Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rXwnrkO2H1L_91FtJUwE1mD_JYk.roa
File: rXwnrkO2H1L_91FtJUwE1mD_JYk.roa (raw, json)
Hash identifier: gndMjLy3mUPsCNjy76W4VspzLj5sNQbZYeVihyDW0bs=
Subject key identifier: AD:7C:27:AE:43:B6:1F:52:FF:F7:51:6D:25:4C:04:D6:60:FF:25:89
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018CCFE25E54DC15B81018679C769D1BC6C7
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rXwnrkO2H1L_91FtJUwE1mD_JYk.roa
Signing time: Wed 03 Jan 2024 15:12:48 +0000
ROA not before: Wed 03 Jan 2024 15:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.206.64.0/21 maxlen: 24
82.206.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 09:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:e2:5e:54:dc:15:b8:10:18:67:9c:76:9d:1b:c6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 3 15:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad7c27ae43b61f52fff7516d254c04d660ff2589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:8c:aa:9d:71:a0:64:b6:05:2f:88:ba:e4:
56:80:2d:33:78:4a:79:3a:fd:2e:a4:63:17:10:35:
84:0d:e2:a9:78:fb:b5:2a:b0:1c:44:a2:5a:60:d6:
ea:19:15:41:71:c7:73:4c:56:d0:d2:ce:36:8b:24:
a1:7c:7c:90:d5:36:a1:b0:84:f1:dc:5c:db:c0:02:
f1:81:d5:7f:0d:2d:19:a2:00:50:f7:f2:02:3e:02:
e2:82:65:88:47:24:97:dc:3b:73:e2:95:f3:67:8a:
d9:a1:da:31:a0:09:54:67:98:a7:11:b6:cf:52:ca:
6b:5a:8f:e9:d6:bb:dc:3d:26:d6:25:5a:ee:69:22:
44:4f:6a:1a:12:6c:27:8d:d8:ef:2f:95:80:01:8b:
aa:d9:a7:1b:4c:09:c9:91:6d:bf:a8:d7:28:eb:f2:
e0:4b:6a:63:45:8e:22:e6:74:b4:6e:ff:ea:28:ee:
ed:b0:fc:24:21:88:d2:c9:0f:74:15:eb:11:f2:be:
aa:9a:8d:1d:c9:20:99:40:71:ed:80:ac:7b:28:33:
9d:d9:1c:8e:97:1e:49:da:c9:ef:a3:74:66:47:31:
1f:fb:19:07:be:e7:fb:5b:1e:51:c7:e9:59:ac:d1:
41:dd:fb:59:47:57:9b:0f:5a:cb:0e:c3:b2:8d:01:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7C:27:AE:43:B6:1F:52:FF:F7:51:6D:25:4C:04:D6:60:FF:25:89
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rXwnrkO2H1L_91FtJUwE1mD_JYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.64.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:76:96:0c:9c:61:10:77:68:16:cf:e5:db:0f:7a:fb:07:ba:
c7:67:cf:7f:4c:21:97:1b:9e:83:ee:7a:21:38:37:dc:2f:ae:
23:4c:0a:48:c6:2b:9d:62:0c:c0:bb:f3:f5:bf:95:f2:0f:f6:
86:b2:4a:98:ef:59:42:f3:28:5c:8f:ca:a5:19:0d:01:f0:c3:
85:73:37:a8:6a:4f:22:12:da:97:e3:47:e0:18:03:d6:32:40:
30:57:14:a9:5c:fd:5e:78:95:1e:a2:e0:0d:6b:54:ad:6e:d6:
46:87:2f:d0:b9:e2:ea:9d:48:26:d8:1a:7b:85:d5:02:d1:17:
11:40:25:3a:37:76:9b:f3:aa:50:24:cd:a0:76:31:aa:36:b4:
ad:f6:6f:72:14:12:7b:62:5d:16:7f:07:70:26:1a:72:8a:80:
a2:f0:11:ad:2b:69:f5:9f:84:e1:6c:43:fa:57:da:39:54:6d:
73:0c:d1:38:05:3c:81:68:27:b1:41:8a:5e:15:44:23:8c:54:
73:40:ca:5f:ee:26:0f:6c:1a:36:7b:0b:f5:1e:33:20:6a:95:
ce:6c:ca:6a:05:f5:0c:59:54:cc:9b:15:7a:15:e4:86:b1:d6:
f2:1b:b3:43:83:3a:8e:66:2a:76:54:17:76:3b:b1:8d:83:12:
da:07:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:56 2025 by rpki-client