Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/2d1zS_C5Igbp4kC_kZL2_yilAns.roa
File: 2d1zS_C5Igbp4kC_kZL2_yilAns.roa (raw, json)
Hash identifier: +yOGGlo8B3sawlrI2HyyQCoqhkdOddEqXk6x0K8/bsY=
Subject key identifier: D9:DD:73:4B:F0:B9:22:06:E9:E2:40:BF:91:92:F6:FF:28:A5:02:7B
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019680F8C9F3FD35C1EAC3CC4A23DACA0576
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/2d1zS_C5Igbp4kC_kZL2_yilAns.roa
Signing time: Tue 29 Apr 2025 09:55:10 +0000
ROA not before: Tue 29 Apr 2025 09:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.23.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 10:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:f8:c9:f3:fd:35:c1:ea:c3:cc:4a:23:da:ca:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Apr 29 09:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9dd734bf0b92206e9e240bf9192f6ff28a5027b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:dc:c8:f4:84:e2:a6:7a:ab:a5:36:dd:d0:
f8:67:52:2c:9e:82:8b:35:46:ab:63:e3:30:21:f7:
cb:44:94:85:a4:0b:00:ee:94:03:b7:80:09:cc:ef:
19:4e:55:da:33:d4:68:42:e0:b0:56:ff:c0:f5:4f:
01:9a:ed:9b:fe:4e:30:be:3d:2f:6e:a4:3a:0a:4c:
dd:a7:19:4b:3b:0b:6c:bf:97:3c:84:b2:f5:f8:4d:
b2:e5:c0:19:38:7f:8c:2f:0f:71:fd:3f:06:9c:0e:
f4:0c:36:8d:0b:de:6d:e7:af:5c:35:e5:df:56:24:
5b:c0:21:ff:90:b2:87:31:18:17:e4:1f:f6:f5:72:
d0:6f:96:55:18:55:a2:a3:bd:c0:6f:1f:31:12:c3:
9b:e9:fe:42:37:c6:d3:65:d7:bc:61:3f:e4:86:1a:
ec:93:de:ff:64:62:d7:b1:7a:bd:26:e0:d0:fb:35:
b0:5a:b0:35:f9:14:4c:5d:3b:02:8a:3a:8c:10:da:
ed:d9:37:f3:53:89:ea:d1:81:a5:ce:22:81:de:b4:
1f:6b:ad:8c:cb:67:0b:a7:9e:e9:72:08:3e:4f:a6:
d5:36:d8:83:52:b4:a2:24:74:04:f7:dd:0c:03:31:
65:c2:30:f5:5d:1e:46:ab:d9:62:8c:88:6f:b3:ac:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DD:73:4B:F0:B9:22:06:E9:E2:40:BF:91:92:F6:FF:28:A5:02:7B
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/2d1zS_C5Igbp4kC_kZL2_yilAns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.79.0/24
Signature Algorithm: sha256WithRSAEncryption
61:36:ad:84:f6:10:e4:60:fe:2c:80:73:1f:d1:72:0e:b7:b8:
44:37:e5:4e:dd:49:73:45:63:02:af:90:5d:6b:cc:8b:cf:df:
03:e6:64:29:7c:6e:eb:df:68:8d:e6:17:62:69:77:75:ea:04:
9d:0c:4e:b3:26:16:58:43:fe:3d:9d:0f:98:36:f2:ac:73:1f:
78:dc:8e:83:db:0f:85:8a:a2:66:d2:74:17:e0:ed:be:ca:75:
1d:d1:d1:f6:72:4e:55:8a:85:24:ea:e0:bc:e1:0e:3a:3f:e3:
85:86:d8:00:f4:29:e9:3d:59:b5:b7:6c:71:a4:36:81:1c:0d:
c1:19:70:7c:63:73:c9:7f:78:0d:1c:36:cd:66:2a:af:ea:06:
09:29:8e:68:f2:87:28:e6:99:c8:8e:99:fa:a9:db:c6:c8:5d:
12:82:4a:49:6c:9c:32:58:83:52:cd:3f:57:5c:39:a0:16:71:
c0:0f:ce:c2:c6:8c:91:1b:41:c3:80:a3:1c:1a:80:f6:7b:76:
9e:c6:b6:6c:9b:ff:2e:a3:cd:5b:37:a2:8c:6a:9f:70:d8:d2:
17:f7:66:4b:e5:b8:62:82:72:de:be:a3:0f:53:7b:b8:e6:cb:
bb:74:1e:a7:10:7a:71:c0:37:5b:05:b7:9b:62:d0:61:ed:7b:
25:32:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:40:08 2025 by rpki-client