Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/_6x5vBQ8w_UEWOsM1x_8p0a8Ahk.roa
File: _6x5vBQ8w_UEWOsM1x_8p0a8Ahk.roa (raw, json)
Hash identifier: 6CpwyYzEBHRz/9aOhdctifG0eV7pkEbOqdio3IMktkY=
Subject key identifier: FF:AC:79:BC:14:3C:C3:F5:04:58:EB:0C:D7:1F:FC:A7:46:BC:02:19
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 019407A71A1D829B8FA32E7770CDE221D7D2
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/_6x5vBQ8w_UEWOsM1x_8p0a8Ahk.roa
Signing time: Fri 27 Dec 2024 10:26:19 +0000
ROA not before: Fri 27 Dec 2024 10:26:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197615
IP address blocks: 89.234.242.0/23 maxlen: 23
89.234.244.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:a7:1a:1d:82:9b:8f:a3:2e:77:70:cd:e2:21:d7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Dec 27 10:26:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffac79bc143cc3f50458eb0cd71ffca746bc0219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:a7:f2:90:a0:fb:d6:ea:bb:a8:12:4e:17:
73:26:f1:c1:e0:77:29:69:7b:2d:09:6a:d1:29:7b:
64:4a:d3:30:fb:15:c5:c8:c0:36:d4:44:87:51:36:
5a:9b:56:d8:b6:0c:a0:cd:2a:8b:46:83:29:87:1f:
bf:47:e9:03:4b:09:d0:d2:3a:f3:63:5d:19:b8:86:
1c:83:08:9f:6e:b9:6a:da:56:03:ee:13:8a:3e:cd:
d6:b1:f6:71:d8:cb:f9:dc:73:5e:0e:42:e2:73:33:
63:45:ed:46:7d:d1:c9:d2:d8:b2:0a:28:cf:6e:b9:
f9:09:f2:8f:f7:24:54:65:32:1d:98:9b:68:51:1c:
57:fc:f1:8a:7f:38:50:03:5f:7b:b7:bc:a9:31:a5:
50:c3:ad:0c:36:8b:e7:db:4d:c3:9d:e3:d7:3d:04:
e4:a2:1a:f7:3a:bb:ae:04:09:6b:73:8f:58:9b:cc:
6a:32:0c:b9:e5:fc:23:7f:5c:3f:25:4f:8a:8f:79:
57:db:9a:6b:c8:fc:0a:80:ba:06:13:a6:7a:b9:bb:
ee:ac:84:2f:62:8d:02:26:17:5a:b1:94:c8:7c:73:
9a:0c:01:c6:94:8f:91:22:cf:de:f7:97:b1:bf:9d:
21:f9:c0:29:f5:ca:75:56:f0:0a:7e:05:eb:ba:5f:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AC:79:BC:14:3C:C3:F5:04:58:EB:0C:D7:1F:FC:A7:46:BC:02:19
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/_6x5vBQ8w_UEWOsM1x_8p0a8Ahk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.242.0-89.234.245.255
Signature Algorithm: sha256WithRSAEncryption
86:c0:d2:c2:c4:e7:36:1a:24:c6:34:57:fb:7c:df:8d:73:c4:
17:eb:b9:38:35:66:1e:8f:26:13:d9:d9:4a:4c:2c:62:ef:8d:
c0:88:ad:af:e9:32:85:c7:87:15:75:da:33:64:3e:a4:89:03:
2e:27:29:61:ef:59:71:d6:5e:7f:df:0f:fb:e4:f6:17:4a:91:
39:cc:c0:ad:29:10:ba:c9:1e:b9:f2:d7:4b:0e:e5:bd:ca:f2:
7c:75:29:bb:84:9f:af:16:a7:1b:8b:66:e6:62:55:bd:a7:1a:
5c:77:28:a5:5e:b4:ab:b4:80:9f:1f:80:3e:ad:2a:eb:0b:e6:
a3:84:0b:5d:08:ad:62:46:d1:d0:1f:79:49:ea:bd:be:a2:0a:
74:93:d3:ec:11:11:6a:38:11:a4:d5:ed:88:5e:4d:31:dd:06:
6c:48:0c:7b:d8:12:fb:c4:f1:29:5a:f5:43:3d:4d:a6:6e:45:
40:39:b6:e1:fe:17:6e:95:b5:22:a1:6c:54:df:f8:0a:1a:cc:
f5:cb:80:25:c5:35:d7:1a:60:a7:39:5b:c3:a1:a2:84:40:5e:
31:e7:82:b4:37:ea:84:5f:c5:2e:e3:23:52:4d:e5:1c:be:42:
76:60:80:2c:5b:53:26:57:63:1f:24:22:fb:0f:ba:f9:5e:dc:
c8:b7:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:57:46 2025 by rpki-client