Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gZSxLyyT_yanwI7Hb2NQx-W9jgE.roa
File: gZSxLyyT_yanwI7Hb2NQx-W9jgE.roa (raw, json)
Hash identifier: vLruANpdTk8qClCQgUWoywhqCSA5RAQt3QwuqKd7lwU=
Subject key identifier: 81:94:B1:2F:2C:93:FF:26:A7:C0:8E:C7:6F:63:50:C7:E5:BD:8E:01
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019468E6EBA249011C7FEE8BC866910BE069
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gZSxLyyT_yanwI7Hb2NQx-W9jgE.roa
Signing time: Wed 15 Jan 2025 07:39:11 +0000
ROA not before: Wed 15 Jan 2025 07:39:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 82.115.1.0/24 maxlen: 24
82.115.2.0/23 maxlen: 24
82.115.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 29 Jan 2025 22:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:e6:eb:a2:49:01:1c:7f:ee:8b:c8:66:91:0b:e0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 15 07:39:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8194b12f2c93ff26a7c08ec76f6350c7e5bd8e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:dc:2c:f2:5d:f8:e8:20:13:9b:ef:19:dd:
11:95:40:8c:7a:d4:fe:97:68:84:2f:bd:6d:62:08:
f4:69:33:09:2c:3c:18:f9:6a:c1:53:90:86:4a:28:
2f:6d:75:cf:33:c0:72:56:49:ed:0e:b1:0f:ef:5c:
b1:6a:2d:a6:1e:2a:a0:8b:7c:15:94:2e:ad:47:30:
c8:16:4c:97:00:6a:ba:29:50:ab:c1:bf:fe:94:50:
1c:38:3b:ef:64:c3:44:5e:f1:31:05:f0:62:48:3f:
05:8f:bf:67:e6:d8:4a:cb:15:a2:25:e5:a3:75:45:
ee:ab:81:aa:35:cb:a5:5a:57:96:4a:3c:c5:36:19:
ae:16:55:e9:88:4c:96:af:04:cf:4d:df:5d:52:6d:
fa:d2:33:7b:e0:0f:ca:45:c5:cb:14:38:76:95:fd:
5e:2e:10:62:f6:c3:46:86:3b:b3:e4:31:2f:43:ed:
04:c3:ff:43:f4:35:00:62:8f:90:a1:81:f2:b2:be:
c7:9d:00:98:ab:f6:b5:fe:2f:af:4e:8a:86:c6:29:
e2:15:f3:d6:f1:c5:4b:08:7f:e3:53:46:68:c6:98:
66:05:27:a2:b8:83:ca:ca:9e:16:a6:11:66:28:bb:
a0:5e:8f:f3:47:81:ff:f7:01:2a:b6:81:86:f9:c2:
e2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:B1:2F:2C:93:FF:26:A7:C0:8E:C7:6F:63:50:C7:E5:BD:8E:01
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gZSxLyyT_yanwI7Hb2NQx-W9jgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.1.0-82.115.3.255
82.115.10.0/23
Signature Algorithm: sha256WithRSAEncryption
23:22:70:ac:f5:5e:3a:0f:6a:ea:fd:10:0e:e8:62:a5:74:47:
03:d0:51:0f:64:16:6a:5c:dd:c8:3f:bd:21:0c:ac:69:67:10:
de:49:3f:40:50:da:10:0b:b7:e2:99:88:a4:05:9e:04:92:5c:
73:f4:1a:60:99:b5:21:d5:15:81:43:3f:70:7f:82:0d:16:5a:
8f:6b:1f:7e:0a:b9:91:31:73:60:37:69:d9:55:27:62:78:7e:
f4:1b:ef:2c:c4:ef:1b:32:80:14:f5:ee:5f:82:96:bf:10:9f:
8f:3d:84:a4:22:0f:29:2b:33:39:38:b3:ea:79:9c:54:64:dd:
77:cd:24:ff:06:1b:58:9f:a0:bf:ea:42:39:b6:64:17:59:81:
e1:b2:65:bb:22:68:e0:98:aa:ad:8f:74:70:01:a4:b4:f5:b7:
c3:c1:8f:e7:35:a9:71:c0:36:9a:04:43:a2:c4:97:2e:25:69:
50:35:95:47:39:55:d2:f9:2f:4b:b3:b9:86:36:c2:d1:c7:fe:
93:96:04:ca:21:b2:45:c6:77:bf:da:f9:6c:1c:84:16:4e:63:
b6:21:ca:d0:c4:51:54:d6:0e:21:fd:12:98:4f:52:9c:33:b4:
81:09:5e:e1:cd:65:56:41:24:6d:39:38:ca:3e:11:73:a7:b7:
1b:db:46:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:47:31 2025 by rpki-client