Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xVQpdXp97K9rxQ0U7COFBdCkp0s.roa
File: xVQpdXp97K9rxQ0U7COFBdCkp0s.roa (raw, json)
Hash identifier: CpdtajRv7lNIFZjjJH1tw7hLFvn3GfVvSjcU8U0OY/I=
Subject key identifier: C5:54:29:75:7A:7D:EC:AF:6B:C5:0D:14:EC:23:85:05:D0:A4:A7:4B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193AB06FFD11340911848664DE1C6291146
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xVQpdXp97K9rxQ0U7COFBdCkp0s.roa
Signing time: Mon 09 Dec 2024 10:46:22 +0000
ROA not before: Mon 09 Dec 2024 10:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50104
IP address blocks: 89.213.45.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:06:ff:d1:13:40:91:18:48:66:4d:e1:c6:29:11:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 9 10:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c55429757a7decaf6bc50d14ec238505d0a4a74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:2d:ef:ef:1b:e7:55:fa:ee:ff:5e:c9:40:
d2:89:30:a7:5f:18:1f:ab:fb:2e:97:01:b5:8b:62:
2c:cb:b1:b8:f6:f0:80:c8:ef:d8:70:78:a6:69:b1:
79:18:2b:5b:d0:c2:8f:ba:18:2e:46:fd:67:fd:6a:
86:40:dc:dc:b6:6f:1d:58:b7:40:d0:83:4a:a5:91:
54:63:ab:0e:0d:5a:db:10:e7:20:fc:41:78:fa:af:
c1:90:71:e8:9e:63:00:4d:35:d0:ca:a8:c4:3c:c9:
b9:62:ee:9b:34:78:28:55:3b:4b:d2:96:be:4e:66:
99:e4:fa:24:de:7c:44:c6:16:38:cc:04:01:6a:26:
12:d4:ba:58:d4:94:7c:73:3b:4c:57:5b:01:0c:6d:
11:2d:f4:1a:c5:42:b8:94:91:58:a4:43:6f:e2:4d:
7c:12:db:f2:0f:07:aa:e8:7f:f0:25:aa:99:b2:67:
e4:a1:a4:ba:92:53:80:45:1c:c1:a1:f0:d2:10:b8:
f0:a6:01:8e:45:88:3b:3e:97:89:47:c7:62:f6:4a:
c4:af:e8:56:f7:bb:5e:92:d0:1a:a8:99:93:47:af:
e1:92:43:7f:99:0f:e3:59:1f:45:a7:0c:24:85:3d:
48:29:bf:73:12:39:21:b8:aa:d1:d4:f4:39:0e:a1:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:29:75:7A:7D:EC:AF:6B:C5:0D:14:EC:23:85:05:D0:A4:A7:4B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xVQpdXp97K9rxQ0U7COFBdCkp0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.45.0/24
89.213.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:3d:7a:9a:93:a9:05:e7:bd:76:44:40:8e:d4:ee:05:c0:05:
57:c8:f7:e9:09:20:0d:7e:44:69:d8:ed:c2:33:0e:c5:14:01:
73:d0:2d:54:fd:c5:72:27:82:20:5a:b7:7c:54:20:a6:c5:16:
0f:2a:d9:52:b9:a8:d6:02:02:d9:83:e4:79:d7:96:dd:d3:99:
b6:6e:f6:2c:b4:a0:45:57:1d:58:6d:8c:1e:09:95:20:a7:86:
88:81:a8:20:97:1d:2b:23:9b:ce:d5:3e:b0:c4:c6:42:94:d5:
9d:8d:62:dd:8e:fc:1a:e2:4b:13:70:75:6d:db:06:06:41:8f:
1d:4f:6a:d1:96:0e:45:d6:f1:83:2c:4e:58:44:5a:77:f7:87:
ca:6e:3f:09:10:0d:fc:ad:c9:ee:43:38:8d:3d:df:14:58:12:
3d:79:38:c0:ed:8c:43:42:65:0b:15:22:08:0d:2a:c9:ac:b0:
58:51:46:d6:a1:5b:39:7e:69:92:33:0b:c4:b7:4b:ee:0d:10:
05:ba:8e:3e:56:f0:ce:13:a7:8e:73:39:d6:37:2b:b1:61:eb:
b7:98:13:99:b8:32:85:e6:45:59:6b:94:a3:e6:46:2b:5b:f1:
f5:69:f2:27:35:2e:a4:8a:da:eb:31:db:11:61:67:bc:1e:a1:
51:89:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:35:26 2025 by rpki-client