Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/RFG2p__STarutD2flnsIXSH4Ct4.roa
File: RFG2p__STarutD2flnsIXSH4Ct4.roa (raw, json)
Hash identifier: 2PqiPWaslTjPmkbZ1MOeusg2VTZxpj4GfG+a77zFB/g=
Subject key identifier: 44:51:B6:A7:FF:D2:4D:AA:EE:B4:3D:9F:96:7B:08:5D:21:F8:0A:DE
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0193FBEC2B566A9F2F5D1D609A68E2CFD64F
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/RFG2p__STarutD2flnsIXSH4Ct4.roa
Signing time: Wed 25 Dec 2024 03:46:18 +0000
ROA not before: Wed 25 Dec 2024 03:46:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 89.44.242.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.254.0/23 maxlen: 24
188.212.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fb:ec:2b:56:6a:9f:2f:5d:1d:60:9a:68:e2:cf:d6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 25 03:46:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4451b6a7ffd24daaeeb43d9f967b085d21f80ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:9d:1f:f3:d9:60:d0:d3:19:bc:2e:33:0e:
e9:9c:22:ab:7f:3b:56:42:3d:8e:2b:e7:c1:3d:ad:
a7:9e:87:67:9c:82:74:f5:99:49:32:c8:2f:93:54:
a6:22:06:83:ac:4c:bb:49:51:18:38:e8:34:1e:11:
07:cb:f4:c9:a9:18:41:a6:31:73:3e:b2:fd:3b:d7:
d1:e5:0a:93:68:d0:2b:eb:c5:df:e1:25:f4:d5:f5:
6e:76:b9:11:4f:55:b9:53:9a:40:e7:39:d4:87:19:
9e:72:f6:63:20:df:f9:3c:b2:03:47:d0:f0:1a:84:
ce:2b:1b:9f:60:63:37:82:04:1b:98:0c:07:56:81:
41:22:54:45:d4:90:1d:60:65:d9:77:e4:32:64:fc:
f3:77:43:9d:8a:78:68:5a:63:04:ad:cc:a2:49:07:
26:af:5c:19:83:3a:24:39:20:bf:d6:e4:b0:80:f5:
02:92:ed:9a:16:cd:a2:15:3c:12:04:17:4d:bb:85:
03:f3:f7:16:19:23:97:14:8c:a8:52:95:4b:67:5d:
01:ea:67:59:78:94:3b:8b:11:d7:8d:4e:e3:a3:d3:
05:59:59:90:2b:f9:86:9e:ef:d2:06:51:c7:40:16:
58:1c:0f:4f:c8:f6:50:07:77:1d:90:1f:c9:2a:92:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:B6:A7:FF:D2:4D:AA:EE:B4:3D:9F:96:7B:08:5D:21:F8:0A:DE
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/RFG2p__STarutD2flnsIXSH4Ct4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.242.0/24
89.46.217.0/24
109.122.249.0/24
109.122.254.0/23
188.212.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c7:54:f6:8b:1f:56:d8:40:fd:9a:65:b8:6d:79:32:27:1f:
b1:3a:df:4e:fc:5f:40:1a:c6:4f:c9:79:84:be:c7:d3:b1:84:
87:b7:ef:04:98:a8:44:94:76:e6:9f:68:c7:1a:73:72:66:9c:
cb:d9:57:ee:23:b4:9d:c0:0e:f9:f8:05:c6:2b:1d:66:87:22:
91:f8:c9:6d:db:e5:ed:ce:08:54:ad:34:d9:2e:ec:30:19:9b:
50:e6:65:43:e5:e7:5e:cb:a7:bd:49:d9:be:12:ad:20:b8:4e:
62:96:4c:ef:55:01:e1:62:50:8c:90:ff:c6:1b:cc:d5:49:57:
73:d3:71:e7:27:b3:a7:e4:87:60:fe:6e:58:7b:df:cc:94:ee:
c4:18:b0:6d:1c:ef:bf:35:15:96:12:27:b3:69:db:a2:a0:a1:
59:79:73:c0:fb:d5:a5:91:80:86:66:fa:44:96:60:59:18:6f:
9a:2d:e8:7f:94:70:a8:1e:2f:d7:6b:ca:06:1e:ce:6a:ee:46:
42:94:af:9d:be:62:55:17:ae:27:6b:75:be:c0:37:3a:3e:b9:
a0:2b:cf:1f:95:66:71:6b:d5:a6:0a:8c:8f:78:ed:8d:74:26:
a0:7e:f2:70:81:c3:aa:1b:1a:38:8a:50:ca:2f:37:79:46:69:
52:58:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:34 2025 by rpki-client