Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/r6CpOc4SoQ-62QLjAdHrCHsLLoo.roa
File: r6CpOc4SoQ-62QLjAdHrCHsLLoo.roa (raw, json)
Hash identifier: 2wyVP0ccxdW0URA2e94AfPJwMVPiFO5e8c1Xa0cwYRg=
Subject key identifier: AF:A0:A9:39:CE:12:A1:0F:BA:D9:02:E3:01:D1:EB:08:7B:0B:2E:8A
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 018CC64B56FD42977E927A42FE8131D0F160
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/r6CpOc4SoQ-62QLjAdHrCHsLLoo.roa
Signing time: Mon 01 Jan 2024 18:31:15 +0000
ROA not before: Mon 01 Jan 2024 18:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199485
IP address blocks: 82.196.27.0/24 maxlen: 24
88.212.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:56:fd:42:97:7e:92:7a:42:fe:81:31:d0:f1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afa0a939ce12a10fbad902e301d1eb087b0b2e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:fa:2b:19:4d:49:1f:76:2a:67:e9:f4:69:
52:93:34:ce:f7:2d:c0:6a:04:b8:99:fd:5b:35:49:
47:c2:03:e1:8c:a6:57:7e:e0:e0:71:b3:31:41:12:
b9:85:fc:e4:06:13:f0:d3:63:37:db:4a:6b:c5:b7:
a0:de:25:0a:5d:c0:f6:37:a3:dc:ad:c3:9b:6c:dc:
99:5d:6e:fa:d3:23:76:c4:2b:9d:ad:89:66:91:88:
5c:fd:23:eb:f0:38:c1:c5:a2:8a:c0:e9:13:bb:8f:
29:d8:85:ad:8c:6e:79:57:80:6c:a9:db:7e:c7:d5:
84:21:c8:29:0e:a4:8a:c9:81:65:a8:2c:d3:1f:a8:
11:b7:38:7b:4f:75:e0:a5:cf:fe:f3:00:4e:7f:6b:
59:42:ee:d7:51:a5:51:c0:a3:73:e9:ab:40:d5:5b:
4a:2c:ca:81:1b:ae:72:e5:3b:79:46:57:08:da:78:
8e:61:26:64:38:6b:cb:19:13:16:ea:ee:0e:44:60:
39:7e:db:58:21:a3:d3:05:78:76:05:b6:21:76:e6:
2c:96:ef:e5:e1:01:a2:e9:77:0d:34:e6:07:9b:27:
be:5a:b5:53:d0:8e:f1:fb:ba:8f:6c:86:17:fb:70:
0d:2f:6e:9a:51:f7:64:d5:31:6e:e8:af:2b:07:34:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:A9:39:CE:12:A1:0F:BA:D9:02:E3:01:D1:EB:08:7B:0B:2E:8A
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/r6CpOc4SoQ-62QLjAdHrCHsLLoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.27.0/24
88.212.144.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f8:e8:74:dc:ca:83:11:09:22:0e:31:dd:eb:1c:26:68:51:
69:66:3b:ef:83:27:8a:bc:da:a7:86:55:1e:b1:61:64:a5:30:
79:26:1d:4e:4b:55:c3:76:04:48:1e:79:45:88:ce:e6:a6:03:
30:47:bb:63:11:e6:9a:16:09:bb:5f:a3:99:e8:27:77:b4:2d:
a2:d8:06:07:09:b7:fa:c0:bc:d8:ff:78:88:91:7e:a5:e5:68:
1f:c0:f8:43:95:d7:0c:c9:d6:34:a0:eb:09:eb:49:83:85:33:
98:90:d8:2c:19:65:3c:28:69:4c:08:a8:44:c2:14:7f:ef:09:
04:3a:45:49:5d:aa:3b:96:09:24:45:2d:68:18:83:92:19:1a:
66:f5:8d:17:42:46:33:bd:83:2b:eb:31:ef:d7:01:42:53:0e:
d1:ee:b3:91:17:f7:42:e8:09:e8:8d:53:8d:94:0c:86:30:c0:
a7:8c:c0:fc:fd:b3:27:e2:4b:df:14:9b:ee:a1:cf:6a:e8:09:
59:5c:4a:db:a3:db:00:43:03:69:12:37:02:cd:96:5c:63:63:
55:f7:64:32:5d:fa:e7:21:8d:9e:7e:77:c1:ac:bf:2e:cb:59:
7f:a3:76:a2:4f:c0:95:bb:bd:04:0f:18:c1:27:4b:fd:83:3f:
7d:41:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:55 2025 by rpki-client