Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/wdMatZRbsUYy5PjZIWWWOXpyx7M.roa
File: wdMatZRbsUYy5PjZIWWWOXpyx7M.roa (raw, json)
Hash identifier: gzEATULwwIIBlILlF3MUlH5PK2POW7tqRgqlmFRl2xM=
Subject key identifier: C1:D3:1A:B5:94:5B:B1:46:32:E4:F8:D9:21:65:96:39:7A:72:C7:B3
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 018F57A44DB6DC0A202A60E6E41FD10C4FF3
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/wdMatZRbsUYy5PjZIWWWOXpyx7M.roa
Signing time: Wed 08 May 2024 09:58:56 +0000
ROA not before: Wed 08 May 2024 09:58:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 89.23.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 14:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:a4:4d:b6:dc:0a:20:2a:60:e6:e4:1f:d1:0c:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: May 8 09:58:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1d31ab5945bb14632e4f8d9216596397a72c7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:58:2b:ea:19:84:b3:7e:84:6d:d6:37:9c:
90:89:7a:27:8f:86:8c:d3:bf:c2:e9:c5:d1:c0:c9:
0d:74:1e:4b:c2:b8:c4:25:17:e2:0a:89:d1:b9:02:
d1:ad:c7:fb:2e:d1:fd:d1:39:b4:9a:70:0a:aa:1b:
f5:32:22:17:94:f5:fd:c8:97:0f:fc:e0:12:92:44:
4d:da:a4:6e:81:5f:19:eb:e3:cc:a8:e3:e6:43:4c:
4e:35:68:71:8a:54:e0:62:2e:62:b8:72:c9:2b:ad:
ea:48:64:e3:75:c9:ea:2b:be:eb:7f:3b:11:a0:b9:
46:4c:de:52:3d:63:83:1b:ab:42:b4:5a:1c:78:ec:
74:c7:e2:4c:ba:e5:c4:a6:da:66:32:14:07:1c:a2:
8b:ad:3c:c4:22:a4:3b:bc:57:af:0c:98:c4:46:0c:
a2:b0:b2:1c:5e:4f:39:0c:1a:0a:3b:3a:62:21:ac:
55:71:0a:0d:7a:55:03:49:59:9b:36:df:0a:d4:08:
4c:c1:15:98:9c:41:e1:6f:ee:94:b0:10:79:86:09:
3d:54:87:37:92:f6:fd:ad:37:68:fc:d6:06:0d:59:
13:1d:5f:49:15:e3:34:d0:3b:82:9c:70:56:b5:3d:
72:39:cc:e3:db:53:80:e0:93:88:67:6e:6d:08:60:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D3:1A:B5:94:5B:B1:46:32:E4:F8:D9:21:65:96:39:7A:72:C7:B3
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/wdMatZRbsUYy5PjZIWWWOXpyx7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.126.0/24
Signature Algorithm: sha256WithRSAEncryption
82:67:fb:95:69:62:62:6b:37:e0:df:aa:c0:3c:c4:c4:f9:62:
a4:2f:a1:4b:18:6b:4f:93:f2:a3:5f:3e:b4:9a:da:b5:f9:3f:
96:b5:59:64:b2:ea:8c:6f:31:b4:66:af:11:11:86:e6:40:ce:
ee:0e:3b:45:0e:fe:19:56:d1:39:0d:81:80:a4:01:55:0b:47:
a8:a8:3f:72:19:0e:54:ee:9e:bb:aa:84:d5:f0:a3:4c:2b:a3:
f4:b7:7e:c6:a1:cd:33:e1:6a:5d:ad:72:0f:9c:d4:15:1d:42:
12:0e:42:cf:b3:c6:e7:74:24:3e:e8:5f:1b:fb:47:5b:bd:20:
89:b7:ac:21:34:89:1a:6b:96:13:dd:b8:d3:3a:d8:13:d9:c4:
b5:6f:94:c2:ef:6a:9d:67:08:30:e6:99:f2:5f:c5:c8:e9:73:
00:0d:2f:78:28:86:5b:8f:15:f9:29:81:25:11:f2:5e:0b:05:
52:98:0d:3b:63:33:bc:ec:93:7f:23:24:bd:2f:b3:db:b4:00:
87:f5:6d:10:87:b0:85:bb:6d:0c:7f:ef:ad:61:d4:52:f0:0c:
1e:70:54:96:6c:05:cf:c6:74:fa:fc:d2:d1:ca:a5:59:ad:12:
67:fc:a3:37:39:3c:9d:28:9c:29:1d:e1:07:18:ce:9b:55:95:
d5:be:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:01 2025 by rpki-client