Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/CMr7HCXowgMN2oafvNHg18V9rCA.roa
File: CMr7HCXowgMN2oafvNHg18V9rCA.roa (raw, json)
Hash identifier: dh5h5bOobWCbv/erFPmMLb9imN6QlShX80pvBM9XSqA=
Subject key identifier: 08:CA:FB:1C:25:E8:C2:03:0D:DA:86:9F:BC:D1:E0:D7:C5:7D:AC:20
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018CC56E9701EB7E9139608EC935D9FCC000
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/CMr7HCXowgMN2oafvNHg18V9rCA.roa
Signing time: Mon 01 Jan 2024 14:30:08 +0000
ROA not before: Mon 01 Jan 2024 14:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203634
IP address blocks: 82.222.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:97:01:eb:7e:91:39:60:8e:c9:35:d9:fc:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 14:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08cafb1c25e8c2030dda869fbcd1e0d7c57dac20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:05:e5:02:a7:b1:2a:24:5c:e2:ec:23:fd:
48:43:37:02:cf:f8:65:af:f5:26:7d:2f:85:9e:70:
2f:2f:b4:93:ed:fa:43:1c:6a:4d:c4:c8:4a:dc:5c:
ed:57:66:b8:b3:c7:26:69:9b:ea:64:60:2d:d3:b1:
f1:90:f3:01:8b:a8:24:c3:39:b9:78:69:1c:5e:5d:
ff:2d:b3:0f:5c:06:17:e6:e4:03:43:50:d7:56:72:
c4:c6:d0:7b:ed:09:0d:ca:33:8c:6e:44:10:44:08:
50:b0:e8:36:86:e2:76:b1:c6:07:22:52:c6:f6:ba:
d5:bd:33:02:09:90:b9:22:ed:6d:32:6e:89:9d:f2:
9f:72:86:7f:a3:9e:41:df:7a:de:45:a2:9c:91:2d:
62:ce:a6:b3:68:1a:07:d0:3d:97:02:66:28:26:a9:
1f:d2:6c:8e:a2:b2:11:44:3c:a2:01:7f:be:fe:cd:
18:c6:8e:13:8b:b4:5d:73:88:a5:ce:2e:da:16:e2:
d2:37:64:f4:61:cf:0b:70:0d:06:ad:17:44:e2:cd:
4d:89:8d:53:19:c0:22:b6:23:41:33:2c:41:92:89:
1a:c8:d2:cc:4a:5f:32:54:2c:1d:e4:fd:29:85:77:
eb:a3:3d:aa:67:af:ef:e5:0a:c1:97:c6:aa:7b:e7:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CA:FB:1C:25:E8:C2:03:0D:DA:86:9F:BC:D1:E0:D7:C5:7D:AC:20
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/CMr7HCXowgMN2oafvNHg18V9rCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.159.0/24
Signature Algorithm: sha256WithRSAEncryption
90:1c:ad:30:15:ca:bf:6d:14:8b:5c:60:70:0d:39:35:b9:1c:
dd:bf:df:a9:ef:a6:73:35:03:b9:23:40:83:16:d5:a6:75:41:
6c:10:23:c2:03:f7:b6:36:3f:2c:6d:ee:4b:59:c8:21:e3:02:
a0:8d:c6:eb:43:fc:3d:f7:a9:65:c5:60:92:2b:0d:f5:19:07:
fa:5a:58:2d:db:6a:cb:57:fc:ed:5f:f1:06:e1:8b:0d:30:e3:
a8:80:6d:0b:d8:98:91:57:2e:28:5b:91:ab:fe:ab:7a:e0:d5:
82:59:f2:63:44:7e:72:91:df:7c:38:95:ab:cb:10:e0:40:e7:
cc:0c:69:ee:00:6c:65:ef:c7:d8:b7:5d:d5:11:c5:7a:9f:8e:
50:ed:b9:10:a2:65:33:e9:e0:75:d2:fc:5c:dd:6a:b4:e1:3f:
e9:8b:d7:96:32:51:bb:b2:c4:bd:14:95:fb:16:58:37:46:f7:
50:97:c6:14:ed:15:59:38:30:64:6e:a8:b6:e0:6c:a5:1f:91:
e1:4b:cb:9b:2e:a7:4a:3e:f1:96:dc:e4:14:cf:2d:2d:64:c4:
7d:f2:29:96:46:07:b7:a8:10:bb:a9:f6:bf:80:34:28:ab:c0:
b8:d1:40:c1:be:89:1e:e9:ba:d6:26:cb:d8:13:96:8b:85:2f:
ff:2c:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:45:33 2025 by rpki-client