Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/9lZ6Z9KM_ZY3FhnYSylWq6Uh2Bk.roa
File: 9lZ6Z9KM_ZY3FhnYSylWq6Uh2Bk.roa (raw, json)
Hash identifier: FfkdRiPP3h95E8x+38W2K7LQ6TBzenhgeEJOhiWzeE4=
Subject key identifier: F6:56:7A:67:D2:8C:FD:96:37:16:19:D8:4B:29:56:AB:A5:21:D8:19
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194FAC1A6DA684BDEF1BFC98983D969E2F1
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/9lZ6Z9KM_ZY3FhnYSylWq6Uh2Bk.roa
Signing time: Wed 12 Feb 2025 15:23:02 +0000
ROA not before: Wed 12 Feb 2025 15:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 23
82.206.4.0/22 maxlen: 24
82.206.16.0/22 maxlen: 22
82.206.80.0/21 maxlen: 21
82.206.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 17 Feb 2025 16:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:c1:a6:da:68:4b:de:f1:bf:c9:89:83:d9:69:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 12 15:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6567a67d28cfd96371619d84b2956aba521d819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:0a:09:cd:db:ef:a5:0f:65:8f:8c:c4:a3:
12:74:c9:f9:25:a3:8a:5e:26:4b:d1:f2:8d:ff:c3:
40:ae:de:e2:e9:b4:6a:28:d4:01:c9:57:e5:bb:6a:
a9:82:ba:d8:04:31:08:e7:e1:2a:3b:3e:15:e5:84:
52:81:a1:76:f7:91:c7:f5:ae:a9:41:c8:fb:8c:cc:
38:a9:65:24:59:8a:67:2d:70:46:9c:52:4e:41:4d:
f1:06:00:4e:30:8a:b3:07:08:a5:79:12:6e:0b:c8:
98:3b:a3:de:09:d0:ad:db:3d:32:81:c4:88:34:e4:
ca:14:97:43:ed:fd:2c:86:f8:65:84:10:3c:c1:5b:
6d:f0:e9:85:dc:1c:43:50:45:e6:61:bc:96:5a:10:
21:76:57:cd:cb:e6:5b:61:59:45:13:90:1b:3a:58:
18:6a:74:31:31:a2:01:c4:7d:fd:4f:1c:7d:a9:dc:
8f:1c:e7:c2:2b:0c:f1:ce:7c:91:c0:3e:c5:be:07:
c6:82:c6:53:0a:34:b3:9a:22:a8:68:f0:db:74:02:
3a:e9:7f:ed:99:10:3a:c9:de:e3:cc:26:93:1a:0b:
6d:62:45:0f:e2:67:25:66:a4:41:68:7b:73:58:f7:
18:93:42:12:7b:80:4c:63:be:ae:b8:4e:54:5f:fc:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:56:7A:67:D2:8C:FD:96:37:16:19:D8:4B:29:56:AB:A5:21:D8:19
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/9lZ6Z9KM_ZY3FhnYSylWq6Uh2Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.7.255
82.206.16.0/22
82.206.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:e4:3a:7a:4b:c8:a6:b5:c9:d8:04:09:43:3d:b1:a3:5a:d2:
06:54:a5:48:8b:65:17:33:d6:02:8f:a0:41:53:e3:bf:e1:13:
a2:c8:b4:07:4e:39:5d:a8:ce:db:0e:99:8b:27:f9:dc:ad:19:
62:7d:72:1d:6d:a0:94:d8:b8:a5:68:a0:de:f3:fd:5a:47:07:
86:f6:5e:28:cd:41:89:8c:57:38:b0:4f:86:5c:d8:fc:e1:f3:
b9:6f:07:90:e8:8f:6f:43:35:bb:8d:48:34:4c:b5:5d:8c:80:
6f:5a:48:4e:15:4c:36:23:80:02:6d:49:76:51:56:57:b1:dc:
fe:88:d1:a4:0b:8d:83:58:f2:45:c7:ca:2c:bf:0d:3c:d1:14:
a0:b0:64:4b:2a:f5:e6:0b:dc:1e:9d:f2:26:11:c8:ea:54:3c:
cf:2a:32:03:4c:d7:1e:42:11:ca:7a:d2:e3:00:a3:e9:eb:2f:
b9:84:a5:f3:c4:86:26:42:c8:f4:68:9b:43:de:38:88:c1:40:
cf:3b:a3:12:99:68:92:32:e3:8c:51:3f:b2:c2:73:e3:8e:1e:
58:09:c5:23:55:be:e9:83:1f:84:6a:cb:be:0f:84:df:ee:e9:
f1:a9:88:8d:74:5e:7b:68:c8:de:95:0a:7d:2a:f1:33:c9:46:
a7:d0:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:51 2025 by rpki-client