Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3y2yk7vNwVDDUonG5NAb6_Mf7AE.roa
File: 3y2yk7vNwVDDUonG5NAb6_Mf7AE.roa (raw, json)
Hash identifier: QA6Wssrl6XtxTiWPI8IlsJ+DDkkPg5vzVxpYmX9YaUo=
Subject key identifier: DF:2D:B2:93:BB:CD:C1:50:C3:52:89:C6:E4:D0:1B:EB:F3:1F:EC:01
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0194B43C6D1CEE74C8289334511C39D54E74
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3y2yk7vNwVDDUonG5NAb6_Mf7AE.roa
Signing time: Wed 29 Jan 2025 22:44:06 +0000
ROA not before: Wed 29 Jan 2025 22:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 82.115.2.0/23 maxlen: 24
82.115.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 09 Mar 2025 10:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b4:3c:6d:1c:ee:74:c8:28:93:34:51:1c:39:d5:4e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 29 22:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df2db293bbcdc150c35289c6e4d01bebf31fec01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:7c:fa:5b:9f:19:3c:65:6d:bf:32:e0:98:
49:74:4f:7b:1d:db:6c:8a:35:34:cb:5d:ef:b5:f7:
d1:fe:d8:f4:f1:52:17:a4:60:57:5b:f6:fa:f2:8f:
4f:78:87:35:ea:63:24:ed:6b:fa:42:58:50:94:6c:
9c:f1:17:0a:59:a1:9a:c4:e9:99:c2:c8:f3:31:b1:
ab:71:1b:33:48:38:98:84:30:21:2a:4e:ac:68:d0:
c0:ef:27:58:d0:66:ab:b9:a7:14:11:c7:c9:ba:47:
dc:00:6b:e9:9e:30:d8:ae:4c:9d:d2:27:56:fa:0b:
f6:8d:62:3d:e0:fb:38:bd:91:00:24:bd:da:6d:a9:
74:31:2b:24:68:53:29:e3:a0:f3:5c:1e:bb:8a:5b:
4c:6f:12:b3:f3:42:e5:72:40:7f:c2:70:7d:33:07:
e0:63:1a:88:09:dc:01:55:0e:ab:32:f8:af:47:54:
9c:ae:05:55:af:b3:33:21:07:df:12:0f:04:a0:83:
ff:05:7f:04:87:ab:5b:33:52:95:a9:40:62:62:06:
d7:ce:f2:f0:2d:a4:44:c4:11:c2:06:e8:2d:ec:f1:
49:3d:a7:66:80:d9:6b:3f:04:b4:5e:eb:76:25:66:
f0:85:15:f3:4e:a1:01:32:8b:2d:01:e9:ac:48:42:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:B2:93:BB:CD:C1:50:C3:52:89:C6:E4:D0:1B:EB:F3:1F:EC:01
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3y2yk7vNwVDDUonG5NAb6_Mf7AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.2.0/23
82.115.10.0/23
Signature Algorithm: sha256WithRSAEncryption
db:12:83:c0:0c:4d:c0:4d:b4:f2:1d:e9:2b:cf:bf:33:6e:b2:
e6:b9:23:b4:7d:2d:f6:71:8e:24:f5:67:1a:05:fe:fb:ba:df:
c9:01:5f:1b:cb:9d:a8:a1:86:f7:55:25:dd:e5:e8:4c:7a:1f:
8f:47:77:04:35:35:d7:1a:11:da:b6:df:15:ea:bf:1f:2f:97:
3a:c0:4a:f1:8e:7e:77:c1:15:95:7e:3e:b7:11:2d:b4:2e:9f:
32:a3:c2:ea:72:82:61:8e:9c:78:43:b4:e1:eb:b6:c7:87:8c:
e2:5d:40:c5:1a:c2:4d:8c:71:11:ef:cf:aa:7a:ff:4f:3f:34:
96:27:1b:ca:f2:b4:f3:18:8c:d8:d9:52:72:16:a9:0d:cb:dc:
64:3c:71:1f:ee:f6:9a:e0:31:ab:90:5b:a4:fc:52:b2:28:a1:
49:5f:70:49:f5:cd:ed:ec:47:69:df:ee:16:2c:a8:4c:08:9d:
99:97:9b:99:b0:8d:69:b5:2e:66:cf:2c:f1:44:b6:51:ba:ed:
6f:3a:02:17:fe:3e:4e:66:8f:a6:18:42:3d:07:c3:b4:82:61:
5e:5d:9c:57:06:4d:f1:87:56:a9:85:59:2a:a0:ca:79:3c:04:
f4:fc:79:47:dc:d4:b0:5a:b1:6e:a8:37:1d:d3:10:ac:bb:98:
a4:c9:da:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:36 2025 by rpki-client