Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BAaKpUMZtz2o-rAsvRTcPHTBhZc.roa
File: BAaKpUMZtz2o-rAsvRTcPHTBhZc.roa (raw, json)
Hash identifier: 3i6Dq5B1nXDP9QZjNtcvxubexEGpIZpT7mm6O1F86Co=
Subject key identifier: 04:06:8A:A5:43:19:B7:3D:A8:FA:B0:2C:BD:14:DC:3C:74:C1:85:97
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0193DA66156E56729F114AB36A4A5BCBF8DD
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BAaKpUMZtz2o-rAsvRTcPHTBhZc.roa
Signing time: Wed 18 Dec 2024 15:32:23 +0000
ROA not before: Wed 18 Dec 2024 15:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13237
IP address blocks: 89.167.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:66:15:6e:56:72:9f:11:4a:b3:6a:4a:5b:cb:f8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Dec 18 15:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04068aa54319b73da8fab02cbd14dc3c74c18597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:7b:97:6b:f3:4d:1e:bd:7e:2a:35:75:72:
c0:d0:a0:52:24:ff:aa:b6:05:51:b7:ba:b4:b0:1c:
be:2a:9d:df:87:e9:72:8b:8d:aa:41:ce:8d:41:45:
29:54:3b:a8:93:0c:42:0e:89:e6:26:d5:69:12:bb:
71:48:10:e2:e1:1a:fa:7a:36:5e:35:c7:58:f4:e6:
4e:43:2e:49:2d:7e:02:7e:84:80:1e:c2:28:cc:ce:
33:1b:51:6d:64:5c:c3:d6:e1:cf:54:61:9e:02:05:
6b:1b:1a:16:9b:61:3f:38:48:c9:42:c1:b9:17:86:
1b:1a:9d:3d:a2:dd:e0:f5:ac:c6:c6:8a:f6:4d:51:
06:1c:4c:7a:11:8c:ab:9e:a2:3b:1d:7e:09:11:9b:
eb:80:f7:3c:aa:34:7c:04:df:ca:16:51:0e:c4:ee:
68:21:19:88:6a:4b:21:66:b9:18:b9:1e:98:0c:8d:
a5:06:27:b7:b9:52:d1:da:e5:55:f2:98:14:01:d6:
53:18:74:ec:6d:c9:ea:d3:0e:81:9e:df:90:b0:cd:
41:3f:bd:03:0b:2d:2a:53:77:de:d1:7d:cc:2b:58:
10:96:a6:0f:90:92:e0:0f:b4:b2:da:54:fb:f7:49:
b3:4c:82:4a:58:65:18:49:cd:2d:a1:ec:69:fe:33:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:8A:A5:43:19:B7:3D:A8:FA:B0:2C:BD:14:DC:3C:74:C1:85:97
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BAaKpUMZtz2o-rAsvRTcPHTBhZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.229.0/24
Signature Algorithm: sha256WithRSAEncryption
69:51:2b:3b:b2:1d:6d:67:a0:c9:81:3e:05:66:94:28:36:92:
17:77:f9:5a:b7:22:7c:14:82:f1:30:40:44:88:64:2c:cb:d5:
c0:c6:cb:b1:0b:50:04:0b:ad:8c:c8:3a:78:6b:d0:ff:56:8f:
d8:41:5d:79:f0:86:c9:81:dc:c8:87:bd:af:17:4a:e7:6c:69:
55:92:63:81:e1:7b:16:f5:cf:fc:13:d1:6f:9f:a9:7f:de:57:
74:99:45:06:83:2d:62:3f:7b:f1:eb:b3:b6:d7:55:03:e6:d5:
bc:de:68:df:d8:d9:dc:17:60:b9:5e:c0:b6:7a:af:b3:0b:15:
b8:dc:3c:2e:53:ec:33:c2:7c:3f:73:b2:0b:a7:8e:32:60:7e:
c1:38:48:5a:e8:6b:77:be:13:43:0c:0d:10:bf:c0:78:54:1a:
7d:2a:91:6f:f6:e5:70:c0:b4:9e:50:a2:4a:f2:ad:5c:a4:b3:
50:b8:12:82:ef:57:e9:33:a7:e3:4e:31:05:13:aa:93:1b:df:
0a:4e:98:f5:30:8e:da:49:47:3a:b6:3d:2c:b9:5e:6c:4a:b8:
d8:a7:8f:23:0b:eb:cb:1c:b4:10:f7:a7:39:6a:e2:c1:a1:bb:
90:30:4f:54:14:b5:bb:f5:8c:c3:60:da:7d:54:7f:66:78:73:
09:75:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:29:52 2025 by rpki-client