Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/Mapc3QZOBVFxvUS0wkae66f3sfU.roa
File: Mapc3QZOBVFxvUS0wkae66f3sfU.roa (raw, json)
Hash identifier: tuqJDW/dyc3aKjC3M83UUk50grtDWArqNkTensmhCv4=
Subject key identifier: 31:AA:5C:DD:06:4E:05:51:71:BD:44:B4:C2:46:9E:EB:A7:F7:B1:F5
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 018CC72744BC826B467C9BCADDBA8D76B940
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/Mapc3QZOBVFxvUS0wkae66f3sfU.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27399
IP address blocks: 82.98.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:44:bc:82:6b:46:7c:9b:ca:dd:ba:8d:76:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31aa5cdd064e055171bd44b4c2469eeba7f7b1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6c:40:be:a5:06:b1:76:7f:57:11:54:30:e5:
c0:f5:94:f4:bf:df:80:c7:b3:32:31:68:27:81:ce:
b1:e0:7b:d4:78:03:48:ef:ed:29:d8:84:c4:4e:bf:
fc:2e:97:37:f5:75:ff:bb:90:12:13:59:c2:dd:cc:
fc:a4:59:e2:73:1d:1b:0b:0a:3f:8c:e2:c6:b7:91:
81:c5:36:9e:95:b7:73:92:3b:47:65:f7:b8:42:64:
84:cc:12:c1:56:71:4d:4b:f2:be:2a:3c:95:b3:04:
da:38:96:fa:0c:dd:8d:e4:6f:12:cc:2e:7a:b0:ac:
57:03:39:49:7c:dd:fd:ff:61:5d:a3:60:45:22:d3:
ad:f7:c2:b3:f8:07:61:3f:37:9a:25:d5:e7:7b:e6:
bd:8f:e1:b1:b5:c2:09:e1:53:75:f7:10:b4:cf:ff:
ef:c8:72:ea:94:a4:0e:a9:9c:2e:d9:6b:a8:0d:71:
6e:96:75:b5:29:fc:42:c5:03:d9:a3:bf:48:e3:07:
dc:cf:4a:09:49:54:0f:06:c1:8d:37:64:ee:b1:8b:
fa:7f:72:90:3c:b1:a6:6f:d6:06:c8:ef:4c:8e:02:
b4:23:8c:96:da:d9:71:08:0e:dc:62:19:f6:3d:a5:
e0:62:09:da:3b:c5:a3:0b:d7:f9:c3:6c:15:d2:c4:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AA:5C:DD:06:4E:05:51:71:BD:44:B4:C2:46:9E:EB:A7:F7:B1:F5
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/Mapc3QZOBVFxvUS0wkae66f3sfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.194.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e6:9d:d4:c7:58:dc:da:84:3b:ad:9d:5a:dc:5b:dd:7b:6d:
47:b6:ec:43:88:7a:71:03:d9:84:3e:5a:45:3a:36:da:11:9a:
50:84:e0:56:ca:e2:d2:eb:cb:08:fe:60:cc:0f:05:67:73:58:
39:16:c9:a3:dd:82:15:1d:d9:75:f4:88:36:1a:15:46:be:99:
ce:b0:76:74:aa:c4:68:29:d5:42:ba:8a:80:60:60:c6:11:a7:
08:c2:fc:a2:8b:e3:98:d3:b5:93:aa:ac:e5:dd:d0:68:74:2a:
4d:4f:3c:ff:47:1e:11:6d:f9:b7:fa:29:51:c2:7e:69:cc:33:
bf:b7:76:aa:48:76:ef:b0:12:c9:59:da:bf:b0:3a:c1:0c:ae:
3f:01:55:fc:92:4b:ca:f6:22:08:4b:0f:c1:9d:fa:7b:d9:1a:
ed:c8:9d:95:25:7e:db:4d:5a:88:ae:f1:7d:90:3b:f2:6b:d2:
f2:82:86:bd:b8:6b:93:f9:84:f1:5d:2a:1c:b5:78:eb:3d:2a:
e0:96:be:f5:f3:69:68:1c:2b:64:40:dc:47:a1:62:52:de:3a:
2c:40:70:f8:5d:87:8d:8c:81:05:a3:84:8c:84:4b:67:83:1c:
98:ba:2c:80:18:ad:72:86:1a:e1:e3:fb:b6:6c:f1:70:c0:23:
01:9b:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:05:30 2025 by rpki-client