Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tLy1NRHSZtZzjVH5_Hvf1nYbhbE.roa
File: tLy1NRHSZtZzjVH5_Hvf1nYbhbE.roa (raw, json)
Hash identifier: yLVJLHLQk1IiUMLsQ5pojCebN6GAA46KwYVc/d+7EAc=
Subject key identifier: B4:BC:B5:35:11:D2:66:D6:73:8D:51:F9:FC:7B:DF:D6:76:1B:85:B1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01905F45A7514516D7B9709338DBDDB0047B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tLy1NRHSZtZzjVH5_Hvf1nYbhbE.roa
Signing time: Fri 28 Jun 2024 14:35:18 +0000
ROA not before: Fri 28 Jun 2024 14:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215269
IP address blocks: 89.213.49.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 15:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:45:a7:51:45:16:d7:b9:70:93:38:db:dd:b0:04:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 28 14:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4bcb53511d266d6738d51f9fc7bdfd6761b85b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:c8:b4:30:5e:f6:a7:8d:e6:0b:52:12:a8:
8f:6b:a3:59:41:cf:2f:32:73:9a:9c:7b:01:13:82:
13:de:d4:b3:0a:c5:b7:a9:ff:05:23:01:ec:3c:e4:
f2:dd:da:3e:c3:61:73:29:88:ae:4a:08:2d:e9:be:
53:2d:e3:99:1c:07:1f:02:ce:78:88:5e:7b:bb:e0:
fe:a6:c7:0b:24:ec:c8:e4:55:1f:e6:e8:0c:33:7d:
40:d6:3d:f8:83:ff:8d:d9:be:d5:9f:e6:30:1f:ca:
4b:ac:40:a4:7a:ef:c3:d8:6a:c7:f2:a0:45:83:b6:
03:fc:d2:a0:b9:fb:04:79:af:b3:23:17:fa:a2:e2:
1c:c7:75:dd:6b:13:37:8a:b2:10:56:7e:10:e6:a7:
59:2a:0b:e4:aa:bb:19:5c:9b:12:2c:1a:05:b1:56:
fa:4d:b8:9a:4a:90:35:35:0c:bc:ea:db:06:79:bb:
7a:90:d3:21:a5:bd:95:07:98:f3:35:88:ef:23:57:
17:ce:fe:ca:6c:4a:bd:c1:e8:71:99:44:f2:26:c0:
b2:5c:bf:de:49:f8:b0:87:e0:db:a9:4e:e8:9e:e8:
e1:86:93:b6:40:9d:dd:40:11:2b:20:b7:df:61:c7:
9c:79:2e:d6:35:d3:c4:f1:1f:f2:7a:21:30:4d:55:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BC:B5:35:11:D2:66:D6:73:8D:51:F9:FC:7B:DF:D6:76:1B:85:B1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tLy1NRHSZtZzjVH5_Hvf1nYbhbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.49.0/24
89.213.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:97:0e:50:4c:5a:42:4b:8f:96:9b:23:75:32:63:e0:d3:2e:
99:84:82:68:40:a0:c8:9c:29:b2:cd:e3:e7:60:da:7c:3c:7b:
57:46:e7:ed:10:15:de:9c:42:ed:f0:53:0b:c9:d0:6e:08:7d:
b2:93:6a:c5:5e:25:96:ee:27:a0:35:0e:9a:87:cb:c8:73:7d:
d5:25:38:43:1e:b9:93:38:60:ae:3b:3c:94:de:9d:de:d6:bd:
19:73:60:2f:1b:01:1b:b3:f1:39:e0:2c:52:00:58:d5:9d:5e:
ad:c5:06:b7:04:52:a9:c0:d2:fe:ad:bc:9e:ee:1f:16:e6:7c:
e9:dd:91:73:7d:99:4c:54:a3:5c:3e:70:6c:d8:42:d2:90:89:
57:c4:ed:a2:1e:8d:4d:a1:14:cd:dd:7d:2a:9d:5b:9b:29:0f:
22:c8:78:4e:b4:fc:6c:95:f6:1d:e7:61:67:28:e7:6c:ef:e1:
62:21:9a:70:ed:3f:23:d3:19:f0:73:cd:b6:99:f4:a5:01:be:
85:b1:d5:d7:0d:9f:cf:35:35:3b:49:b2:84:42:de:9a:9f:f7:
94:bb:5c:9f:e6:52:f8:61:76:db:44:34:47:f4:55:d6:bd:d0:
47:f6:1d:a3:37:04:6d:4c:e1:90:7f:90:50:33:83:b1:93:8c:
7b:a4:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:33:28 2025 by rpki-client