Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wOP2hB2GySqRO24jsn0KgQocabQ.roa
File: wOP2hB2GySqRO24jsn0KgQocabQ.roa (raw, json)
Hash identifier: mV2r0bsJbCNHlb5+6kkh7yHlfiPl/9lFLxqL7K7ld5E=
Subject key identifier: C0:E3:F6:84:1D:86:C9:2A:91:3B:6E:23:B2:7D:0A:81:0A:1C:69:B4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019122C3D580EB30E302D7EB36074A03E16B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wOP2hB2GySqRO24jsn0KgQocabQ.roa
Signing time: Mon 05 Aug 2024 13:39:05 +0000
ROA not before: Mon 05 Aug 2024 13:39:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 89.213.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 14:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:c3:d5:80:eb:30:e3:02:d7:eb:36:07:4a:03:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 5 13:39:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0e3f6841d86c92a913b6e23b27d0a810a1c69b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:f4:32:0a:85:ca:eb:ba:28:7e:9e:70:47:
0c:4f:cb:76:56:36:86:93:1f:4b:24:e8:a5:5b:61:
b3:31:69:da:96:69:ab:e6:64:bb:5a:26:89:99:b7:
22:42:64:f8:16:b4:10:4a:46:66:37:fb:90:6b:c4:
fc:d9:d1:d5:9e:d7:a3:cf:fc:50:c6:10:2c:c7:86:
b3:6c:f6:92:8a:3f:59:e2:34:9e:10:6a:a5:78:77:
d4:26:d0:14:0a:8f:10:70:fa:4a:55:0b:83:43:f4:
a0:28:44:37:72:37:71:79:1a:a0:fd:4c:c0:e9:b0:
2e:ca:69:18:d9:7b:b1:8b:da:ec:ff:13:40:ec:cc:
9e:f4:d5:5b:52:cf:83:f4:fa:b7:a6:8e:01:2e:55:
d4:9e:4d:d4:8d:ae:d5:1c:ca:e6:e6:ea:df:e0:ca:
a3:a0:92:28:7b:bc:ca:86:cd:b2:b4:d8:76:6b:67:
85:62:5d:54:29:39:a0:2e:d3:c8:01:6f:72:3a:12:
b7:22:80:78:8d:ee:ff:c5:6a:3a:8b:5b:bc:3a:74:
b8:27:42:ac:94:15:4d:5e:07:5e:ca:ab:61:8c:d8:
11:9d:a1:5d:49:ce:38:5d:81:91:38:3a:d1:c2:f9:
1f:a6:69:da:3d:06:c6:46:5a:9b:26:a1:58:08:67:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:F6:84:1D:86:C9:2A:91:3B:6E:23:B2:7D:0A:81:0A:1C:69:B4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wOP2hB2GySqRO24jsn0KgQocabQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:14:a2:f5:59:a8:c6:2a:76:6c:18:f3:f3:c3:c2:57:af:f1:
b6:e0:a5:1e:b7:fa:63:2d:f9:27:e0:d3:d3:e0:e0:8d:37:8f:
a9:ed:1e:f3:80:97:b1:2c:b7:89:f8:52:e8:c0:2c:ee:20:b5:
2d:bd:c9:0a:90:8e:6c:fb:46:db:f6:17:41:b7:cc:be:16:15:
3e:66:01:a9:cf:bd:85:05:5e:f9:52:45:d9:15:2e:56:04:46:
47:9b:a9:39:50:fd:3a:c2:d7:1d:21:0e:70:21:f5:c0:d1:e4:
bd:e4:dc:25:19:96:c3:16:01:16:34:7e:2b:6d:d2:b5:bc:50:
53:2c:fb:27:d0:ca:71:6c:ed:36:cc:e6:8b:1d:bf:45:6a:82:
93:1a:47:bc:83:29:30:7b:ab:a0:ad:8e:e8:0b:23:da:12:e3:
17:86:46:31:66:fb:1f:2d:0c:c1:4c:cf:0b:95:8a:7e:f4:5b:
67:4a:8e:ba:20:43:d7:b6:2d:6c:b1:ef:0a:1d:bc:39:b1:98:
cf:b4:ac:17:ed:b0:ed:43:e8:25:96:6f:d3:cd:f1:3a:6b:81:
0b:3d:16:25:ad:a5:08:a0:64:27:cd:5d:d0:4b:06:4c:86:62:
4f:80:3d:6f:82:bd:b9:b9:32:8a:7a:f3:75:ad:17:5e:1f:5f:
62:8d:d3:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEiw9WA6zDjAtfrNgdKA+FrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwODA1MTMzOTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGUzZjY4NDFkODZjOTJhOTEzYjZlMjNiMjdkMGE4MTBhMWM2OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc70MgqFyuu6KH6ecEcMT8t2VjaG
kx9LJOilW2GzMWnalmmr5mS7WiaJmbciQmT4FrQQSkZmN/uQa8T82dHVntejz/xQ
xhAsx4azbPaSij9Z4jSeEGqleHfUJtAUCo8QcPpKVQuDQ/SgKEQ3cjdxeRqg/UzA
6bAuymkY2Xuxi9rs/xNA7Mye9NVbUs+D9Pq3po4BLlXUnk3Uja7VHMrm5urf4Mqj
oJIoe7zKhs2ytNh2a2eFYl1UKTmgLtPIAW9yOhK3IoB4je7/xWo6i1u8OnS4J0Ks
lBVNXgdeyqthjNgRnaFdSc44XYGRODrRwvkfpmnaPQbGRlqbJqFYCGe9qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMDj9oQdhskqkTtuI7J9CoEKHGm0MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvd09QMmhCMkd5U3FSTzI0anNuMEtnUW9jYWJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdUGMA0G
CSqGSIb3DQEBCwUAA4IBAQBMFKL1WajGKnZsGPPzw8JXr/G24KUet/pjLfkn4NPT
4OCNN4+p7R7zgJexLLeJ+FLowCzuILUtvckKkI5s+0bb9hdBt8y+FhU+ZgGpz72F
BV75UkXZFS5WBEZHm6k5UP06wtcdIQ5wIfXA0eS95NwlGZbDFgEWNH4rbdK1vFBT
LPsn0MpxbO02zOaLHb9FaoKTGke8gykwe6ugrY7oCyPaEuMXhkYxZvsfLQzBTM8L
lYp+9FtnSo66IEPXti1sse8KHbw5sZjPtKwX7bDtQ+gllm/TzfE6a4ELPRYlraUI
oGQnzV3QSwZMhmJPgD1vgr25uTKKevN1rRdeH19ijdOQ
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:03:58 2025 by rpki-client