Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-q82uyB3UJMbZG2YUiStSBj0Nr8.roa
File: 1-q82uyB3UJMbZG2YUiStSBj0Nr8.roa (raw, json)
Hash identifier: CGWNd3Pg3tGN4wXZJyFh2r4UvGjqE4dYU+J3eyQsgxM=
Subject key identifier: FA:AF:36:BB:20:77:50:93:1B:64:6D:98:52:24:AD:48:18:F4:36:BF
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0194651524DEE14EAA546BD41E56786DB435
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-q82uyB3UJMbZG2YUiStSBj0Nr8.roa
Signing time: Tue 14 Jan 2025 13:51:11 +0000
ROA not before: Tue 14 Jan 2025 13:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 82.115.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 15 Jan 2025 07:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:15:24:de:e1:4e:aa:54:6b:d4:1e:56:78:6d:b4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 14 13:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faaf36bb207750931b646d985224ad4818f436bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:c7:8b:7e:7b:79:df:2c:eb:72:65:2d:d1:
ad:69:40:82:30:26:db:30:97:db:19:5a:f3:bc:15:
13:07:85:bc:15:90:00:ce:1a:fb:d3:0a:b1:8a:13:
36:6d:17:2b:42:9c:22:88:1b:7b:50:39:17:0e:ba:
76:a5:ae:83:e8:89:30:a9:a9:5c:cc:c7:58:3a:a8:
22:8b:2d:15:a3:04:b6:a7:40:a5:a1:bf:38:aa:c4:
9c:09:28:e3:55:59:58:da:57:a2:8b:12:e7:b9:6e:
e3:c7:ac:11:47:c5:a8:19:09:42:31:69:c8:cf:50:
35:4b:88:12:d7:d4:56:32:e5:78:06:09:af:8a:39:
78:51:80:f2:84:75:a5:56:08:cb:85:7b:34:0e:2f:
dc:9b:87:33:99:7f:14:d9:ef:9e:52:0e:76:76:f2:
5a:39:b1:ac:e6:0e:3d:ae:2c:41:2f:1e:4d:2b:a8:
c9:eb:f1:a7:91:32:92:dd:43:15:97:82:15:c6:11:
a2:bb:51:b4:b2:f1:d5:e8:00:9c:1e:7e:40:66:51:
8f:41:0a:c7:51:40:01:84:dc:00:62:cc:76:40:ff:
6f:e0:fc:bb:8d:0e:48:2b:39:97:34:86:a0:d8:e6:
94:48:cf:c5:e0:51:a6:1a:73:e0:b2:50:03:4b:ba:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AF:36:BB:20:77:50:93:1B:64:6D:98:52:24:AD:48:18:F4:36:BF
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-q82uyB3UJMbZG2YUiStSBj0Nr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.10.0/23
Signature Algorithm: sha256WithRSAEncryption
10:17:0b:89:18:c2:99:b1:91:e8:d8:48:c4:50:6f:b8:be:11:
26:aa:ab:23:0f:ad:51:b1:59:b8:8c:31:e5:04:23:03:d8:e9:
40:31:70:cd:4c:90:70:3c:aa:55:93:51:e5:e7:22:51:56:70:
ab:5d:62:77:fc:da:4b:23:bc:bf:62:53:f3:37:d6:4e:7e:c3:
9e:74:27:0b:7b:f8:5f:3e:05:da:88:4f:29:51:09:b0:b7:e4:
58:dd:cc:88:67:4d:64:12:c1:4e:7f:9b:1c:52:dd:7a:74:2e:
da:74:76:c0:f4:b5:c5:a4:3e:cb:26:bb:a7:69:44:ec:83:80:
c5:56:44:c0:6a:c0:48:26:a5:70:de:4f:e3:87:fb:a3:c3:bc:
03:52:d9:35:8a:b8:49:e4:0d:9b:87:a9:13:8e:9b:c9:c8:23:
ea:ee:65:e0:70:e1:85:b6:83:98:6c:a6:e3:e8:d9:3d:fe:c2:
77:20:8b:17:3c:1f:b7:6d:3f:45:67:7d:02:93:4a:d1:4b:7d:
ba:ad:8b:6c:ab:6c:52:c1:87:6e:66:f4:80:37:89:bb:2c:38:
75:df:84:e7:0f:66:f5:7c:16:14:cd:33:09:86:c4:48:e6:9d:
91:a9:63:a4:36:c1:5f:0e:25:92:ec:8d:e3:e0:e4:56:c3:6e:
95:57:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:40 2025 by rpki-client