Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fujfkYYBPPtaACd5-0-D921ejI0.roa
File: fujfkYYBPPtaACd5-0-D921ejI0.roa (raw, json)
Hash identifier: tnURFNpR2SV/NchQoxNhPURlxcedjck0dz5+Vl5lN44=
Subject key identifier: 7E:E8:DF:91:86:01:3C:FB:5A:00:27:79:FB:4F:83:F7:6D:5E:8C:8D
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194236A19BBC276A62ADF409DB04ACBC516
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fujfkYYBPPtaACd5-0-D921ejI0.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216106
IP address blocks: 82.206.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 09:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:19:bb:c2:76:a6:2a:df:40:9d:b0:4a:cb:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee8df9186013cfb5a002779fb4f83f76d5e8c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:27:5c:19:7e:3e:53:2f:1c:9e:a5:45:db:
be:cf:d9:2d:9d:39:15:05:b3:f3:38:b9:1a:4e:6a:
68:bc:0b:ad:ba:a1:f0:c0:49:9e:40:e5:1c:04:65:
6d:c3:0c:c5:e3:95:57:e6:db:19:03:1c:8f:40:9e:
c7:bc:d8:f7:cc:6f:d0:ee:df:60:6d:58:6c:84:02:
76:a1:d8:9d:94:13:3f:d6:53:7e:c9:08:d0:b9:63:
33:af:99:48:e8:fe:7b:44:a1:8d:1a:94:1f:27:b7:
80:0d:34:e7:15:86:e2:77:5d:a1:67:e8:1d:1d:5a:
2e:7f:a9:42:fd:56:01:1c:06:f0:e3:11:2d:61:52:
2b:09:1f:7f:1c:b1:ca:26:5d:69:ed:ec:f7:dc:4b:
98:30:89:63:38:c1:8f:71:62:4b:85:7a:61:c7:8b:
05:f2:77:e9:b5:67:6f:c0:a1:80:0b:28:1e:34:8a:
6d:0e:e6:e4:d2:c3:b5:db:68:ac:c1:bc:60:ea:95:
db:38:8f:3a:28:69:1f:fa:97:58:19:22:fe:45:42:
c8:f0:52:a1:7c:8d:5f:c6:d0:94:d4:bd:c9:78:e0:
58:7e:2c:e7:b3:ba:c9:17:f0:65:df:86:e1:94:b5:
98:8f:4a:38:ec:2a:50:1e:20:3a:2f:40:bf:d5:50:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:DF:91:86:01:3C:FB:5A:00:27:79:FB:4F:83:F7:6D:5E:8C:8D
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fujfkYYBPPtaACd5-0-D921ejI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.22.0/23
Signature Algorithm: sha256WithRSAEncryption
24:a3:4f:f1:85:de:14:c1:b2:b9:34:a8:3b:cb:5f:80:17:23:
ce:10:38:e7:be:74:89:66:57:b5:61:f6:7d:60:b2:46:1c:8c:
b3:b8:77:8f:5a:35:a6:e3:55:b3:42:65:46:df:d7:9e:da:13:
67:7b:04:81:d4:cd:50:ca:84:f4:46:57:6f:aa:21:12:bb:53:
82:5b:19:04:f8:64:76:72:33:5c:ec:04:51:db:ee:4d:e5:1c:
2b:a0:d8:ca:2e:04:1a:c8:53:7c:cf:7a:3d:42:ec:8c:60:d1:
ac:46:b1:7d:ed:8d:04:e1:f2:ff:82:6c:d2:fb:ee:b3:b4:4f:
14:57:31:4b:cd:f9:ea:98:33:9d:6d:7f:03:19:37:f8:bc:8a:
f4:e4:8e:69:f1:39:57:e5:e4:f8:ee:ed:ce:54:83:41:2d:0d:
89:eb:fa:4c:ed:e8:d9:12:33:e6:20:ac:b9:88:a5:1b:d7:95:
57:30:8a:a5:e2:11:36:65:a5:b0:6d:83:8c:ed:a0:c0:42:77:
be:20:0d:14:bd:cf:b5:c0:68:99:ae:f7:d4:4a:a8:73:2f:3a:
0c:f8:23:18:1d:61:6f:59:0c:e1:5f:55:cc:e4:10:a8:8a:5f:
88:9a:b0:32:06:c1:99:d1:4d:23:24:45:27:ef:36:89:0d:d3:
08:c3:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:09 2025 by rpki-client