Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/qC2jiJuAsziEoNhbLUuJSWxymOI.roa
File: qC2jiJuAsziEoNhbLUuJSWxymOI.roa (raw, json)
Hash identifier: MZJGx/uQB/RXESeFxTlnWSAPVin+laGYaITTyU6U9qg=
Subject key identifier: A8:2D:A3:88:9B:80:B3:38:84:A0:D8:5B:2D:4B:89:49:6C:72:98:E2
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 0190C4EA84035AD84B3576B558B658E6E91D
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/qC2jiJuAsziEoNhbLUuJSWxymOI.roa
Signing time: Thu 18 Jul 2024 08:17:01 +0000
ROA not before: Thu 18 Jul 2024 08:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6424
IP address blocks: 82.215.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 04:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:ea:84:03:5a:d8:4b:35:76:b5:58:b6:58:e6:e9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Jul 18 08:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a82da3889b80b33884a0d85b2d4b89496c7298e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:bb:89:1e:27:2c:b6:67:6a:cc:26:f3:b7:
8b:65:5c:0e:cd:30:77:3c:20:d0:04:2e:8e:e3:25:
30:e4:75:e7:e5:ca:47:c7:d7:6c:a3:e3:03:36:78:
a2:48:6e:94:68:c5:de:1f:17:ae:7c:96:68:ab:6d:
d9:65:08:a6:c7:30:37:18:a4:38:46:f4:53:e1:c6:
da:3a:7d:58:4c:c0:cf:ab:a2:e3:92:9e:6b:ae:fb:
e0:ab:6a:8d:fe:17:f3:2d:6b:50:ed:22:5d:9f:bd:
fe:73:eb:9b:ed:19:7f:06:82:ed:89:71:72:8a:be:
a4:56:87:b7:05:5e:54:42:f4:1f:c1:64:18:70:fe:
c8:7f:9e:e4:f9:2b:8a:c7:6d:3b:86:04:64:73:e9:
c3:59:e7:02:3b:9d:d3:71:7b:32:fb:be:2d:8d:e9:
83:8b:e4:a3:39:fb:a0:95:ec:32:f6:05:68:bb:63:
18:97:77:bc:f2:b0:7a:81:41:c4:a6:76:f9:a0:af:
ef:ed:b4:00:46:d2:31:6e:78:0c:d9:d4:97:93:be:
26:e9:9a:f0:81:9f:e6:46:d4:f4:9f:0e:e1:d2:ed:
90:aa:a9:89:9f:69:80:c2:15:8c:dd:a5:6c:e1:a1:
50:08:ee:fc:37:03:51:3d:37:cd:03:73:6c:02:a1:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2D:A3:88:9B:80:B3:38:84:A0:D8:5B:2D:4B:89:49:6C:72:98:E2
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/qC2jiJuAsziEoNhbLUuJSWxymOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:53:f0:85:70:8f:f4:45:80:c3:e1:c1:d3:e3:c1:f2:f8:ac:
89:b2:ae:61:f9:68:73:92:a7:a8:20:76:0f:93:82:95:d1:aa:
16:4e:d0:e0:af:27:cb:0a:d3:3d:e9:03:c5:25:45:ab:e8:98:
60:49:9d:4b:8a:10:44:64:05:59:a4:e2:ce:b4:63:97:0c:cf:
ab:a1:5b:cb:1e:5a:92:51:31:bb:ab:5f:c2:ff:08:58:a1:5d:
c4:6d:5d:ab:1a:32:db:c0:3a:f6:a7:27:e9:21:6c:32:ee:33:
97:3a:b2:06:e5:07:0a:6a:12:d8:19:40:c1:46:42:d7:11:9e:
05:58:ad:77:38:9c:f6:f8:34:2b:14:96:cd:0a:7a:33:e4:b8:
04:b2:87:36:ec:d0:dc:c4:d9:b8:bb:be:ee:84:c3:53:e1:21:
dd:94:03:fe:09:10:31:d4:46:82:e0:6d:17:cf:98:d2:fd:53:
65:61:ea:8f:a7:d4:b4:d3:0d:4f:73:93:01:38:0b:21:6b:36:
bd:25:09:70:db:f4:50:02:e3:5d:91:9a:dd:b6:3e:a2:03:1c:
20:a9:5d:56:32:55:e3:fe:1b:ac:3c:eb:dd:42:a0:2c:ce:05:
6c:66:6b:36:9e:83:12:31:ef:97:e5:1c:90:e7:0e:ae:14:99:
c3:1a:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:27 2025 by rpki-client