Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/i2Z5GwSJpmlrbpsYJ1BbNYO8xMw.roa
File: i2Z5GwSJpmlrbpsYJ1BbNYO8xMw.roa (raw, json)
Hash identifier: 5Ep9z8RueNUksjHiSxFYj5rgLKyC7hORKr1jRS0FpWQ=
Subject key identifier: 8B:66:79:1B:04:89:A6:69:6B:6E:9B:18:27:50:5B:35:83:BC:C4:CC
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 018CC9BC7D35146FDA8708B0869D08FA14ED
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/i2Z5GwSJpmlrbpsYJ1BbNYO8xMw.roa
Signing time: Tue 02 Jan 2024 10:33:42 +0000
ROA not before: Tue 02 Jan 2024 10:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30736
IP address blocks: 82.103.128.0/18 maxlen: 18
2a00:9080::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:7d:35:14:6f:da:87:08:b0:86:9d:08:fa:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Jan 2 10:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b66791b0489a6696b6e9b1827505b3583bcc4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:01:b8:d7:44:76:e6:dc:98:c7:46:07:35:f1:
a9:13:23:fe:bc:81:d5:94:90:c5:79:19:de:cc:f0:
75:a4:ea:3e:e2:5f:4e:9f:df:5a:10:3b:f1:12:16:
93:a8:cb:40:13:fb:b6:d2:77:1a:07:5e:62:0c:ba:
93:cb:b5:c0:54:57:2b:86:67:19:39:16:91:bb:d1:
20:82:20:17:22:7c:62:5d:04:02:b8:5d:7b:f4:eb:
ba:a8:b8:dc:cc:d0:ac:f3:30:cb:b9:57:e1:d4:b4:
32:54:38:33:ae:ed:1b:7f:80:b3:6d:f4:d9:b9:ad:
4c:c6:81:07:27:24:4a:19:83:39:03:1a:0e:35:fd:
0b:fe:ed:ed:92:78:12:30:43:65:65:49:eb:56:d0:
f9:f5:a9:89:1e:dd:7c:e8:e6:e0:1e:7f:2a:c9:27:
df:cf:b5:13:05:e6:4c:1c:0e:40:12:f9:c3:49:33:
e7:c8:3c:1f:0e:e1:e9:fb:d1:6b:0a:3f:82:f1:04:
44:76:ac:41:17:16:5e:c6:39:bf:d9:82:8d:68:08:
bc:4c:73:71:4d:77:c4:7a:43:de:11:69:f2:7b:3c:
dd:5d:23:ea:11:51:5e:bd:a7:d7:1c:f7:f6:12:a2:
02:6b:e3:fa:d8:38:7e:34:a0:c8:5b:2b:2a:57:6e:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:66:79:1B:04:89:A6:69:6B:6E:9B:18:27:50:5B:35:83:BC:C4:CC
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/i2Z5GwSJpmlrbpsYJ1BbNYO8xMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.128.0/18
IPv6:
2a00:9080::/32
Signature Algorithm: sha256WithRSAEncryption
71:fa:75:c0:6e:0c:43:0e:c5:80:85:cb:9e:b0:6f:4b:cf:85:
88:88:e1:5f:cf:e7:c5:4b:77:0b:72:13:fa:13:ce:6d:07:de:
5e:84:ed:c6:81:15:66:b5:24:d2:c8:73:55:85:42:21:91:e8:
7e:ec:2f:61:da:2f:eb:3b:f2:e3:78:d3:0a:1e:6e:a1:3f:40:
2e:8d:6f:a7:fa:57:2c:54:cd:ac:e7:8a:4d:6a:93:6a:3f:ac:
d6:ac:d7:ea:e7:26:3f:43:45:58:cf:9c:cf:fc:82:57:dc:c9:
cc:85:7b:db:73:e1:00:14:e0:6c:fb:d0:df:07:98:46:a2:7e:
12:12:2f:7a:67:72:cc:65:8d:46:1f:91:84:1b:43:d8:f0:54:
49:55:6c:d7:c8:68:79:1c:66:df:37:dd:cc:f8:24:f9:30:eb:
3b:a3:5e:d0:bb:1f:2f:24:2b:e3:5c:0c:b0:9a:74:1a:22:55:
5f:e4:01:25:fd:a3:df:f4:62:73:d5:85:08:8c:a1:63:72:41:
cf:35:74:cb:88:bd:99:8e:74:ec:55:85:b6:5c:65:9f:5b:b7:
d6:73:f0:6e:43:83:e7:31:a9:c0:06:62:1a:5b:53:fe:09:51:
86:7d:05:cb:49:1d:d1:ef:65:a7:70:bf:62:4f:83:81:43:3e:
93:0d:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:16 2025 by rpki-client