Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3m02DlpALW-PiptsdCy5pjhh5S4.roa
File: 3m02DlpALW-PiptsdCy5pjhh5S4.roa (raw, json)
Hash identifier: F5DpUhSOz8glDRjnGOJlz+5G9krUVMvuwglRyfqrtkc=
Subject key identifier: DE:6D:36:0E:5A:40:2D:6F:8F:8A:9B:6C:74:2C:B9:A6:38:61:E5:2E
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB6C2CB6F12FB5CDE3807D45FFE989
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3m02DlpALW-PiptsdCy5pjhh5S4.roa
Signing time: Mon 01 Jan 2024 02:30:09 +0000
ROA not before: Mon 01 Jan 2024 02:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216127
IP address blocks: 194.28.226.0/24 maxlen: 24
89.23.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 12:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:6c:2c:b6:f1:2f:b5:cd:e3:80:7d:45:ff:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de6d360e5a402d6f8f8a9b6c742cb9a63861e52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:17:a5:15:34:24:56:19:52:08:84:1d:a2:
01:be:ea:d7:30:86:a0:66:18:ba:30:40:42:f8:ae:
d2:63:36:0c:eb:52:54:45:1c:b1:b4:9b:f0:dc:2d:
7b:1b:a5:0c:a0:50:79:c5:59:d5:36:86:c5:92:f0:
fc:bf:67:fd:70:f7:f9:86:7c:80:97:de:55:b8:c1:
1b:95:2c:f3:0c:45:2c:9d:ad:07:95:09:54:40:d9:
04:8f:be:d6:14:a7:86:47:25:7b:f7:9a:aa:64:0a:
f7:06:b4:90:5c:20:7e:b5:ad:ca:32:ba:d7:76:61:
07:c4:e6:be:55:a7:89:41:17:c4:cd:1d:78:87:44:
8d:9c:1f:43:e3:22:6c:a7:59:63:28:e1:31:98:67:
01:1f:b0:14:a7:c3:68:e1:20:26:29:98:71:95:2b:
92:50:ef:62:2a:b4:7c:3a:a4:34:05:5b:27:01:28:
86:bc:98:bd:ba:1d:14:94:b9:df:d7:3e:63:c0:c5:
93:e4:36:b4:c7:29:22:f0:06:2a:7f:1d:12:39:24:
a5:20:bc:56:64:c5:89:65:f0:6d:c3:d0:ab:81:c9:
2a:43:86:87:79:99:ba:7e:7b:c3:ec:80:1d:63:7b:
94:ba:03:19:f6:8d:c3:13:50:d3:74:d7:89:fc:45:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6D:36:0E:5A:40:2D:6F:8F:8A:9B:6C:74:2C:B9:A6:38:61:E5:2E
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3m02DlpALW-PiptsdCy5pjhh5S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.123.0/24
194.28.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ef:d3:0c:ff:e8:35:66:c8:40:95:5a:2c:23:c5:76:ea:ff:
28:04:21:4d:76:ae:76:d4:e8:26:77:f4:99:c3:e6:d2:b4:45:
d7:f6:bc:00:b6:02:c9:7e:a6:66:2b:3b:dc:c8:ad:2a:41:35:
d3:c4:95:21:6e:a0:e1:02:3e:03:15:49:3b:a6:87:3f:ca:2e:
f7:d8:30:e4:9e:bb:57:a9:10:12:ff:7e:e4:76:0a:ba:6d:1b:
28:67:4e:97:e7:16:92:87:c0:0e:5c:d3:1c:d3:90:1f:13:c0:
19:8a:d7:60:86:8c:ce:3d:15:e5:4e:c5:c6:06:bc:ee:3b:33:
0b:17:2e:1f:d5:98:13:e5:89:cc:cb:29:14:51:d2:c2:63:23:
8d:19:67:1a:64:ca:32:9a:38:d8:6c:4c:3d:d8:0b:fc:37:16:
3f:6c:a6:89:ff:50:74:f6:57:2d:20:6d:c8:68:db:80:e1:51:
84:be:2f:c5:90:c5:e2:15:0d:72:82:8b:b8:55:60:56:0e:31:
65:1d:05:a9:0b:34:32:74:4e:9d:18:35:81:5f:d1:22:a1:fc:
3f:95:ef:e8:c5:b3:82:b4:52:f6:0e:39:4a:e5:03:d3:e6:50:
f4:6f:c9:bc:04:13:97:ac:6e:9b:81:2f:2f:2d:07:3b:f3:b6:
37:72:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:54 2025 by rpki-client