Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/EJD72v5cj7zinif3VORCMU8Vx7U.roa
File: EJD72v5cj7zinif3VORCMU8Vx7U.roa (raw, json)
Hash identifier: pvpHgAaRhkUVxrhKFPxKZeiwZosOZFaLP8/YbN0IjgY=
Subject key identifier: 10:90:FB:DA:FE:5C:8F:BC:E2:9E:27:F7:54:E4:42:31:4F:15:C7:B5
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 018CC94E493E4453D0FB6E91604F457007E7
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/EJD72v5cj7zinif3VORCMU8Vx7U.roa
Signing time: Tue 02 Jan 2024 08:33:20 +0000
ROA not before: Tue 02 Jan 2024 08:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57389
IP address blocks: 82.150.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:49:3e:44:53:d0:fb:6e:91:60:4f:45:70:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jan 2 08:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1090fbdafe5c8fbce29e27f754e442314f15c7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:48:42:36:0b:5c:0f:7c:97:7d:06:79:2e:46:
91:a1:63:03:2d:76:9a:de:39:d1:b3:74:3d:9c:31:
e1:b1:fa:74:7b:7f:b5:02:3c:78:5d:c4:bb:07:8a:
80:8f:9d:9d:92:80:71:54:00:8b:22:a8:41:94:37:
22:69:c5:8d:7c:1e:c6:57:5c:f5:8d:7c:d8:bf:1c:
97:c8:76:60:ea:df:a7:86:4f:a8:24:b1:46:a2:84:
03:c8:9a:ee:db:84:02:00:6f:56:e3:6d:c8:47:d4:
e9:e4:cb:ce:0f:93:69:40:1e:2c:03:e7:17:2c:19:
cc:40:5d:2a:e7:e2:d3:f6:a1:36:cc:51:85:77:6c:
67:83:36:80:a2:c6:0c:61:cc:2e:d7:e7:5b:28:32:
93:07:76:83:d8:e4:5e:07:b9:b4:75:b1:a7:ca:27:
cb:7e:0e:dd:5f:84:bc:64:1e:9c:a7:f6:55:a1:56:
bd:63:82:9a:88:42:83:57:04:79:47:81:48:1b:16:
c2:25:95:60:b6:e1:ff:25:22:34:c9:6b:88:5e:55:
bc:1b:4a:52:a5:31:8c:29:e8:01:ed:8f:da:4d:c8:
1e:da:b8:24:bf:c7:9f:e3:78:d1:cf:e9:aa:ab:ed:
64:c0:70:6f:82:84:de:d5:9c:1d:20:c7:80:5f:a5:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:FB:DA:FE:5C:8F:BC:E2:9E:27:F7:54:E4:42:31:4F:15:C7:B5
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/EJD72v5cj7zinif3VORCMU8Vx7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.62.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d8:86:4a:08:fc:35:47:23:a2:98:d2:56:65:04:60:7f:d6:
1a:70:9a:e5:36:be:13:6b:db:08:cf:02:4f:fe:04:1b:ea:9b:
ef:dd:01:44:5c:03:79:e6:78:39:80:c0:cf:fa:66:b1:a0:d3:
95:1a:c2:d4:d8:46:b0:ca:69:ec:9f:61:cb:a7:e1:3d:3d:22:
a1:dd:c5:10:8a:ce:b4:a8:0a:6c:4e:84:d0:72:6d:8e:bc:82:
c1:3c:84:38:95:53:a4:6b:84:40:07:38:80:12:67:30:73:20:
2a:a4:a9:fb:39:fd:e1:b8:d6:9d:02:df:dd:1c:a8:21:14:bc:
23:bc:75:00:fd:5e:80:d3:7c:38:85:7e:19:9d:6b:63:e9:84:
86:71:60:e4:3c:98:e0:1c:50:fb:27:0b:14:3d:a0:44:16:5f:
4b:b6:6a:bf:e7:aa:f3:2b:f7:47:e4:a4:02:54:d9:89:7d:d8:
61:9a:74:cf:d9:af:a0:73:ee:77:02:00:39:99:78:d1:bf:8f:
8d:aa:d7:d0:10:74:5b:ec:20:af:6e:a4:0f:52:58:41:76:35:
52:81:ff:05:bd:cf:87:f6:19:fc:18:b0:3d:0f:05:09:32:7a:
7a:1a:3a:c3:d5:e1:45:4f:87:42:d2:5b:31:11:ef:b0:5d:ac:
73:91:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:15 2025 by rpki-client