Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/IluCudq8jOdBC2Ote47E8rpL_g0.roa
File: IluCudq8jOdBC2Ote47E8rpL_g0.roa (raw, json)
Hash identifier: XcH8AdlpV6rRgyR7XT957VR9+1tHaUWELjldJNtt4X8=
Subject key identifier: 22:5B:82:B9:DA:BC:8C:E7:41:0B:63:AD:7B:8E:C4:F2:BA:4B:FE:0D
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC36FB8FA9FA545F1EE51163486FED4A0
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/IluCudq8jOdBC2Ote47E8rpL_g0.roa
Signing time: Mon 01 Jan 2024 05:12:08 +0000
ROA not before: Mon 01 Jan 2024 05:12:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 89.23.112.0/24 maxlen: 24
89.23.115.0/24 maxlen: 24
89.23.118.0/24 maxlen: 24
89.23.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:6f:b8:fa:9f:a5:45:f1:ee:51:16:34:86:fe:d4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 05:12:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=225b82b9dabc8ce7410b63ad7b8ec4f2ba4bfe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:8e:15:e3:88:65:f4:a1:d5:21:46:34:1d:
2a:79:3f:b0:71:da:91:a0:96:4c:5c:68:0c:67:3c:
b1:80:1e:20:50:80:1d:30:67:3c:19:49:3e:bd:f5:
a1:71:66:3a:83:6e:5f:0e:47:c3:7c:27:c6:47:56:
34:40:f6:06:ad:bf:b6:7d:0c:1a:dc:9d:89:da:71:
e1:50:3d:2a:0d:dd:86:e1:ce:10:23:67:40:f7:94:
c5:c0:76:70:98:48:87:8e:da:5b:4d:ed:57:a4:a5:
75:7a:e3:15:13:5e:a3:33:f2:0a:54:c3:13:b2:23:
88:d4:2d:e6:59:cf:ce:56:5b:62:8e:11:36:eb:56:
3a:25:9a:12:5b:dc:93:00:8c:75:c3:58:10:ba:c5:
83:82:e9:76:15:34:1a:6d:5c:6e:94:00:de:9f:17:
62:a5:de:27:54:7b:20:84:50:2e:e2:0c:c8:72:6b:
a4:cc:64:40:39:2a:30:5c:3a:26:db:3d:ca:78:78:
6b:ea:44:f5:3a:76:65:de:7d:6a:9c:b1:7e:ab:cf:
d0:39:b1:c4:98:3a:ec:4a:7b:14:b7:fd:00:07:57:
a1:74:fd:e3:21:d2:f6:03:ad:17:e9:c4:04:1b:6d:
d7:77:ef:a0:81:9d:5f:ad:9d:96:08:11:01:5c:ed:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:82:B9:DA:BC:8C:E7:41:0B:63:AD:7B:8E:C4:F2:BA:4B:FE:0D
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/IluCudq8jOdBC2Ote47E8rpL_g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.112.0/24
89.23.115.0/24
89.23.118.0/23
Signature Algorithm: sha256WithRSAEncryption
57:fb:b0:28:d4:2c:d2:f8:89:97:76:45:a9:c0:b4:07:72:87:
56:6c:67:aa:0e:d8:24:89:8a:cc:68:4a:6c:1e:e4:cc:a0:08:
91:da:ba:e6:8d:43:6e:7b:2e:87:87:6a:5d:81:94:c8:f4:5a:
1b:4c:ca:c6:87:85:7d:a4:02:37:59:24:e4:41:81:1a:41:22:
e3:48:a6:1c:a7:9b:70:f9:33:a3:e0:29:77:f2:8c:0e:f7:94:
f1:26:a1:19:b9:58:0f:b4:9e:2c:91:0b:9b:14:8c:b4:14:61:
e1:7f:63:d1:c2:27:8e:3b:98:e7:f9:07:bb:e1:83:af:d6:5d:
24:c8:ce:f9:02:60:a3:df:e3:32:21:e4:0c:24:a0:44:f2:f2:
79:9b:61:89:0a:a0:d7:a6:43:b9:da:08:a0:12:50:ce:39:45:
c4:99:48:08:3c:c3:ac:87:65:ad:18:2c:8b:22:65:4b:5e:c7:
91:62:35:c6:ff:4a:eb:0f:49:5d:b3:53:22:31:6f:9c:56:f4:
e8:cc:4d:21:1d:22:40:31:c5:28:9f:90:fb:d4:3c:28:fd:8c:
96:87:79:72:79:92:cb:7b:37:30:e4:6f:8f:e2:29:e7:74:1b:
30:15:8a:f7:2c:eb:83:9f:5c:19:d8:44:70:ed:12:39:e1:a8:
b6:c4:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:48 2025 by rpki-client