Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/l0q5MQIuSV3OE3VSHhfnTGO7W8w.roa
File: l0q5MQIuSV3OE3VSHhfnTGO7W8w.roa (raw, json)
Hash identifier: YXfezHPK/46J96sr7uePsOrGhlUyVfXmmKbuD9/u/1k=
Subject key identifier: 97:4A:B9:31:02:2E:49:5D:CE:13:75:52:1E:17:E7:4C:63:BB:5B:CC
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A918F541B1EF4F52C66E93F0D87F2
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/l0q5MQIuSV3OE3VSHhfnTGO7W8w.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42875
IP address blocks: 89.167.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:91:8f:54:1b:1e:f4:f5:2c:66:e9:3f:0d:87:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=974ab931022e495dce1375521e17e74c63bb5bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:b4:39:8e:bc:ad:b2:ce:f2:f5:1e:9f:e0:
e2:89:0a:6d:f7:1c:a8:84:d9:d0:c0:f5:0c:bf:cb:
ef:75:79:1a:7a:47:09:57:0a:06:df:f2:00:78:16:
47:db:f6:f9:f7:0e:b4:bf:bd:20:97:1a:c6:ba:4f:
d6:e9:68:e6:a6:de:fa:70:71:6d:d3:e8:f8:cd:09:
45:8d:f1:f0:46:6f:83:46:6e:43:29:76:33:24:b7:
5e:63:be:c2:41:97:e6:36:5a:c5:c8:c3:7d:fa:1d:
23:71:af:7b:90:19:ae:b7:f9:17:f6:ea:87:66:f5:
fa:ef:dd:22:66:7b:81:91:a6:f0:36:db:58:7c:c2:
b7:f7:77:98:68:d1:c0:07:c1:53:bb:77:12:2c:25:
59:a3:7a:e8:0b:19:0c:55:e2:4f:c4:32:c6:81:20:
65:69:9a:47:bc:61:60:22:e3:ae:3b:fb:62:29:94:
6b:97:a3:dc:9c:48:8e:df:91:4e:a7:3a:f4:28:2f:
53:f8:7a:be:a1:87:b5:d4:7f:32:49:44:23:2a:2e:
c2:78:ad:0d:79:75:c5:c7:7c:08:91:5d:94:36:3f:
ae:87:32:45:e4:c5:80:f7:ae:53:a3:f7:0b:36:be:
fa:5e:ad:54:8c:4b:61:39:39:51:6c:a5:09:ee:16:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:B9:31:02:2E:49:5D:CE:13:75:52:1E:17:E7:4C:63:BB:5B:CC
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/l0q5MQIuSV3OE3VSHhfnTGO7W8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.173.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b4:22:e0:53:23:33:3b:b0:d8:d4:b8:49:3e:b3:ab:e1:ff:
b7:e7:7f:ab:ca:3a:42:34:9f:a6:11:59:dc:51:e0:63:44:4a:
cf:b5:bb:73:98:1c:4e:96:30:34:af:47:bd:87:6a:c6:f8:3b:
1c:fe:bb:79:b5:12:fe:6b:bb:11:24:05:89:29:39:c8:25:44:
76:b4:b8:25:ab:2d:00:98:b2:0e:de:01:e2:7c:0d:b8:9b:c8:
ec:0e:8c:cc:22:8d:c9:a0:86:78:01:e7:1d:60:7f:e9:55:63:
a8:90:33:24:38:10:3b:c9:30:b8:bb:f0:a7:b0:3d:84:c9:12:
bc:4b:2e:3b:aa:81:dc:03:2e:d0:80:9c:e2:5b:eb:f2:64:42:
5e:3c:3f:a0:7d:3c:76:b5:d4:43:79:4a:b3:a1:af:ff:74:29:
d5:e1:75:59:ba:1d:5d:6c:c3:67:1d:9d:95:15:c9:12:e1:7d:
26:0c:a9:6c:13:ca:1a:be:02:b0:25:9e:fa:69:2c:6e:75:61:
4e:29:e1:26:bc:25:16:09:2f:1e:69:33:b8:8f:04:a3:93:60:
b6:e6:29:00:2e:3c:63:6c:68:b6:84:59:26:3a:b2:8c:f7:5b:
dc:4b:6a:1b:e4:71:2b:29:b0:fb:73:64:98:99:61:a3:05:39:
54:c3:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:45 2025 by rpki-client