Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/0OwJYqh25_vOn4Jq0Y0lC1MfUlk.roa
File: 0OwJYqh25_vOn4Jq0Y0lC1MfUlk.roa (raw, json)
Hash identifier: vncSluVINArBE539jerBInRHhNrcoJaAE3boBN0Rv18=
Subject key identifier: D0:EC:09:62:A8:76:E7:FB:CE:9F:82:6A:D1:8D:25:0B:53:1F:52:59
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194DFB593B1D1B19780DF594B8B207D7759
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/0OwJYqh25_vOn4Jq0Y0lC1MfUlk.roa
Signing time: Fri 07 Feb 2025 09:20:06 +0000
ROA not before: Fri 07 Feb 2025 09:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 23
82.206.4.0/22 maxlen: 24
82.206.80.0/21 maxlen: 24
82.206.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 10:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:b5:93:b1:d1:b1:97:80:df:59:4b:8b:20:7d:77:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 7 09:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0ec0962a876e7fbce9f826ad18d250b531f5259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:16:a2:31:8e:3a:7b:21:47:ae:c2:2a:3a:
62:2a:2f:2a:3a:dd:ef:09:cc:d8:61:cf:8f:2c:be:
92:94:e0:36:01:1b:b1:25:cd:23:cf:ff:ab:f4:4e:
bc:23:dd:b3:b4:d4:15:f3:04:ed:d7:0f:48:e3:15:
30:25:3e:ca:70:09:58:58:90:f6:ac:ee:d3:38:59:
4f:3b:62:38:52:d7:a8:85:23:42:89:35:f7:33:e2:
25:b5:cd:24:4b:5c:2f:d5:0a:e5:75:2d:5e:19:4b:
b2:60:4c:f8:e8:71:31:9f:74:5d:fa:03:23:ac:f1:
76:7e:cc:41:96:29:0b:8b:e0:15:96:83:1d:92:f9:
9e:68:da:db:da:98:f6:0b:14:e2:d6:c1:8a:3f:09:
b3:99:67:86:9a:4d:8d:8f:b6:a9:36:2c:15:c1:bc:
10:4a:a0:bf:7f:20:55:f5:96:9d:7e:6f:25:c3:7f:
d0:83:6f:99:34:cb:dd:ce:2f:97:26:db:89:a8:b7:
40:c9:7d:ab:af:c2:bf:50:da:17:8b:81:59:9f:44:
38:03:89:eb:49:2f:bb:00:70:52:8d:0c:87:f6:73:
16:e9:2f:1d:bd:27:8b:94:8f:99:a6:5a:23:55:f1:
c4:a9:f6:72:b1:b3:6b:40:9b:e7:e6:24:0a:ee:a8:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:09:62:A8:76:E7:FB:CE:9F:82:6A:D1:8D:25:0B:53:1F:52:59
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/0OwJYqh25_vOn4Jq0Y0lC1MfUlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.7.255
82.206.80.0/20
Signature Algorithm: sha256WithRSAEncryption
23:2a:be:10:89:5a:91:6a:71:bd:35:bb:50:03:8b:30:7a:00:
6c:9e:97:d2:f6:d2:76:c8:7e:57:28:3a:b4:dd:87:8a:3b:d0:
ef:35:48:e5:51:c9:8d:2f:1b:93:e3:52:cf:28:4c:06:48:8e:
ea:5e:bf:5f:d0:d5:64:df:dc:1e:2a:8c:75:f1:f7:cc:f5:7d:
98:15:39:e3:28:96:b9:c5:76:32:80:72:85:c1:fc:b0:1d:b4:
e1:7b:5e:71:b2:75:7d:5b:d5:51:0d:0d:4c:a4:26:67:b2:25:
74:12:bb:26:d7:8a:cb:af:e0:8e:8c:5c:81:cf:a2:4f:9c:d1:
10:d3:e0:4d:6b:2d:19:17:f6:7d:0e:3b:44:96:95:d1:c1:37:
6c:2f:8e:09:70:56:54:6a:7a:38:c6:ec:9d:ae:98:eb:7c:5e:
16:25:94:fc:59:ae:98:f3:2b:e0:f4:53:74:12:7a:33:0d:ad:
7c:96:54:82:e7:5a:6b:d5:71:ea:29:94:30:47:ad:6a:77:9a:
18:a6:9f:b9:a3:11:72:9c:4f:0f:e2:a8:f6:7f:2d:e4:33:e0:
1b:f8:7f:be:2a:79:42:93:e1:48:92:67:db:ea:b6:87:d8:4e:
ad:f4:41:8e:76:20:bd:2b:ef:82:bf:84:8f:91:27:b3:4d:ed:
3c:6b:8e:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:29 2025 by rpki-client