Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Xwbg2EKitygrjOue76WQ9ZB8Xgg.roa
File: Xwbg2EKitygrjOue76WQ9ZB8Xgg.roa (raw, json)
Hash identifier: Zv60O/dLzxUYHTvbW2bwmErmpeIBnb60XJOpypY8cp0=
Subject key identifier: 5F:06:E0:D8:42:A2:B7:28:2B:8C:EB:9E:EF:A5:90:F5:90:7C:5E:08
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D68C019FAD8497643748FB0D3BF8A18E9
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Xwbg2EKitygrjOue76WQ9ZB8Xgg.roa
Signing time: Fri 02 Feb 2024 07:37:16 +0000
ROA not before: Fri 02 Feb 2024 07:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200784
IP address blocks: 89.47.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:c0:19:fa:d8:49:76:43:74:8f:b0:d3:bf:8a:18:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 2 07:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f06e0d842a2b7282b8ceb9eefa590f5907c5e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:bb:c9:7c:ff:06:44:1c:fb:d4:23:08:80:
4c:e3:14:0f:21:d5:54:07:97:99:23:4a:64:84:cf:
73:1a:32:48:9b:f7:94:04:86:9e:54:61:81:bd:cf:
eb:90:46:7d:64:00:dc:db:7e:79:64:17:ad:b4:98:
d0:03:d7:05:ce:a6:19:66:f4:17:1a:a8:43:5f:07:
14:6b:dd:48:6d:58:23:5a:e2:f3:7f:de:2b:c4:ed:
47:a0:48:ef:b4:cc:a0:d2:99:18:be:a7:02:81:ac:
a3:62:61:db:2b:03:e4:8e:b4:f6:45:16:73:d1:c9:
4a:0e:fd:0b:47:fe:4a:f7:48:39:52:55:1f:4a:e6:
42:53:b1:fa:34:96:66:ca:16:d6:e7:bb:18:e4:e8:
4b:bb:6a:a2:f9:f5:11:0f:41:95:f4:7d:eb:05:c9:
01:69:fc:b0:5e:e1:1e:b7:4c:38:55:e3:fb:37:c2:
72:49:22:93:00:5e:00:97:54:b2:90:76:f2:e4:d6:
9f:10:36:2e:cc:5f:26:3a:85:38:52:86:2d:96:bc:
a8:ce:0c:8a:4b:5a:c8:98:b7:b5:42:b3:68:f1:f4:
8c:eb:8e:01:41:f7:e8:5d:73:d2:41:71:fc:af:96:
b3:57:52:df:9a:cb:93:a7:47:2f:9b:3b:e0:3e:de:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:E0:D8:42:A2:B7:28:2B:8C:EB:9E:EF:A5:90:F5:90:7C:5E:08
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Xwbg2EKitygrjOue76WQ9ZB8Xgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.118.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e5:e8:c4:05:03:13:89:c5:43:80:87:1e:46:c2:48:a0:e7:
18:7a:07:62:7b:fd:ea:ef:aa:e3:dd:4f:4e:ea:a1:9c:0d:af:
d6:2d:36:6c:a6:e0:49:57:7e:f0:ce:0a:f6:38:f1:24:7b:a2:
d4:67:1f:bc:67:6e:cb:f5:61:b6:a4:e2:33:8c:7c:da:7f:88:
07:2c:67:51:77:43:3c:be:31:38:86:68:28:94:86:ee:b0:85:
de:f1:39:9d:04:b6:b9:26:42:a1:48:de:3a:45:4e:ad:b2:98:
a4:cf:a2:4e:85:73:74:5a:fd:70:1c:c1:8f:a7:1b:7a:fa:0e:
ff:e4:82:b1:85:d8:99:87:30:5f:bc:03:2e:c3:cc:44:f8:9c:
6c:85:fb:bc:61:63:f7:bd:ed:bf:12:8d:47:7f:95:05:fa:17:
8a:05:2f:9e:fb:7e:a5:ab:cc:2b:bf:6f:58:16:7d:74:a6:7a:
49:3d:69:d7:93:61:31:ae:0f:bb:63:f5:5d:84:92:54:a5:28:
e1:7a:5e:1d:45:18:ed:81:3e:88:cc:9e:71:05:24:74:a1:1a:
af:e4:60:c1:7a:d3:83:72:45:18:10:f3:4c:1d:95:c9:75:16:
c3:ca:6c:63:1d:1d:9a:b3:3c:e7:90:6d:24:07:01:a5:e0:2e:
fd:e6:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:27 2025 by rpki-client