Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/x7J83yC4b6pDto-X2VwDLewSs6E.roa
File: x7J83yC4b6pDto-X2VwDLewSs6E.roa (raw, json)
Hash identifier: m7djqkYhUSlHHipA74VeHQBzPFjFE4G2FV9jK546NDk=
Subject key identifier: C7:B2:7C:DF:20:B8:6F:AA:43:B6:8F:97:D9:5C:03:2D:EC:12:B3:A1
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018CC2DB13FD7B73DC617A51DA0354C955B7
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/x7J83yC4b6pDto-X2VwDLewSs6E.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21106
IP address blocks: 82.206.0.0/21 maxlen: 24
82.206.8.0/21 maxlen: 24
82.206.16.0/21 maxlen: 24
82.206.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 16:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:13:fd:7b:73:dc:61:7a:51:da:03:54:c9:55:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7b27cdf20b86faa43b68f97d95c032dec12b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:13:e2:8c:74:2b:07:41:b3:60:04:61:04:
57:97:c7:5c:6c:76:d9:04:d0:6c:a2:b5:69:4b:7c:
58:8e:d5:78:9e:1c:3a:69:2b:48:79:76:2a:70:fd:
0a:ce:6f:fa:6e:60:9f:68:96:44:49:6e:2e:09:33:
ff:e1:13:ce:1a:1c:a0:4c:77:b8:04:5c:c9:54:0a:
20:0e:60:b8:df:ab:50:0b:3b:a2:7b:eb:ff:5f:29:
7b:aa:ac:3c:aa:82:bd:31:b1:5f:c0:9e:7a:18:b8:
63:8f:6a:6d:b3:32:ce:b2:e4:1e:f2:45:08:5c:29:
d1:78:ff:01:89:5d:ce:d8:a8:bc:06:77:07:81:c7:
8c:61:6e:02:3b:d5:c1:32:ed:53:94:f6:24:a8:7a:
1a:8b:af:8b:3a:88:04:1f:87:59:e3:58:53:c1:2d:
82:be:f2:04:96:d5:0e:41:e6:b7:f8:64:49:1e:ea:
f7:8b:34:c8:24:b2:d2:7e:f1:28:84:f9:b4:81:b4:
87:5d:97:f8:95:1d:dd:44:1b:e8:71:1b:5e:b9:30:
1d:92:14:ff:cf:6f:af:aa:6c:32:21:6e:6a:5f:da:
79:97:de:22:a7:3d:1b:b1:29:58:3c:00:94:ef:30:
43:65:b3:e1:36:88:d9:33:56:b5:60:64:f9:3f:fb:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:7C:DF:20:B8:6F:AA:43:B6:8F:97:D9:5C:03:2D:EC:12:B3:A1
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/x7J83yC4b6pDto-X2VwDLewSs6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.0.0-82.206.23.255
Signature Algorithm: sha256WithRSAEncryption
88:0b:a9:4e:b8:29:6c:a0:85:d6:ac:cf:df:73:df:01:ba:25:
c0:51:f4:0b:93:75:40:6b:93:4e:fe:8d:2c:12:e4:d5:1e:69:
86:e3:58:a6:d9:43:13:17:29:40:43:0d:b3:e4:05:4b:5c:d3:
0c:73:55:75:f5:68:e5:a1:22:5a:b9:df:bb:b3:b1:47:a8:d1:
98:72:d9:96:78:4f:42:d3:12:e9:58:0c:e8:08:f9:13:48:15:
b2:1e:da:33:57:7d:68:01:29:8b:7f:56:58:45:c2:25:7b:9c:
d3:36:24:6d:45:91:87:b6:42:1c:d8:eb:ed:9a:3b:94:18:bd:
6f:0f:5f:f8:db:dc:65:cd:95:38:0b:9e:97:b3:41:49:4c:0b:
d3:65:0b:59:27:dc:71:2f:3e:73:5d:d5:84:1c:a0:96:ea:80:
3c:c9:40:7d:52:35:b0:a5:31:79:02:14:6b:10:04:56:7a:06:
8b:71:8e:f4:56:25:12:be:ba:96:b3:71:1c:65:5b:9d:28:9b:
ad:63:7b:e4:18:30:6d:13:3f:49:72:82:eb:4f:fd:d9:19:33:
9e:4c:3b:f3:d7:5a:f6:04:3e:b8:6b:12:16:2a:d6:94:95:55:
d0:f3:08:0e:c6:19:41:3c:27:68:09:d4:37:64:43:86:e9:82:
ba:53:56:92
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYzC2xP9e3PcYXpR2gNUyVW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjQwMTAxMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2IyN2NkZjIwYjg2ZmFhNDNiNjhmOTdkOTVjMDMyZGVjMTJiM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEoT4ox0KwdBs2AEYQRXl8dcbHbZ
BNBsorVpS3xYjtV4nhw6aStIeXYqcP0Kzm/6bmCfaJZESW4uCTP/4RPOGhygTHe4
BFzJVAogDmC436tQCzuie+v/Xyl7qqw8qoK9MbFfwJ56GLhjj2ptszLOsuQe8kUI
XCnReP8BiV3O2Ki8BncHgceMYW4CO9XBMu1TlPYkqHoai6+LOogEH4dZ41hTwS2C
vvIEltUOQea3+GRJHur3izTIJLLSfvEohPm0gbSHXZf4lR3dRBvocRteuTAdkhT/
z2+vqmwyIW5qX9p5l94ipz0bsSlYPACU7zBDZbPhNojZM1a1YGT5P/uOaQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFMeyfN8guG+qQ7aPl9lcAy3sErOhMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEveDdKODN5QzRiNnBEdG8tWDJWd0RMZXdTczZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwFSzgME
A1LOEDANBgkqhkiG9w0BAQsFAAOCAQEAiAupTrgpbKCF1qzP33PfAbolwFH0C5N1
QGuTTv6NLBLk1R5phuNYptlDExcpQEMNs+QFS1zTDHNVdfVo5aEiWrnfu7OxR6jR
mHLZlnhPQtMS6VgM6Aj5E0gVsh7aM1d9aAEpi39WWEXCJXuc0zYkbUWRh7ZCHNjr
7Zo7lBi9bw9f+NvcZc2VOAuel7NBSUwL02ULWSfccS8+c13VhBygluqAPMlAfVI1
sKUxeQIUaxAEVnoGi3GO9FYlEr66lrNxHGVbnSibrWN75BgwbRM/SXKC60/92Rkz
nkw789da9gQ+uGsSFirWlJVV0PMIDsYZQTwnaAnUN2RDhumCulNWkg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:56 2025 by rpki-client