Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/vWFNnZ7ku_bDv3cZWcUoTNY51xM.roa
File: vWFNnZ7ku_bDv3cZWcUoTNY51xM.roa (raw, json)
Hash identifier: zJdlE/i8/0ZO4I9H36rFnyS7sQvElC4bnZ8MDv94T8g=
Subject key identifier: BD:61:4D:9D:9E:E4:BB:F6:C3:BF:77:19:59:C5:28:4C:D6:39:D7:13
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 0194BBC91AA0CC57111578546F2C5E481A12
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/vWFNnZ7ku_bDv3cZWcUoTNY51xM.roa
Signing time: Fri 31 Jan 2025 09:55:06 +0000
ROA not before: Fri 31 Jan 2025 09:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214099
IP address blocks: 89.18.52.0/22 maxlen: 22
89.18.56.0/22 maxlen: 22
89.18.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 06 Feb 2025 08:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:c9:1a:a0:cc:57:11:15:78:54:6f:2c:5e:48:1a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Jan 31 09:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd614d9d9ee4bbf6c3bf771959c5284cd639d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:7e:3d:83:5e:50:e7:0c:95:27:0d:ca:52:
fb:b3:8b:41:b6:36:17:01:83:42:d4:21:37:b9:6d:
1e:6e:45:d6:c6:49:33:0a:eb:94:a3:31:b6:0c:de:
4a:72:96:51:60:01:3e:d0:21:76:30:41:01:54:ed:
6b:57:af:b4:7d:4d:fc:e4:02:0e:c4:f1:c9:e4:36:
cd:a4:2e:6d:93:b5:63:59:b5:13:34:03:e3:dc:81:
2a:49:7f:3d:16:45:ac:6c:db:e8:d7:61:57:25:fa:
ef:67:40:9c:fa:cb:e6:3f:c6:c0:bf:03:af:d6:20:
ad:2a:a8:32:2a:89:83:7b:9a:c6:d8:b0:28:32:50:
e8:b5:b2:67:8e:a0:fa:1e:21:41:63:52:44:d4:94:
9c:70:58:67:e7:41:4e:03:dd:b4:07:15:ba:fa:a5:
62:66:35:de:3d:45:0e:71:ed:0b:09:a7:d5:3a:17:
5b:1c:e0:21:16:9c:12:f9:37:5d:a8:0d:e8:fd:b1:
8b:7a:a3:42:7c:4c:91:89:a7:d4:c2:fa:dc:6a:6e:
e6:f2:a4:86:f7:92:18:18:28:ae:5e:68:6d:e9:28:
6b:ac:71:9f:c6:8d:58:fd:80:f4:96:a2:97:4d:35:
6a:8b:7a:e8:6f:5a:af:1e:b8:4a:17:fe:5b:3f:1e:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:61:4D:9D:9E:E4:BB:F6:C3:BF:77:19:59:C5:28:4C:D6:39:D7:13
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/vWFNnZ7ku_bDv3cZWcUoTNY51xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.52.0-89.18.63.255
Signature Algorithm: sha256WithRSAEncryption
85:99:ce:ee:2d:ab:66:44:50:2e:38:56:8f:75:a1:3a:5d:3f:
a9:34:a4:ae:0e:1d:ad:25:48:a5:84:6e:cb:3a:1d:c1:d1:eb:
22:47:00:d1:35:03:22:92:65:c2:51:01:d4:d9:ce:46:d4:c0:
50:36:a6:7e:11:7a:ab:10:f0:ef:12:65:2a:ce:7e:63:b6:00:
fb:9e:dc:bd:11:44:28:1e:13:42:61:05:ce:d6:9c:71:5c:e6:
62:18:83:de:33:e1:90:84:77:ce:2a:ae:34:4c:b6:45:08:94:
a7:4a:28:14:81:b3:d3:c8:21:6d:d2:60:cd:c0:ec:d3:67:39:
bf:48:b1:d5:0c:35:fc:54:aa:3b:45:25:c0:d2:b3:20:6c:e0:
78:bc:cb:34:ee:4b:52:60:17:56:28:9f:5f:13:07:b0:f0:40:
6b:fa:0c:29:90:fe:98:82:dd:81:34:eb:d8:91:a8:c6:e7:d6:
46:0f:de:2d:cf:82:f8:e8:cb:19:10:ab:74:16:25:e7:5e:f6:
a0:f5:b1:79:f3:4c:94:ea:3c:76:84:58:7c:2d:63:1d:27:88:
ea:63:a7:b8:f2:78:e1:f7:35:c9:e8:0f:07:90:5e:94:f0:3f:
cd:88:08:81:4a:d7:be:9b:be:97:5e:35:34:14:1a:34:74:10:
54:2e:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:20:59 2025 by rpki-client