Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/xizQsUfIEqy8pG0Q-OPhKxoG_-c.roa
File: xizQsUfIEqy8pG0Q-OPhKxoG_-c.roa (raw, json)
Hash identifier: EpjtDazq3WiwiwHEY/GpWbw7x/rorP5sK1cJhM2dx04=
Subject key identifier: C6:2C:D0:B1:47:C8:12:AC:BC:A4:6D:10:F8:E3:E1:2B:1A:06:FF:E7
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01946F8DB944D631E19D5502505C0B02DBE2
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/xizQsUfIEqy8pG0Q-OPhKxoG_-c.roa
Signing time: Thu 16 Jan 2025 14:39:06 +0000
ROA not before: Thu 16 Jan 2025 14:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 82.206.80.0/21 maxlen: 24
82.206.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 09:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:8d:b9:44:d6:31:e1:9d:55:02:50:5c:0b:02:db:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 16 14:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c62cd0b147c812acbca46d10f8e3e12b1a06ffe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:ba:67:c2:e7:f4:81:d6:0a:03:af:04:4e:
46:c0:91:97:52:2f:09:9e:4b:36:d0:ba:4b:9c:fa:
20:03:0b:de:6d:2b:b6:13:1c:6c:0c:3a:7b:84:6c:
a6:8e:a5:da:b6:6e:90:e5:b2:a0:bc:0e:cc:4c:e4:
36:42:03:5a:bb:65:53:f5:58:c2:4b:de:ad:97:3a:
ea:49:f8:05:a5:03:d0:4d:37:06:2e:b5:9e:f8:3e:
a0:45:c9:12:4e:a2:91:d5:89:b0:41:6d:95:01:3e:
f2:91:b7:cb:07:ab:09:29:bd:7b:91:8e:87:6c:86:
90:e0:0d:14:b3:ed:2e:45:ca:c2:03:8d:29:de:39:
0c:4e:72:ef:e3:60:a0:cc:fc:66:a9:3c:73:7a:87:
40:79:92:9a:65:a4:0e:e2:73:ef:4a:ff:8e:c1:af:
85:0f:7c:9e:b6:d6:4f:c8:89:c9:c2:26:53:90:f7:
34:19:c3:c1:75:c4:7b:43:8c:69:82:5f:a5:7c:f6:
17:cc:50:9e:c5:00:d2:20:d9:0a:65:b5:7f:3b:36:
db:69:de:2c:75:1a:09:5d:93:fe:3f:48:e7:00:f5:
16:20:4d:bf:32:57:ae:55:d3:ba:fa:b1:a8:25:f0:
3e:b6:16:f9:c6:43:ce:e6:85:ea:57:d5:37:d0:89:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:D0:B1:47:C8:12:AC:BC:A4:6D:10:F8:E3:E1:2B:1A:06:FF:E7
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/xizQsUfIEqy8pG0Q-OPhKxoG_-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.80.0/20
Signature Algorithm: sha256WithRSAEncryption
66:48:f6:81:ae:84:cd:d5:1a:62:e6:73:71:c2:5a:1f:86:f9:
7d:b8:a3:62:42:b7:24:aa:7a:f8:ce:d1:8f:61:f8:5c:5c:06:
a3:33:9f:d4:a9:21:c4:d6:26:0f:5b:f3:2b:bb:b9:e8:f3:68:
26:52:21:10:53:5d:ec:e0:93:44:76:a3:dc:80:7f:80:00:e7:
ad:ef:ad:9d:ba:77:d4:b0:80:e3:e5:16:73:42:2e:06:c0:49:
d7:0b:b1:77:0a:37:4b:06:7e:d2:2b:2e:73:cf:a2:f5:d9:f5:
bf:29:d9:4f:7b:ca:1c:1e:35:53:06:83:8e:32:05:cb:cf:cc:
18:d1:36:07:e5:9c:d5:f7:a6:d0:2b:cd:be:d8:98:19:dd:37:
03:bb:3a:1a:11:fe:79:4f:ed:b3:5e:31:e7:18:5d:92:82:b4:
d1:7d:d9:34:a3:85:5c:72:2f:89:a3:3e:e8:c5:3c:ce:ff:c7:
77:32:31:d5:a1:50:44:59:dd:03:fc:c9:5e:32:b9:6d:29:f4:
9f:d3:1a:8f:ce:a1:64:2d:50:70:d6:9b:18:98:4d:31:80:0d:
46:02:9d:a1:56:66:73:96:82:27:0d:50:67:19:12:e5:ed:aa:
30:50:b0:02:51:6c:01:77:47:bf:33:48:28:b6:09:47:72:ef:
9c:de:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:48 2025 by rpki-client