Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dXu1feeFcIyVd9gzZdlGqIbfwD0.roa
File: dXu1feeFcIyVd9gzZdlGqIbfwD0.roa (raw, json)
Hash identifier: GRPhxWNGtWTCX5v1pB54ItbcKFx7MAHcj3znw+Kbn6Q=
Subject key identifier: 75:7B:B5:7D:E7:85:70:8C:95:77:D8:33:65:D9:46:A8:86:DF:C0:3D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193D56F51B73F4560C62A286616C48F9EB7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dXu1feeFcIyVd9gzZdlGqIbfwD0.roa
Signing time: Tue 17 Dec 2024 16:24:22 +0000
ROA not before: Tue 17 Dec 2024 16:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7979
IP address blocks: 89.213.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:6f:51:b7:3f:45:60:c6:2a:28:66:16:c4:8f:9e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 17 16:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=757bb57de785708c9577d83365d946a886dfc03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:64:44:33:3c:93:6c:4d:cb:e8:10:f7:87:
6d:10:5d:49:e7:dd:4a:61:fa:38:ea:2e:7d:aa:5a:
b2:27:5e:0e:8a:6d:65:07:de:d4:9a:43:76:f0:2a:
94:4e:f7:ba:76:3a:08:c5:d9:b4:03:0e:5b:45:14:
96:bb:e4:88:ab:4d:ee:61:95:e1:30:88:23:cb:1f:
e2:de:04:cf:75:a6:63:e0:00:9a:39:22:33:26:7c:
38:87:6f:72:d1:70:8f:16:8d:c8:99:61:96:78:77:
68:14:08:62:4f:50:cd:99:f2:25:c0:ee:b0:22:a2:
4a:a9:73:93:d1:84:4c:9f:8b:7f:d9:8e:04:1c:61:
77:90:00:0c:62:a8:3a:4d:3e:06:5c:d5:7b:41:ef:
4b:a1:bd:72:83:6a:95:9f:86:1d:55:93:9b:39:e6:
64:53:2f:5c:fb:b1:42:ab:bb:12:d8:0f:84:75:34:
e4:44:29:58:ea:15:b9:b5:08:4b:33:1e:ee:88:4e:
e5:fa:e0:0c:7d:d7:99:ee:b2:7a:92:18:8d:e4:ac:
2c:9f:e5:a3:a7:2a:43:e2:e7:75:4c:ba:6a:b3:17:
f6:43:87:54:3f:ed:0e:12:d8:58:d4:76:63:2d:69:
d0:1f:32:dc:73:9b:83:4c:4b:73:38:5c:99:3d:d1:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:B5:7D:E7:85:70:8C:95:77:D8:33:65:D9:46:A8:86:DF:C0:3D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dXu1feeFcIyVd9gzZdlGqIbfwD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.138.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fb:6b:58:67:af:28:20:87:9d:99:95:a2:5e:35:69:1a:29:
4d:03:9d:1a:74:05:29:a5:97:6c:ac:a9:6d:74:88:74:ff:57:
a3:88:82:93:aa:0c:eb:6a:cf:f7:bd:5e:2a:ad:ad:78:b6:94:
95:86:8f:68:94:15:89:f6:bb:7f:f4:63:28:fa:03:c5:51:57:
12:44:e1:7d:34:7c:80:78:c0:c2:8f:3b:56:70:f4:09:e4:76:
e1:f3:2e:07:d0:42:2a:a9:e0:ce:2c:dc:a1:57:e0:a3:a9:58:
10:7f:d3:ad:b8:a8:a3:1d:f6:2a:44:82:70:ad:42:4f:8b:93:
54:4e:7f:a4:9c:39:4f:c4:01:a8:1f:4f:60:a1:eb:aa:cb:95:
9b:2b:04:ae:50:e1:33:48:ba:3f:b1:4c:d6:c6:b5:72:1e:c6:
20:a8:ce:cc:34:43:39:93:fa:b7:71:eb:a6:c7:4a:b8:46:c6:
84:3e:33:15:ef:dc:12:f1:62:f7:ca:43:d7:a2:25:43:93:0d:
1f:37:fc:de:8d:48:98:12:44:2a:1f:62:cd:dc:6f:2c:60:9a:
db:67:33:ab:10:83:46:8a:0a:41:a0:84:5b:d9:ae:9b:7e:5a:
0a:bf:3f:19:57:63:e2:f2:a7:78:cc:71:13:80:93:94:c8:b4:
ab:9f:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:21:13 2025 by rpki-client