Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/szsLsKW-ho70NCLBcHWBtgKbois.roa
File: szsLsKW-ho70NCLBcHWBtgKbois.roa (raw, json)
Hash identifier: 7ib39M7cjQwkifKKn0nHl1cRT3RSj7kcS1UZ4kKRd24=
Subject key identifier: B3:3B:0B:B0:A5:BE:86:8E:F4:34:22:C1:70:75:81:B6:02:9B:A2:2B
Certificate issuer: /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial: 018E181CC049CA791F61503DA40A35EC2D2F
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/szsLsKW-ho70NCLBcHWBtgKbois.roa
Signing time: Thu 07 Mar 2024 08:52:01 +0000
ROA not before: Thu 07 Mar 2024 08:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41381
IP address blocks: 89.105.64.0/21 maxlen: 24
89.105.72.0/22 maxlen: 24
2a01:7000::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:1c:c0:49:ca:79:1f:61:50:3d:a4:0a:35:ec:2d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Validity
Not Before: Mar 7 08:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b33b0bb0a5be868ef43422c1707581b6029ba22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:ae:8b:9f:f4:d1:aa:0c:55:2a:f0:e3:4a:
cd:f8:64:f6:01:58:db:d1:f0:ad:a8:13:c4:45:f9:
24:af:fa:49:0e:3f:42:40:9c:7e:42:18:be:45:52:
2a:15:e8:a7:18:1b:18:17:18:1a:c1:08:5b:ce:61:
f6:0e:c5:3b:19:63:21:10:35:6d:ba:27:f2:23:0e:
b6:46:b3:0a:25:b7:a8:e3:15:60:7d:4e:3a:b6:d1:
67:d0:46:b5:d5:15:40:d2:a0:a8:46:7a:34:45:17:
3e:8e:d2:e8:69:3a:b7:1a:fd:cd:48:63:d4:ec:34:
0a:e3:f6:f8:88:74:39:23:ad:86:52:a3:54:a7:75:
32:e3:a1:f6:fb:0a:ae:63:96:5d:30:64:11:18:80:
56:c6:13:91:e5:f7:f1:61:6f:e1:9f:a9:e8:53:00:
41:05:5f:f1:e4:91:0b:6c:9f:d8:2e:5c:cf:4e:d0:
0e:a1:9f:08:f8:a0:eb:96:e8:ad:61:31:7f:3f:d6:
bd:17:df:86:bc:dc:82:3b:93:89:d0:12:1e:21:7c:
b5:0a:8f:83:d0:2a:b1:e9:af:b3:29:ab:3d:7f:21:
b5:65:75:08:f5:3d:4d:1f:03:6a:1d:de:04:eb:6a:
7c:a9:5e:dd:44:90:e3:e9:c5:59:ed:21:cc:72:40:
57:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3B:0B:B0:A5:BE:86:8E:F4:34:22:C1:70:75:81:B6:02:9B:A2:2B
X509v3 Authority Key Identifier:
keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/szsLsKW-ho70NCLBcHWBtgKbois.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.64.0-89.105.75.255
IPv6:
2a01:7000::/32
Signature Algorithm: sha256WithRSAEncryption
e5:15:73:1f:9c:a6:64:3d:4a:cd:8a:a6:6f:e4:34:1d:2c:78:
48:b3:1b:c1:a6:0c:00:3e:22:c1:d4:f3:44:6e:50:8f:34:3c:
00:72:b6:9f:25:ab:a8:af:ac:04:de:70:57:28:16:67:72:b6:
c6:fd:97:a8:91:d3:48:37:5e:43:c2:24:20:bc:d1:a2:43:f4:
2f:c4:c5:c7:b3:bc:25:e8:a2:a8:f4:96:6a:b3:d5:04:a7:92:
82:6e:2d:dc:be:49:07:eb:fd:e5:15:26:23:ab:e0:ee:82:8a:
88:36:78:ec:20:a7:40:91:f9:a0:c9:db:bf:b7:8d:49:31:6f:
51:ac:06:6e:06:d0:dc:b4:7d:05:1a:d3:f1:73:70:2e:32:e4:
d6:93:ea:0e:62:0a:98:9a:08:b6:89:ed:2d:7e:1b:e7:fa:10:
d4:03:61:2c:70:2f:cb:cb:8d:68:1b:48:4f:bc:7b:e8:5e:cc:
cc:a9:a7:eb:c8:75:b2:b0:26:c4:00:a2:59:38:13:a2:aa:fe:
b1:df:6d:6c:32:d5:5d:41:fb:28:e2:c2:e5:97:d2:9a:1b:bf:
e4:88:f2:88:95:23:b7:85:66:ba:14:50:9c:66:fb:60:d8:c5:
42:a5:47:3d:ea:f7:17:7c:96:5f:4b:7a:7d:62:c2:59:98:50:
d7:38:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:06 2025 by rpki-client