Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/h08WqFQXghLHx2y1uCXP6PwJKx4.roa
File: h08WqFQXghLHx2y1uCXP6PwJKx4.roa (raw, json)
Hash identifier: jhN/yNwxHhhIogMoXe/kPC8GSqZR3XWw6y18x8dIATE=
Subject key identifier: 87:4F:16:A8:54:17:82:12:C7:C7:6C:B5:B8:25:CF:E8:FC:09:2B:1E
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 018CC64B576E07211E8DD95FD062888D3447
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/h08WqFQXghLHx2y1uCXP6PwJKx4.roa
Signing time: Mon 01 Jan 2024 18:31:15 +0000
ROA not before: Mon 01 Jan 2024 18:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199568
IP address blocks: 82.196.24.0/24 maxlen: 24
82.163.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:57:6e:07:21:1e:8d:d9:5f:d0:62:88:8d:34:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=874f16a854178212c7c76cb5b825cfe8fc092b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:e8:a2:89:28:ee:d6:31:3a:ab:72:a5:34:
93:ad:14:87:99:8a:fa:0f:84:8b:52:d0:01:70:65:
66:72:23:e5:ea:12:d0:b6:a5:a9:02:6c:db:45:6f:
fa:d4:b5:ad:51:e1:1b:07:e2:20:36:1d:33:9f:7d:
de:8c:1d:63:0c:c7:1f:33:45:06:50:5c:06:b0:79:
02:07:d5:2d:42:3c:2e:12:8b:c6:fc:43:95:c2:a0:
6e:ba:d2:ec:11:db:e7:25:9d:33:89:98:02:ba:1a:
8c:8c:53:b0:62:6c:83:38:2e:18:a0:43:eb:ae:c3:
9e:13:6d:0f:9d:5f:32:db:de:9b:81:97:c6:26:e4:
8f:1b:07:bf:b1:f3:a0:14:38:6e:83:f3:75:54:52:
5a:8a:07:52:e2:1d:30:57:0f:5f:32:23:49:4b:30:
48:9d:9e:49:b3:b1:16:02:52:68:1a:f6:13:9c:c7:
35:b0:0f:8a:cc:e8:b6:e2:78:da:ca:98:35:ff:f1:
9c:3f:6b:ae:c7:04:dc:b5:d8:e5:3d:06:e9:d7:cb:
45:04:19:db:d0:24:20:23:a1:91:a9:d8:cb:87:94:
77:c2:ea:c9:fb:54:73:dd:8e:d4:16:7a:44:f4:50:
4b:d0:83:13:35:14:18:1a:8f:85:b1:0a:7b:0f:03:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:16:A8:54:17:82:12:C7:C7:6C:B5:B8:25:CF:E8:FC:09:2B:1E
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/h08WqFQXghLHx2y1uCXP6PwJKx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.38.0/24
82.196.24.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:72:39:ce:b5:43:ae:cf:cd:1b:c8:e6:ef:6c:08:e3:20:6f:
e4:03:1f:33:cb:b3:5d:40:bb:20:1b:db:07:05:23:cf:53:ce:
3d:3a:70:1e:2c:06:96:43:d8:26:bd:2f:4d:8b:b6:38:b8:68:
d8:30:f7:9f:6c:a6:ce:89:b7:c4:3d:d5:fe:fe:8d:2e:cf:a5:
2c:ff:44:8d:e3:38:75:19:da:1a:19:82:cf:fa:83:4c:be:27:
10:3b:47:59:70:52:16:12:ce:89:1e:05:fb:d4:64:a1:7f:d5:
da:70:c6:5f:14:6f:54:cd:73:46:b1:8f:42:f4:2c:54:d4:63:
fa:a5:74:97:52:b2:2d:c2:23:be:b0:79:87:90:7e:ac:e1:ec:
5d:de:97:09:c5:11:2c:62:60:25:2b:e5:3d:95:20:da:4a:3c:
3d:22:a5:2a:7b:e0:b1:55:cb:bf:72:0c:8a:af:84:1b:9c:09:
2a:b9:1b:35:a3:04:a1:1d:61:10:0d:c9:ac:1d:ff:e3:f9:85:
80:57:73:61:d0:45:0c:01:41:45:9e:71:af:c0:5b:70:d6:8c:
2a:9d:a0:b9:53:b1:d3:ea:27:37:74:cc:d5:c0:64:91:ac:77:
cf:59:e9:6a:0c:e5:2a:a0:a9:4f:5c:cf:ae:26:3f:54:f3:12:
d2:ed:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:39 2025 by rpki-client