Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rRFBpkYGGDroxxmMFui_-h__Qoo.roa
File: rRFBpkYGGDroxxmMFui_-h__Qoo.roa (raw, json)
Hash identifier: G8qdZdo4ggRU16p7PvQiAz2l3AdvC8tEZQXtDSNiezk=
Subject key identifier: AD:11:41:A6:46:06:18:3A:E8:C7:19:8C:16:E8:BF:FA:1F:FF:42:8A
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01954C039C814FEE03957748BC0BD5008008
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rRFBpkYGGDroxxmMFui_-h__Qoo.roa
Signing time: Fri 28 Feb 2025 10:04:19 +0000
ROA not before: Fri 28 Feb 2025 10:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 23
82.206.4.0/22 maxlen: 24
82.206.16.0/22 maxlen: 22
82.206.72.0/21 maxlen: 21
82.206.80.0/21 maxlen: 21
82.206.88.0/21 maxlen: 21
82.206.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 17:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:03:9c:81:4f:ee:03:95:77:48:bc:0b:d5:00:80:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 28 10:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad1141a64606183ae8c7198c16e8bffa1fff428a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:f9:f2:d7:a2:cf:8c:4e:01:09:15:a5:b9:
82:f7:12:f7:7b:90:73:46:24:df:e0:ab:fb:d8:dd:
ee:80:a9:a6:11:a9:65:bd:46:9f:3b:ff:85:df:e8:
2f:01:5a:b1:c8:6b:e0:1d:86:27:10:6d:c7:82:c2:
b2:66:7f:d9:98:1d:22:dc:9e:57:05:bc:6a:8b:23:
27:1a:18:37:33:3f:8e:7c:c8:7c:80:a7:4e:77:f6:
4f:df:b4:be:1a:6a:d7:12:95:13:d0:3b:99:f8:33:
3a:d8:b2:5a:5b:38:d5:7b:7e:0a:e1:32:c7:a0:00:
7f:ff:8d:10:3c:2c:bc:96:c1:6e:cc:d6:a5:7f:69:
ee:d6:6b:f5:dd:aa:8d:b7:c1:1d:dc:d6:77:ae:1d:
05:00:d0:42:80:d8:9b:5f:66:98:05:15:a0:6e:0a:
a5:da:e8:63:b2:56:6f:17:7e:ba:83:6e:5c:b9:09:
4c:f8:57:ce:11:82:b5:df:7a:a7:90:27:7c:0e:d3:
4d:04:4b:7f:11:07:dc:c6:d1:d8:36:48:ea:07:1d:
da:18:06:c7:da:a1:ba:eb:46:ef:4e:d1:e3:b7:44:
7d:65:b7:df:17:cd:4d:dc:e6:41:ef:09:86:0e:07:
87:9c:a7:80:a3:89:e0:b5:d7:c8:f3:d4:28:7e:2a:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:41:A6:46:06:18:3A:E8:C7:19:8C:16:E8:BF:FA:1F:FF:42:8A
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rRFBpkYGGDroxxmMFui_-h__Qoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.7.255
82.206.16.0/22
82.206.72.0-82.206.111.255
Signature Algorithm: sha256WithRSAEncryption
1f:9e:e0:2e:ec:57:40:aa:77:6c:53:7d:9a:28:d9:7d:3d:ec:
33:e7:25:d0:ed:5f:77:a2:9c:0f:14:3b:ec:5f:9b:21:59:8d:
e1:89:98:95:6e:d7:ab:75:f8:e1:03:d0:6e:fa:b2:01:b7:e2:
09:ae:43:76:7b:af:b1:14:62:57:82:63:c4:c7:c2:f5:26:de:
2e:74:99:c3:51:d2:67:3a:b3:dc:a9:ad:f9:bf:2f:68:50:a8:
ea:44:70:15:c1:eb:4f:9b:df:03:70:0f:51:f3:37:af:0b:32:
7e:aa:71:c5:56:d4:ac:56:b6:6e:76:78:39:a9:e9:ba:26:fd:
8d:a9:cb:2d:d6:64:a8:ac:ef:52:9a:26:09:13:2b:10:8b:b7:
bc:66:41:cb:c1:cf:4a:aa:e3:d6:5d:be:a7:eb:f5:09:5c:f2:
3d:10:5e:3d:ee:02:fb:b6:71:0a:f1:62:74:b7:07:f7:7c:50:
4b:b9:f4:ff:67:82:b2:82:ad:c3:ab:1c:0e:5a:78:f5:69:ff:
69:99:52:01:5b:84:fd:fa:22:f5:de:ac:c5:81:34:af:58:b4:
de:23:cb:4b:f5:20:92:6f:bc:ee:62:f9:fd:58:16:7c:e6:20:
b3:e0:64:07:e9:73:78:f5:8a:7e:9b:3f:ad:a5:55:b2:6c:ae:
b9:cd:ad:bf
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZVMA5yBT+4DlXdIvAvVAIAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjUwMjI4MTAwNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDExNDFhNjQ2MDYxODNhZThjNzE5OGMxNmU4YmZmYTFmZmY0MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtL58teiz4xOAQkVpbmC9xL3e5Bz
RiTf4Kv72N3ugKmmEallvUafO/+F3+gvAVqxyGvgHYYnEG3HgsKyZn/ZmB0i3J5X
BbxqiyMnGhg3Mz+OfMh8gKdOd/ZP37S+GmrXEpUT0DuZ+DM62LJaWzjVe34K4TLH
oAB//40QPCy8lsFuzNalf2nu1mv13aqNt8Ed3NZ3rh0FANBCgNibX2aYBRWgbgql
2uhjslZvF366g25cuQlM+FfOEYK133qnkCd8DtNNBEt/EQfcxtHYNkjqBx3aGAbH
2qG660bvTtHjt0R9ZbffF81N3OZB7wmGDgeHnKeAo4ngtdfI89QofipsUQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK0RQaZGBhg66McZjBbov/of/0KKMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvclJGQnBrWUdHRHJveHhtTUZ1aV8taF9fUW9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAFSzgID
BANSzgADBAJSzhAwDAMEA1LOSAMEBFLOYDANBgkqhkiG9w0BAQsFAAOCAQEAH57g
LuxXQKp3bFN9mijZfT3sM+cl0O1fd6KcDxQ77F+bIVmN4YmYlW7Xq3X44QPQbvqy
AbfiCa5DdnuvsRRiV4JjxMfC9SbeLnSZw1HSZzqz3Kmt+b8vaFCo6kRwFcHrT5vf
A3APUfM3rwsyfqpxxVbUrFa2bnZ4Oanpuib9janLLdZkqKzvUpomCRMrEIu3vGZB
y8HPSqrj1l2+p+v1CVzyPRBePe4C+7ZxCvFidLcH93xQS7n0/2eCsoKtw6scDlp4
9Wn/aZlSAVuE/foi9d6sxYE0r1i03iPLS/Ugkm+87mL5/VgWfOYgs+BkB+lzePWK
fps/raVVsmyuuc2tvw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:12 2025 by rpki-client