Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/mpj6fpzX2WgQP9g0b0K4kl9M2Lk.roa
File: mpj6fpzX2WgQP9g0b0K4kl9M2Lk.roa (raw, json)
Hash identifier: 0RD5TpKxUs3IG9YxJ0WwLLbs1T2hwu9OxBMEu957wFw=
Subject key identifier: 9A:98:FA:7E:9C:D7:D9:68:10:3F:D8:34:6F:42:B8:92:5F:4C:D8:B9
Certificate issuer: /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial: 018CC56F01DA7C3094D7CD3DD65508EAAB6D
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/mpj6fpzX2WgQP9g0b0K4kl9M2Lk.roa
Signing time: Mon 01 Jan 2024 14:30:35 +0000
ROA not before: Mon 01 Jan 2024 14:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3268
IP address blocks: 82.116.192.0/19 maxlen: 19
82.116.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 05:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:01:da:7c:30:94:d7:cd:3d:d6:55:08:ea:ab:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a98fa7e9cd7d968103fd8346f42b8925f4cd8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:f1:18:1a:48:3e:de:00:92:20:db:3a:c9:
bb:0a:de:90:92:68:6e:be:64:7a:d5:a3:d9:e0:a2:
74:63:96:f4:6e:7b:47:f9:5a:aa:73:fe:1f:bf:d0:
c3:51:85:cd:e7:36:b9:b6:ec:c2:ed:4b:c0:39:8c:
e2:ed:e5:f4:9a:6f:32:4e:26:00:f6:a2:65:e9:d8:
2d:b0:dd:cd:1c:74:b3:6c:ab:72:36:28:ed:be:5d:
28:4b:17:54:35:5e:d3:bc:0a:67:49:d7:44:5f:2a:
aa:6c:fb:74:c9:dd:36:71:da:3a:39:aa:ce:0c:72:
a9:e1:1e:5d:5b:c2:1b:3f:98:8e:fe:be:3f:4c:02:
b6:b0:df:c4:66:ef:c0:1b:e8:ab:c8:0e:8f:5d:18:
13:da:02:13:65:b7:85:04:97:de:3e:7c:9e:c2:dc:
f7:d1:d8:a6:14:4f:db:de:07:32:37:50:ad:44:63:
37:d0:93:38:7c:d9:ba:2c:4d:5b:f1:1a:a3:d2:7a:
08:55:e5:e5:b1:2d:53:76:87:bb:98:b1:e0:26:92:
eb:b0:78:03:74:a2:6a:ec:d4:b3:ff:f1:26:04:cc:
a1:6b:7b:d8:52:a6:3f:7b:9f:76:c9:c5:10:81:e9:
35:0b:f1:48:fa:5f:79:44:63:37:92:05:91:16:f1:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:98:FA:7E:9C:D7:D9:68:10:3F:D8:34:6F:42:B8:92:5F:4C:D8:B9
X509v3 Authority Key Identifier:
keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/mpj6fpzX2WgQP9g0b0K4kl9M2Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.192.0/19
Signature Algorithm: sha256WithRSAEncryption
38:bd:11:b6:cc:1f:2e:80:30:16:0d:d0:3d:db:16:b9:f1:91:
07:22:db:92:2d:6f:26:eb:56:fb:00:81:a1:d7:ef:8c:e3:f7:
96:c8:59:06:99:26:a1:9d:03:50:8d:04:09:c9:63:62:59:9d:
10:78:f9:ff:e0:7e:68:41:ab:00:4a:13:ee:e3:5a:23:51:98:
3b:cb:af:e1:26:8a:43:3d:5d:a4:1a:36:22:96:db:20:ee:59:
f6:f8:95:bb:56:9a:bf:2a:9c:64:7a:f5:fb:60:96:56:5e:96:
b9:98:58:c7:3f:62:05:05:47:d1:c4:f5:23:c8:01:58:7a:17:
20:7e:cf:11:3a:18:5d:e1:fe:61:41:57:ca:f9:de:28:da:80:
80:26:e4:da:9b:2f:b1:f1:ea:3d:7b:ef:63:d7:5f:d5:09:ee:
40:1e:25:9c:24:4a:aa:9b:24:89:28:b0:00:4c:9e:15:ea:58:
13:bd:06:ce:84:f9:e1:36:19:00:5a:8e:b9:f2:c7:7a:c6:1c:
3a:20:8e:99:04:17:93:29:d3:2c:2d:10:e9:e5:9b:0f:78:45:
6a:37:5c:8c:0e:9d:b3:62:2e:11:32:48:d6:fb:98:db:ab:e6:
e5:b7:4b:fc:1d:a1:48:9e:f0:0a:c1:0b:18:f9:c1:0c:67:16:
49:36:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:22:15 2025 by rpki-client