Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jU_RRWrDVY6jPAo5a6UdIWGBJvo.roa
File: jU_RRWrDVY6jPAo5a6UdIWGBJvo.roa (raw, json)
Hash identifier: bfaeBwztUC2xlIxcbgdFaARaNKG+H6xIqpCeh2tomN4=
Subject key identifier: 8D:4F:D1:45:6A:C3:55:8E:A3:3C:0A:39:6B:A5:1D:21:61:81:26:FA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3495F436B7A472B51CCCEFDE6B89466
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jU_RRWrDVY6jPAo5a6UdIWGBJvo.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 89.213.139.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 11:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5f:43:6b:7a:47:2b:51:cc:ce:fd:e6:b8:94:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d4fd1456ac3558ea33c0a396ba51d21618126fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:66:95:83:d8:4d:5f:5f:16:6e:30:41:8e:50:
aa:96:91:27:4c:ae:fc:f7:e1:f0:6f:8d:21:a3:66:
ae:ed:72:19:3a:e5:0f:18:8c:99:2c:d6:c9:dd:e2:
b3:54:a7:ba:f5:8a:8e:f4:90:36:db:7e:17:39:ae:
c2:73:81:84:ca:bd:68:7e:fc:3f:7c:66:0f:e1:76:
4f:4e:c5:b2:63:86:b3:d7:c7:66:75:70:4b:40:6b:
db:fa:83:5f:df:06:7f:e7:a5:54:c4:1e:08:88:50:
c1:7b:62:27:e7:89:c5:38:af:0f:d9:da:eb:0c:04:
59:8e:e4:a7:14:6e:84:43:a4:12:61:e4:4b:11:7a:
a9:81:c5:57:64:9b:35:e6:ed:65:96:e9:09:97:59:
23:6d:4c:23:b9:f5:5f:69:f4:a7:9d:8f:de:34:3d:
0d:be:3c:32:25:88:c8:40:74:6e:49:20:e5:df:9b:
18:c7:ef:1f:1a:d9:f4:28:d2:eb:24:52:f5:07:3a:
ef:86:fe:e6:6f:b9:4e:eb:6b:86:48:94:31:1d:96:
cd:d9:4d:86:14:69:6c:63:7f:f8:d3:46:12:4b:35:
39:54:54:9b:75:18:60:49:1e:63:bd:26:ba:07:69:
9d:20:a5:a9:6f:b1:42:ac:a6:92:08:6e:db:22:92:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:D1:45:6A:C3:55:8E:A3:3C:0A:39:6B:A5:1D:21:61:81:26:FA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jU_RRWrDVY6jPAo5a6UdIWGBJvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.139.0/24
89.213.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3f:81:5c:b4:22:98:5e:b5:5a:c5:36:1e:0a:40:12:65:56:
af:5b:77:60:12:3e:af:d9:b3:0a:33:45:77:91:c6:a5:50:7a:
34:4d:c6:36:72:e9:aa:b7:cd:58:00:b9:7e:7c:83:5e:61:44:
b0:47:8c:10:cc:bb:40:35:ef:82:96:d2:30:a0:e8:dc:d9:55:
a6:26:e2:10:4c:37:37:8d:c5:e4:d4:c2:2f:99:d6:58:c6:94:
5f:01:66:2a:3d:e9:a2:34:ec:59:a7:93:77:56:a2:46:62:a3:
8a:9b:5e:cb:60:e4:38:a3:a4:0b:99:de:2e:77:96:0c:16:10:
47:99:80:7a:7b:a3:9a:2b:46:c1:c3:2f:a6:0e:3d:66:9e:37:
2e:e4:f3:28:e6:58:25:82:73:93:86:8f:7f:93:29:44:58:8c:
8e:30:be:68:d4:1f:f8:7a:39:cd:0f:39:6b:1f:ab:d9:a1:0e:
ac:f2:da:3e:07:94:d3:59:ce:18:2c:4d:f2:ac:48:3b:6a:6f:
de:c8:91:e4:4e:5c:e0:a8:da:85:e9:ac:7e:bc:4a:e9:99:24:
74:9a:05:5c:1e:44:e9:74:fc:88:72:9c:96:04:7e:93:b3:92:
5d:db:65:60:c8:f0:8b:1c:b1:fd:a7:a2:50:b7:0a:bf:36:fe:
30:d4:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:42:30 2025 by rpki-client