Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/ECAxF4vp3Futzumcmj1rjsVC7NY.roa
File: ECAxF4vp3Futzumcmj1rjsVC7NY.roa (raw, json)
Hash identifier: JxADtc+iE337R9hLFDzclJcl26wmHsOrk1hwIpxe/D4=
Subject key identifier: 10:20:31:17:8B:E9:DC:5B:AD:CE:E9:9C:9A:3D:6B:8E:C5:42:EC:D6
Certificate issuer: /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial: 018CC26D76C0A15B072F5825F45889B69205
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/ECAxF4vp3Futzumcmj1rjsVC7NY.roa
Signing time: Mon 01 Jan 2024 00:30:02 +0000
ROA not before: Mon 01 Jan 2024 00:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29686
IP address blocks: 82.96.64.0/18 maxlen: 18
185.191.224.0/22 maxlen: 24
82.96.96.0/24 maxlen: 24
85.190.0.0/18 maxlen: 18
85.190.0.0/19 maxlen: 19
2001:1bc7::/48 maxlen: 48
2001:1bc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:76:c0:a1:5b:07:2f:58:25:f4:58:89:b6:92:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Validity
Not Before: Jan 1 00:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=102031178be9dc5badcee99c9a3d6b8ec542ecd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:50:5b:e2:39:0f:c9:81:47:23:ae:f1:79:4e:
b3:2e:87:a8:ed:34:bb:a7:f1:db:df:f6:45:b3:22:
7a:3b:b6:f1:7f:a5:2b:41:e8:f5:39:6f:38:bd:90:
df:17:fe:3a:32:54:57:4b:29:ea:db:4a:e3:8c:81:
04:47:ac:96:4f:4c:67:52:92:d7:90:36:5c:0d:13:
6d:61:4a:cd:27:e2:dc:f5:53:4d:c6:4a:22:0a:be:
37:1a:cf:60:57:45:53:b2:a8:17:4c:c8:12:c3:6c:
48:fe:02:0d:0c:f5:1b:69:81:ef:7a:07:e0:13:0d:
6e:fd:97:3b:a1:30:0c:b1:b6:5d:a0:d5:27:7a:1f:
ba:fe:f6:15:b8:a8:95:72:15:2d:8b:ab:77:be:0d:
ac:06:5a:98:01:9b:f2:b3:4f:95:f0:c2:7b:bf:46:
01:9e:33:8f:b4:7f:77:0d:6a:ac:04:cc:e8:31:96:
2e:6e:9d:34:72:a0:90:5f:e7:43:e8:ba:12:b7:b1:
0d:e7:27:2a:df:70:7f:dd:02:79:0a:51:df:00:05:
92:f3:bb:38:2e:25:a5:41:66:3c:f4:66:9b:36:91:
12:96:9a:0a:bd:4f:cb:81:de:31:56:14:d3:86:f7:
d6:7a:e4:08:a5:e0:48:cf:59:53:50:9a:9e:4d:33:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:31:17:8B:E9:DC:5B:AD:CE:E9:9C:9A:3D:6B:8E:C5:42:EC:D6
X509v3 Authority Key Identifier:
keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/ECAxF4vp3Futzumcmj1rjsVC7NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.96.64.0/18
85.190.0.0/18
185.191.224.0/22
IPv6:
2001:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:17:06:02:90:e2:0a:7f:37:00:5e:99:cc:7c:11:2a:b2:01:
3a:d7:f1:15:b3:85:51:42:55:42:7e:2a:b7:76:d1:da:8d:78:
ef:de:87:36:25:9e:13:7c:05:d5:ae:c5:19:83:70:f8:65:d8:
5f:1a:52:28:59:7b:bd:01:dd:48:18:04:84:d7:cb:2e:48:aa:
d1:5e:5d:25:52:4e:cb:08:b7:70:58:38:67:df:28:db:14:65:
d7:25:82:83:46:16:c0:d2:cb:c6:85:44:4d:82:8e:49:db:82:
80:61:da:27:1b:92:d1:5a:51:c9:4b:53:69:da:e6:91:ea:5b:
9a:cb:e3:e6:ba:da:58:2e:21:53:8d:db:fd:79:53:11:5c:7f:
78:3b:ff:72:df:58:86:29:15:54:4e:8e:06:5e:82:5a:4f:e0:
e9:9a:d0:20:ed:7e:25:6f:32:07:5e:b4:2d:24:af:78:e4:37:
fc:20:4c:4c:9c:03:03:0a:e6:50:46:36:c6:35:91:fe:8d:4f:
f7:d1:17:da:82:ab:5e:fb:9f:5b:1d:45:d0:ae:c4:d6:5a:98:
a3:1c:74:57:a0:7e:c0:47:e9:ef:ea:3f:71:d8:dc:2b:15:06:
6b:43:e0:a2:e5:03:1d:cb:b8:22:12:25:94:58:de:14:08:03:
03:e2:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:42 2025 by rpki-client