Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/h5zQwQFrTogNcx93zNSto1jmezU.roa
File: h5zQwQFrTogNcx93zNSto1jmezU.roa (raw, json)
Hash identifier: ir/KEdxvljUdDRjBD0K62YSD4ru1hU69sf7TDYQjiWc=
Subject key identifier: 87:9C:D0:C1:01:6B:4E:88:0D:73:1F:77:CC:D4:AD:A3:58:E6:7B:35
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 019127BF27BAC503453E20186CBC623BDEF0
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/h5zQwQFrTogNcx93zNSto1jmezU.roa
Signing time: Tue 06 Aug 2024 12:52:04 +0000
ROA not before: Tue 06 Aug 2024 12:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49418
IP address blocks: 89.185.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:bf:27:ba:c5:03:45:3e:20:18:6c:bc:62:3b:de:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Aug 6 12:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=879cd0c1016b4e880d731f77ccd4ada358e67b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:26:3d:32:50:bc:de:d9:d6:9e:cd:b5:90:
f7:df:d9:e6:8c:10:07:32:35:cc:9c:6e:0a:72:bc:
50:ce:0b:0d:f0:53:46:43:c8:60:0b:f6:b6:98:70:
0f:c9:d9:15:c6:f3:a3:42:6e:9f:31:4a:a0:2d:ec:
40:5d:3b:56:3f:52:65:12:da:4f:5b:f9:84:f3:d1:
4a:51:64:19:c1:ac:46:84:b1:e5:c4:9f:a2:91:dc:
4f:05:67:7d:65:de:aa:e0:6c:7e:c2:64:6a:99:64:
68:1e:d7:b9:b8:14:47:72:48:8d:bc:b6:03:fe:33:
7a:72:b9:ac:d3:c4:81:78:a2:98:82:6b:cd:24:5f:
e2:cf:c6:55:37:0e:9f:ae:ea:83:0d:8c:66:fa:f9:
21:b8:3a:05:54:34:ac:ba:9f:cd:08:35:d7:2d:bf:
6c:ca:7f:d6:40:2c:da:e7:e6:a7:52:3b:62:54:bc:
f7:c4:df:14:6f:bf:b8:fe:ac:09:8a:9c:c8:45:96:
05:64:c4:e5:42:bb:6a:98:d0:b5:8b:8b:9d:a7:3c:
ce:e5:8b:7c:d7:37:b9:81:9d:5b:07:b9:fe:bc:38:
3e:10:cb:35:02:ed:73:02:67:58:c2:79:19:58:d0:
68:9c:06:83:28:fb:31:9b:d0:5c:c9:c5:2c:35:ec:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:D0:C1:01:6B:4E:88:0D:73:1F:77:CC:D4:AD:A3:58:E6:7B:35
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/h5zQwQFrTogNcx93zNSto1jmezU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.83.0/24
Signature Algorithm: sha256WithRSAEncryption
27:94:d3:e7:c5:cd:9b:2c:6f:ee:06:4d:97:29:1d:2f:98:2e:
5c:6a:e7:b5:f3:e7:e1:43:44:1a:c8:2b:3b:d0:02:cc:9f:93:
6a:d8:11:7f:04:8a:d0:55:14:c5:29:98:9e:04:67:d2:fd:6d:
28:b2:08:a2:af:d4:5d:1e:73:b4:4c:48:09:9e:5b:f6:30:c8:
15:d0:a9:71:50:00:a5:2d:60:5b:61:df:72:52:0a:fa:a5:d6:
20:fc:89:92:53:2d:2f:43:42:5e:21:51:d6:30:83:e6:ff:44:
b1:c8:2f:93:f0:dd:e1:ac:ad:0e:19:07:bd:7e:79:7a:3d:00:
9c:35:96:a1:19:06:19:02:3e:8d:1f:e5:8e:ad:0d:1d:cd:54:
76:c6:01:88:76:bd:37:3e:3c:d3:4b:0f:97:1a:de:a5:52:bc:
f6:48:9d:6b:71:93:ec:ff:4b:9b:96:5f:cc:cd:c6:95:be:6c:
10:1a:dd:2d:7e:f8:63:d4:bc:d2:83:98:6a:ca:3c:18:c2:da:
bd:1a:72:34:53:e8:3c:d5:3b:17:4b:ab:1a:cd:b3:d1:18:20:
eb:45:f5:0c:f7:aa:c5:16:c3:af:c3:a0:05:2a:9a:40:6b:18:
7e:10:32:40:aa:ed:b2:99:54:f2:95:54:35:33:53:87:9a:55:
a4:cd:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:32 2025 by rpki-client