0:A1:25:D5:81:65:49:A4:D9:EA:4A:57:FC:CA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rd1ixi4ooKEl1YFlSaTZ6kpX_Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.206.0/23
213.218.244.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fa:ea:03:e2:c7:80:be:b4:93:be:86:d9:51:b7:ef:a9:81:
00:99:6d:be:e1:62:06:97:3e:0e:bf:b7:ee:fc:2f:70:96:2c:
03:b7:54:f5:05:1f:62:32:d4:97:3c:21:d6:31:09:b8:dd:60:
67:46:04:f2:c4:1e:49:1c:cc:f6:e7:2c:41:8d:76:25:70:cb:
5e:8b:c4:07:d5:a0:e8:94:fe:fa:38:15:51:3b:ef:2e:a1:b2:
f1:fd:e2:00:b2:6a:a9:22:f4:9e:90:1f:e7:d5:65:22:16:dc:
20:78:2c:ec:c9:de:26:7c:23:7f:1b:d0:14:60:db:1d:83:c7:
b4:d9:a3:d1:6b:d4:8e:7d:3a:fe:63:7b:d6:8c:07:07:1c:5f:
2c:af:0b:ef:91:fc:6e:d9:9e:96:ae:6b:c9:40:da:24:65:3e:
9f:7c:82:64:2c:fc:44:71:b2:d3:74:1b:bb:6a:f9:70:69:0d:
a2:e0:b0:52:a8:6e:07:16:76:a9:d4:6d:a7:9c:f8:da:f4:67:
fb:7d:e8:86:ee:d6:9e:b5:99:7b:f0:e8:52:95:e4:99:0a:01:
bf:3b:3d:24:25:a0:23:97:db:07:ae:d8:48:5a:fe:ae:69:fe:
44:3d:62:7a:64:25:7a:b5:5c:11:5f:41:07:a5:32:6c:f9:fc:
4c:35:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:15:23 2025 by rpki-client