Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1cXPyo6rGl-e6fuzw73iIfuBKWY.roa
File: 1cXPyo6rGl-e6fuzw73iIfuBKWY.roa (raw, json)
Hash identifier: LTcsc90VYMb62/S4Kd5Hr4Bb0flsFRCSRgbVu5IbepQ=
Subject key identifier: D5:C5:CF:CA:8E:AB:1A:5F:9E:E9:FB:B3:C3:BD:E2:21:FB:81:29:66
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6C8B03D3CB3375582D366E29B397D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1cXPyo6rGl-e6fuzw73iIfuBKWY.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200784
IP address blocks: 89.47.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c8:b0:3d:3c:b3:37:55:82:d3:66:e2:9b:39:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5c5cfca8eab1a5f9ee9fbb3c3bde221fb812966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:95:9f:f9:f4:a8:20:be:80:49:de:63:4d:
61:7e:b8:ea:a2:82:50:1b:78:5a:4b:ca:87:18:c7:
b9:fa:ec:75:b3:b6:f0:21:54:5b:74:45:42:88:55:
51:a3:69:45:82:cb:e9:aa:3b:09:46:96:b9:d7:fe:
ea:f0:a7:9e:ec:b3:4b:60:ab:c1:28:4c:f7:29:4c:
02:cf:ad:78:c5:11:fa:d7:c7:fc:85:3e:3b:24:88:
b0:b1:bb:eb:8b:9e:24:30:cf:58:48:79:e3:23:47:
c2:78:41:dc:65:a0:82:95:0a:45:8c:7d:78:55:d0:
de:31:6c:59:db:56:83:38:6b:c6:83:9c:7e:a3:f5:
ba:33:36:c7:d5:a9:d5:5b:c7:0b:c2:e0:e7:c2:90:
eb:25:bd:94:7e:98:ab:03:3b:e7:a6:82:5d:c1:6e:
2b:37:84:e9:2b:ff:16:3f:d2:b9:68:44:a8:9f:e3:
7e:de:1a:1d:8a:53:ab:d5:9d:9b:6c:fe:1a:f1:e0:
55:2a:1c:d9:27:96:84:6f:14:42:75:83:c7:13:de:
c6:c7:90:a7:e1:a7:7e:10:0a:51:c6:74:79:e1:be:
18:c0:79:a9:67:20:8a:17:44:5b:b2:a3:49:6e:a8:
d8:9c:2f:70:8d:b6:77:49:e1:0a:af:b4:97:96:d0:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C5:CF:CA:8E:AB:1A:5F:9E:E9:FB:B3:C3:BD:E2:21:FB:81:29:66
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1cXPyo6rGl-e6fuzw73iIfuBKWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.118.0/24
Signature Algorithm: sha256WithRSAEncryption
64:94:e4:ca:3e:9f:25:3b:35:1c:25:5e:de:29:27:a2:fc:fa:
c9:b1:4a:35:60:82:9c:72:de:80:c1:00:f8:b1:57:f8:8d:e8:
70:ce:3a:ef:72:ac:61:18:f4:8c:79:6e:32:5f:e3:6f:bb:64:
ad:a2:cd:4c:ac:8f:8f:7c:a5:45:68:1f:a7:9b:84:b6:3b:bf:
4d:db:67:b2:17:45:a6:81:ed:c4:0e:b9:50:c9:67:2d:b7:5c:
9d:a2:db:e3:d4:6b:f5:61:9d:5e:ca:5e:10:a3:e4:67:60:a5:
61:c9:13:4b:3d:e5:22:ad:b8:f0:ae:e0:a0:6a:3a:81:57:44:
0f:9d:68:96:30:1d:1c:78:36:02:e1:26:42:7f:21:16:cc:f2:
c5:2e:a7:96:b9:96:9b:1b:43:42:53:ed:91:1d:85:41:ae:0e:
39:eb:fa:3f:b4:f9:68:1b:3e:1c:68:74:63:f2:a1:c3:5a:56:
7f:10:6d:5d:a3:08:e7:63:5f:67:b3:93:49:15:ea:43:ed:b5:
22:56:03:f1:6d:bc:b3:c5:5e:20:e8:7e:86:77:1e:6e:6f:dd:
02:ea:0e:a4:7c:7e:f1:66:21:b1:81:54:1f:a9:e5:43:28:31:
6a:0b:ea:06:6f:a9:f3:b6:b4:7e:71:86:f2:d2:03:df:ce:2e:
12:2a:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:58 2025 by rpki-client