Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uwZCi8XerAWs5IhBPmOFxcllt2I.roa
File: uwZCi8XerAWs5IhBPmOFxcllt2I.roa (raw, json)
Hash identifier: vJwtW5eYtajR4wY2tOF2yaAVSYoswbeN+axuaB8wJ14=
Subject key identifier: BB:06:42:8B:C5:DE:AC:05:AC:E4:88:41:3E:63:85:C5:C9:65:B7:62
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193B5D78E266CA3B6442AF0AC2384487DBA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uwZCi8XerAWs5IhBPmOFxcllt2I.roa
Signing time: Wed 11 Dec 2024 13:10:22 +0000
ROA not before: Wed 11 Dec 2024 13:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47869
IP address blocks: 89.213.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:d7:8e:26:6c:a3:b6:44:2a:f0:ac:23:84:48:7d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 11 13:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb06428bc5deac05ace488413e6385c5c965b762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:5e:78:23:8a:4d:9b:04:26:15:c5:0f:73:
14:ed:1f:78:ff:9c:76:48:ce:92:58:e6:8a:af:b8:
57:98:4d:f9:98:bf:34:87:bb:28:5a:a1:a5:ef:90:
b0:ed:41:03:fe:d6:c9:8f:42:0e:53:06:5d:6f:7f:
d1:bc:5b:1f:36:99:61:ef:9e:01:b7:3e:25:00:ba:
ff:16:29:5c:6d:2f:ad:47:f9:df:bb:f2:bb:82:d7:
f2:f3:0b:12:44:ce:b9:bd:08:30:24:d8:f7:27:81:
15:0b:90:c2:a9:68:3a:37:ac:90:a7:4a:1f:81:41:
6b:ea:a7:81:9f:89:23:8c:92:e9:bf:ad:92:70:d7:
af:bb:84:df:61:58:dc:1f:71:4a:06:e3:1a:e5:61:
18:24:26:5b:61:e9:a4:8a:fd:dd:28:b4:a0:2a:32:
ae:44:92:04:09:0d:27:3f:17:a8:fe:cf:ad:5f:99:
d4:d4:69:88:42:3c:06:a4:a9:b5:70:90:c9:dd:6c:
32:01:4b:36:52:fd:cb:54:c2:e0:f7:7c:bc:23:f8:
d2:9f:c2:27:88:6c:23:4e:7e:13:70:64:01:7e:7f:
b7:d4:f8:d1:04:e2:05:22:f4:55:d9:dc:6c:15:56:
c5:ff:6d:cf:20:6d:d8:20:e0:06:06:e3:15:ad:ed:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:06:42:8B:C5:DE:AC:05:AC:E4:88:41:3E:63:85:C5:C9:65:B7:62
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uwZCi8XerAWs5IhBPmOFxcllt2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:df:09:ba:1b:9e:e9:38:c1:f5:53:eb:bf:5b:22:da:5d:f8:
89:ab:d3:7a:8e:f1:31:8c:eb:b4:8d:0a:a0:fb:b5:cb:2e:78:
db:4f:e2:0a:96:38:25:3a:f2:77:0c:15:42:32:af:65:64:bc:
47:b1:56:94:aa:d0:9c:38:af:01:8e:ff:1a:c7:4c:7f:be:a2:
0b:58:ae:cd:63:2a:8d:ba:da:f1:bc:ee:59:7c:8c:a2:1c:d9:
1f:f9:2c:85:08:86:b6:98:85:95:4c:2c:4d:ef:4c:2b:b9:26:
b1:9f:e7:b7:8c:a6:ab:fe:56:d2:45:29:42:e2:b9:38:b6:b5:
a9:d1:f2:c4:3b:f6:c1:41:0c:61:9e:32:33:5b:01:79:e5:e2:
98:7a:e4:63:67:d4:a6:d2:77:27:f3:4f:74:94:04:99:c0:65:
80:6b:c7:39:0d:e2:3f:e5:ec:41:37:a6:2f:96:c1:bc:60:1f:
33:77:ac:8d:08:d6:1d:f8:24:e8:49:98:1b:ab:1b:80:29:bc:
da:1b:1b:25:2b:00:29:73:1d:d1:b0:d2:07:13:26:30:5b:64:
39:4a:a2:b0:23:80:d4:01:2c:69:41:dd:b8:94:50:9d:27:d7:
44:ec:3e:a2:31:b3:73:0f:ec:4a:8b:80:6b:c4:9f:b6:7c:30:
d9:f9:b5:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO1144mbKO2RCrwrCOESH26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMjExMTMxMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjA2NDI4YmM1ZGVhYzA1YWNlNDg4NDEzZTYzODVjNWM5NjViNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xJeeCOKTZsEJhXFD3MU7R94/5x2
SM6SWOaKr7hXmE35mL80h7soWqGl75Cw7UED/tbJj0IOUwZdb3/RvFsfNplh754B
tz4lALr/FilcbS+tR/nfu/K7gtfy8wsSRM65vQgwJNj3J4EVC5DCqWg6N6yQp0of
gUFr6qeBn4kjjJLpv62ScNevu4TfYVjcH3FKBuMa5WEYJCZbYemkiv3dKLSgKjKu
RJIECQ0nPxeo/s+tX5nU1GmIQjwGpKm1cJDJ3WwyAUs2Uv3LVMLg93y8I/jSn8In
iGwjTn4TcGQBfn+31PjRBOIFIvRV2dxsFVbF/23PIG3YIOAGBuMVre02QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsGQovF3qwFrOSIQT5jhcXJZbdiMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdXdaQ2k4WGVyQVdzNUloQlBtT0Z4Y2xsdDJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWlMA0G
CSqGSIb3DQEBCwUAA4IBAQA93wm6G57pOMH1U+u/WyLaXfiJq9N6jvExjOu0jQqg
+7XLLnjbT+IKljglOvJ3DBVCMq9lZLxHsVaUqtCcOK8Bjv8ax0x/vqILWK7NYyqN
utrxvO5ZfIyiHNkf+SyFCIa2mIWVTCxN70wruSaxn+e3jKar/lbSRSlC4rk4trWp
0fLEO/bBQQxhnjIzWwF55eKYeuRjZ9Sm0ncn8090lASZwGWAa8c5DeI/5exBN6Yv
lsG8YB8zd6yNCNYd+CToSZgbqxuAKbzaGxslKwApcx3RsNIHEyYwW2Q5SqKwI4DU
ASxpQd24lFCdJ9dE7D6iMbNzD+xKi4BrxJ+2fDDZ+bVy
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:22:27 2025 by rpki-client