Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DF9w4VX2wZgMRWoBHmvU4fSR68A.roa
File: DF9w4VX2wZgMRWoBHmvU4fSR68A.roa (raw, json)
Hash identifier: OykLHIgJLZBYD7yhJ+yX87ZKopaOuUpY69F1OY+Ij4k=
Subject key identifier: 0C:5F:70:E1:55:F6:C1:98:0C:45:6A:01:1E:6B:D4:E1:F4:91:EB:C0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193AAA299637DADB94B67FD698463305979
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DF9w4VX2wZgMRWoBHmvU4fSR68A.roa
Signing time: Mon 09 Dec 2024 08:56:43 +0000
ROA not before: Mon 09 Dec 2024 08:56:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215269
IP address blocks: 89.213.45.0/24 maxlen: 24
89.213.49.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
109.176.254.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:a2:99:63:7d:ad:b9:4b:67:fd:69:84:63:30:59:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 9 08:56:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c5f70e155f6c1980c456a011e6bd4e1f491ebc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:78:09:98:cb:46:7b:e4:0a:bb:ff:70:49:
b4:5f:de:3b:91:62:6a:f8:4b:54:9b:63:e4:6e:50:
5a:dc:64:a5:7f:c6:94:f9:c0:5e:e5:69:25:6a:24:
e7:fd:d2:69:38:28:ea:76:bb:1e:a5:70:4f:ce:8a:
2d:37:f2:0a:43:37:64:25:ad:2e:17:94:3a:ce:e1:
7a:04:a9:95:4c:54:90:14:42:78:29:a2:70:0f:ed:
90:8b:63:c2:e2:79:78:ad:2e:6c:66:27:4b:14:5d:
6f:c7:35:6a:66:d2:e1:d9:79:b3:ba:20:12:8c:a3:
43:0d:09:0b:b6:8c:2d:68:f9:82:10:82:37:1c:07:
ac:10:1a:44:4e:3c:eb:11:ac:a2:12:de:f9:33:b7:
db:d4:eb:d0:59:90:0d:42:90:da:d3:02:50:44:b7:
b3:cf:ff:0e:2b:76:e2:5b:35:57:a2:68:b0:d2:f0:
3a:c1:e8:c0:17:14:46:b7:31:2c:3d:b4:e4:56:76:
d5:0c:2c:91:c6:cb:b6:2e:47:77:17:57:f9:10:b7:
d8:c7:3b:78:10:c0:ea:5a:2d:af:cf:c7:41:4b:a7:
60:ae:70:4a:08:fb:e7:82:ba:77:48:cb:32:99:a7:
3e:8a:1b:c9:1f:d3:7c:4e:56:79:c1:1c:e8:9f:9e:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5F:70:E1:55:F6:C1:98:0C:45:6A:01:1E:6B:D4:E1:F4:91:EB:C0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DF9w4VX2wZgMRWoBHmvU4fSR68A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.45.0/24
89.213.49.0/24
89.213.51.0/24
109.176.254.0/23
Signature Algorithm: sha256WithRSAEncryption
41:de:8d:79:70:48:e4:73:54:de:3b:78:66:f5:28:c0:56:14:
a3:79:e4:96:70:7b:69:f0:e9:0c:79:dd:8b:50:95:f1:c4:f4:
2e:57:86:e8:e3:de:43:06:df:87:7e:70:de:7c:5c:6c:aa:ce:
11:eb:e0:51:1a:d0:39:95:18:92:15:28:f5:ee:82:38:23:29:
7b:19:51:5e:a1:b1:2a:3e:28:2e:8e:43:e3:95:85:6e:1b:ac:
0b:98:b3:c6:cd:bd:6b:34:b7:2e:e4:e5:46:d9:6b:67:31:86:
37:29:cd:1a:43:d9:1c:bf:a1:21:62:e7:1e:98:a8:55:26:6b:
e7:e3:59:50:83:8e:8e:7d:63:eb:a5:68:1b:52:98:9f:1c:e3:
b6:07:9a:11:3c:b3:3a:d9:32:57:d3:40:f7:74:da:7a:7d:87:
fe:29:c3:16:37:ac:d9:2d:f8:99:05:98:ad:c0:24:ba:58:e8:
22:ff:ec:bb:4e:47:39:07:0a:b9:2f:a0:72:6b:12:83:00:63:
a3:69:58:b2:eb:5f:cd:63:4a:4d:1f:77:8c:05:42:41:02:40:
02:2b:6b:9b:25:66:52:3f:92:59:ed:12:d7:2a:e5:1d:a8:45:
17:c7:a4:fb:2d:bf:4c:18:a9:53:e7:a9:19:63:89:1b:ab:df:
7a:54:52:5d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZOqopljfa25S2f9aYRjMFl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMjA5MDg1NjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzVmNzBlMTU1ZjZjMTk4MGM0NTZhMDExZTZiZDRlMWY0OTFlYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sx4CZjLRnvkCrv/cEm0X947kWJq
+EtUm2PkblBa3GSlf8aU+cBe5WklaiTn/dJpOCjqdrsepXBPzootN/IKQzdkJa0u
F5Q6zuF6BKmVTFSQFEJ4KaJwD+2Qi2PC4nl4rS5sZidLFF1vxzVqZtLh2XmzuiAS
jKNDDQkLtowtaPmCEII3HAesEBpETjzrEayiEt75M7fb1OvQWZANQpDa0wJQRLez
z/8OK3biWzVXomiw0vA6wejAFxRGtzEsPbTkVnbVDCyRxsu2Lkd3F1f5ELfYxzt4
EMDqWi2vz8dBS6dgrnBKCPvngrp3SMsymac+ihvJH9N8TlZ5wRzon55yUwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAxfcOFV9sGYDEVqAR5r1OH0kevAMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvREY5dzRWWDJ3WmdNUldvQkhtdlU0ZlNSNjhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWdUtAwQA
WdUxAwQAWdUzAwQBbbD+MA0GCSqGSIb3DQEBCwUAA4IBAQBB3o15cEjkc1TeO3hm
9SjAVhSjeeSWcHtp8OkMed2LUJXxxPQuV4bo495DBt+HfnDefFxsqs4R6+BRGtA5
lRiSFSj17oI4Iyl7GVFeobEqPigujkPjlYVuG6wLmLPGzb1rNLcu5OVG2WtnMYY3
Kc0aQ9kcv6EhYucemKhVJmvn41lQg46OfWPrpWgbUpifHOO2B5oRPLM62TJX00D3
dNp6fYf+KcMWN6zZLfiZBZitwCS6WOgi/+y7Tkc5Bwq5L6ByaxKDAGOjaViy61/N
Y0pNH3eMBUJBAkACK2ubJWZSP5JZ7RLXKuUdqEUXx6T7Lb9MGKlT56kZY4kbq996
VFJd
-----END CERTIFICATE-----
Generated at Sat May 17 02:26:01 2025 by rpki-client