Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/v7tS-BbG0iHopVlA0uNlKJpIQE8.roa
File: v7tS-BbG0iHopVlA0uNlKJpIQE8.roa (raw, json)
Hash identifier: 8UaARx0PDBU4s0A9TiudYPwDKhN1boRhvHq3U58aP9s=
Subject key identifier: BF:BB:52:F8:16:C6:D2:21:E8:A5:59:40:D2:E3:65:28:9A:48:40:4F
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 018E5154F12DE44FF487D8918A98A793C3DB
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/v7tS-BbG0iHopVlA0uNlKJpIQE8.roa
Signing time: Mon 18 Mar 2024 11:31:45 +0000
ROA not before: Mon 18 Mar 2024 11:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215868
IP address blocks: 89.40.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:54:f1:2d:e4:4f:f4:87:d8:91:8a:98:a7:93:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Mar 18 11:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfbb52f816c6d221e8a55940d2e365289a48404f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:b7:10:38:37:a6:8a:fa:43:82:13:b2:4f:
2f:12:bd:3a:c0:4e:0e:77:73:3e:6a:31:52:64:b2:
17:ef:e6:63:f9:6d:fe:3b:a1:6d:11:63:9a:46:89:
39:20:84:c6:f2:8e:0a:62:50:69:ff:c6:0b:86:7b:
59:21:59:18:53:65:31:64:e1:79:a5:43:1b:6b:fa:
31:b1:3a:91:00:cb:e2:9f:d1:67:ef:fa:69:bc:88:
b3:7c:a0:e7:58:43:6c:59:15:6f:25:14:48:6b:52:
0a:de:af:01:49:72:fe:9f:b9:ff:85:5d:8b:26:3f:
32:95:9c:81:c6:9b:b3:ad:b1:9d:d9:94:ea:9b:87:
35:d6:55:68:86:c6:a8:b8:ec:cd:5a:df:19:c9:7f:
e3:ca:78:6a:3f:5b:0a:3f:11:db:b8:bf:b8:24:cb:
4d:1b:8c:30:f4:98:38:a3:ec:e8:24:f4:70:eb:7a:
c5:f9:c9:4e:ef:16:73:1e:0b:59:b0:c2:91:00:d0:
ba:fe:bd:b1:8e:0b:86:01:aa:3e:14:fa:11:24:45:
31:e7:da:52:f8:e1:42:8a:ef:6c:1d:ea:04:bd:51:
28:08:f7:a3:83:59:32:ef:9f:be:f7:62:33:b6:cc:
73:38:55:5f:05:1d:65:e8:29:d1:90:37:7e:fa:b8:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:52:F8:16:C6:D2:21:E8:A5:59:40:D2:E3:65:28:9A:48:40:4F
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/v7tS-BbG0iHopVlA0uNlKJpIQE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.28.0/24
Signature Algorithm: sha256WithRSAEncryption
52:32:d7:b9:e5:23:58:f0:c3:73:22:77:ad:e5:e4:4c:80:65:
79:eb:38:25:17:12:bb:33:b8:fa:a9:ea:16:1d:91:75:ef:6a:
63:a8:5a:ec:50:a1:85:01:3f:64:1a:a6:97:68:93:93:33:59:
63:36:be:99:b6:44:ae:dc:ca:35:c5:94:e1:4d:e6:75:74:68:
f5:f6:1a:30:2b:38:58:6a:6e:bd:1e:af:e4:9b:47:83:2d:4a:
66:8d:ab:cc:2b:e3:8a:e9:65:5a:52:cd:3a:15:c5:ef:d5:31:
5f:3f:2c:66:61:7b:67:82:f5:ea:47:62:24:7d:20:a1:3f:be:
e4:6d:fa:b0:59:c9:b9:ae:80:12:07:bd:07:1c:9a:67:ef:13:
72:42:0a:65:f3:96:5b:32:2f:bb:61:8d:5f:0a:e3:ab:f5:ee:
16:a6:af:fa:f0:73:24:10:80:8b:94:35:1e:0c:2b:a8:fa:2c:
65:42:71:64:0b:43:17:16:1f:4e:24:12:39:ab:3f:c1:98:17:
5e:74:8c:bc:8a:c6:2c:d8:20:86:3e:07:44:63:a9:86:25:d6:
bd:18:67:cf:ac:0b:a1:2e:2b:fd:17:e8:8d:f0:ea:cd:2b:65:
2f:57:ca:a5:6a:6d:a3:c8:f2:a0:14:9a:a2:f3:0e:d1:56:97:
29:28:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:27 2025 by rpki-client