Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/maNJcf2rwEIvzaCstckIB4WZGrM.roa
File: maNJcf2rwEIvzaCstckIB4WZGrM.roa (raw, json)
Hash identifier: IGdDxGmgYz1L+RRebMErvUi+AyRa3wFHm0sXXlsOzUU=
Subject key identifier: 99:A3:49:71:FD:AB:C0:42:2F:CD:A0:AC:B5:C9:08:07:85:99:1A:B3
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 018EBDE56A634E6F0EDF1C3CDF550F3CCB30
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/maNJcf2rwEIvzaCstckIB4WZGrM.roa
Signing time: Mon 08 Apr 2024 13:28:32 +0000
ROA not before: Mon 08 Apr 2024 13:28:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48359
IP address blocks: 89.23.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 09:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:e5:6a:63:4e:6f:0e:df:1c:3c:df:55:0f:3c:cb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Apr 8 13:28:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99a34971fdabc0422fcda0acb5c9080785991ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:80:7b:c7:d7:b1:5a:91:24:05:56:3b:5a:
a1:15:66:0f:13:57:d0:37:b3:53:38:9d:52:ba:86:
8e:81:ba:70:01:01:40:cb:5c:0e:f7:69:be:20:93:
2e:4c:13:19:70:1f:ad:81:7b:c5:ff:c1:8f:03:ce:
4d:43:82:4f:4e:61:d8:6e:46:2d:59:4a:53:ba:d7:
c1:0c:53:9b:45:e4:a0:c7:12:e8:dd:79:a7:01:4a:
86:41:7c:28:0a:ca:b2:8d:82:18:24:c6:6f:a5:13:
ef:68:6d:46:7a:d7:d1:50:ae:dc:ae:0a:c7:fa:47:
d1:da:60:3e:e4:f1:05:7a:ca:87:72:7d:84:e3:7d:
ce:81:6f:8f:19:ff:33:23:e6:93:ca:ff:96:b3:06:
27:99:a1:8f:d4:3b:12:3e:08:4c:5f:3a:48:34:44:
ad:d8:60:46:e4:ff:11:bd:48:82:b9:b1:56:c0:c9:
97:d7:00:21:4f:eb:c1:f7:5f:ce:ee:e6:01:ab:80:
cf:80:9a:b2:87:e4:8a:7c:d7:b8:80:d1:27:cc:66:
83:02:25:a5:e3:f0:c8:53:84:34:bf:b3:87:c3:d1:
a6:20:3b:c4:40:36:fa:58:d7:fc:66:96:b2:01:fd:
62:02:2f:45:81:e4:3b:d8:1e:8a:95:5f:d3:34:65:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:49:71:FD:AB:C0:42:2F:CD:A0:AC:B5:C9:08:07:85:99:1A:B3
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/maNJcf2rwEIvzaCstckIB4WZGrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:87:71:f7:c9:eb:96:44:34:89:f8:38:cd:5f:bb:a6:df:3f:
3d:71:ca:ba:2a:a3:6e:66:5e:7a:90:c2:4f:4d:36:3f:d6:88:
af:49:99:63:b0:79:77:42:99:b3:c1:bb:71:99:8a:24:33:d1:
10:bd:44:bd:75:99:32:5a:08:4f:9e:39:fc:40:87:d9:03:ba:
bb:49:1a:4a:53:85:ce:2e:e4:4c:1d:f7:ba:10:c5:f0:48:8f:
59:54:8d:75:eb:ae:c7:d6:9a:9b:66:35:f5:e2:cb:8e:c4:a3:
aa:46:31:bb:3b:f7:14:48:ce:a7:82:0d:e7:dc:72:b0:61:a8:
50:9d:44:fe:f8:54:b7:19:76:66:5f:d2:df:03:7b:80:53:60:
b3:71:d9:85:83:28:f5:ba:00:e5:54:d3:16:68:6e:d0:53:cc:
bd:85:a0:c9:cb:48:ad:f9:e0:cb:47:c3:72:95:5b:ee:fd:23:
1a:d8:9f:39:ed:d6:17:a5:97:30:57:75:f4:a6:b1:8f:b9:12:
65:07:c5:32:f6:e3:18:f2:10:90:d6:d8:05:d1:8b:3a:21:c8:
55:95:44:e5:f2:da:6b:cd:7a:76:53:2a:84:af:67:ab:2a:8f:
cb:56:68:ca:9c:6b:2e:7f:55:4d:67:26:88:b2:ef:85:77:a2:
f7:1b:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:39 2025 by rpki-client