Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/hGN4C5vcb-XVXtXGXXG7ocCKPh8.roa
File: hGN4C5vcb-XVXtXGXXG7ocCKPh8.roa (raw, json)
Hash identifier: loaFhvmkghuCLp3rH9azjOd2+dePkne6bd80cGVrPNo=
Subject key identifier: 84:63:78:0B:9B:DC:6F:E5:D5:5E:D5:C6:5D:71:BB:A1:C0:8A:3E:1F
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194DFA6EEDCB856EF7EC9690DC3BAAB41EA
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/hGN4C5vcb-XVXtXGXXG7ocCKPh8.roa
Signing time: Fri 07 Feb 2025 09:04:06 +0000
ROA not before: Fri 07 Feb 2025 09:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216106
IP address blocks: 82.206.22.0/23 maxlen: 24
82.206.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 11:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:a6:ee:dc:b8:56:ef:7e:c9:69:0d:c3:ba:ab:41:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 7 09:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8463780b9bdc6fe5d55ed5c65d71bba1c08a3e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:2b:a5:de:01:0d:49:b6:b5:e5:5f:cb:e3:
dc:ad:60:0f:a8:77:c9:80:de:8c:21:63:b5:0a:74:
f9:12:11:9a:a0:61:80:1f:10:6f:30:0e:2d:0d:55:
70:59:e4:ca:48:3a:1b:20:fe:f5:f1:a5:01:a5:d2:
f0:9d:c4:76:c2:4b:ba:cf:f0:54:17:19:62:14:0d:
c3:e9:2f:31:bc:89:d5:ca:a3:93:35:f5:35:5d:69:
40:1e:e1:0f:e6:4e:92:3b:cd:31:01:3c:72:f1:89:
e1:46:79:a2:61:6a:2c:18:93:3e:21:ce:59:f3:b2:
ca:31:ad:30:54:37:91:05:18:eb:1e:bf:21:f8:68:
7e:29:c0:a1:5a:1a:c7:78:8e:e5:8e:85:24:61:f2:
93:93:13:dc:80:fd:66:22:28:31:cd:7d:f3:a7:da:
3f:18:50:ab:d6:b8:8f:83:57:f3:a0:cd:95:18:3d:
47:a0:4e:57:0d:85:b8:8d:e8:09:a8:d3:78:21:1b:
a4:28:16:83:a9:8f:9c:ba:b4:e5:d9:b5:8a:8c:6b:
d6:be:d1:68:db:23:a8:d1:5a:c6:ae:b6:fd:ff:5e:
4c:e6:fa:98:2f:5b:fd:00:0d:56:6e:d1:eb:36:e5:
b8:90:af:5d:9f:ca:e3:ad:fa:b9:3b:b6:e3:d0:5d:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:63:78:0B:9B:DC:6F:E5:D5:5E:D5:C6:5D:71:BB:A1:C0:8A:3E:1F
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/hGN4C5vcb-XVXtXGXXG7ocCKPh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.22.0/23
82.206.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:9b:9e:4e:d0:b6:66:9a:fa:b3:a4:91:94:eb:bf:8a:8d:5a:
ce:ae:7f:49:8f:09:0c:17:69:85:d1:c4:7d:ce:e6:01:f6:e8:
68:32:fd:f7:55:34:30:9a:05:a6:ac:78:29:b7:30:1d:6f:7a:
17:c2:c0:0c:48:a6:a3:1b:f4:a4:12:65:93:d3:ef:54:9c:34:
f5:fb:88:09:be:6d:85:c7:b1:f6:ee:d8:44:05:80:53:ce:b3:
78:56:ab:92:9f:57:90:54:a4:b2:c2:92:14:5b:91:58:87:be:
9a:fe:31:9c:51:21:e9:74:1f:cb:8d:6d:76:7d:1e:e9:4e:1c:
73:8c:69:57:12:04:f9:92:00:f9:69:ac:03:8b:6a:f3:d1:e5:
2c:72:01:99:43:6d:f3:da:0f:19:52:48:53:bc:85:2c:0a:bd:
d4:db:03:fd:af:2d:bb:81:0b:5b:87:84:0e:d9:f7:7b:04:7e:
e6:49:f1:48:12:20:7a:20:cb:12:39:b1:97:ee:20:10:03:fe:
5e:9d:6f:2c:65:52:63:25:f4:bc:4d:a2:87:ec:92:e1:65:65:
2e:05:6d:6b:4f:0c:7c:54:55:fe:d7:db:33:5a:11:83:c3:15:
20:20:c0:61:22:45:e5:6e:c1:5d:2e:ca:e6:85:d7:fe:b7:79:
26:8f:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:29:19 2025 by rpki-client