Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kkNpoUKdpEJvew1-WLJv63mgkhQ.roa
File: kkNpoUKdpEJvew1-WLJv63mgkhQ.roa (raw, json)
Hash identifier: LlMCDHzQLX4hawHzLevL+sUGVPGM/Lkg6wKEBJqErKY=
Subject key identifier: 92:43:69:A1:42:9D:A4:42:6F:7B:0D:7E:58:B2:6F:EB:79:A0:92:14
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC6EA7756338E4A3D0E8EC8B6BD925
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kkNpoUKdpEJvew1-WLJv63mgkhQ.roa
Signing time: Thu 02 Jan 2025 07:48:07 +0000
ROA not before: Thu 02 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 82.115.1.0/24 maxlen: 24
82.115.2.0/23 maxlen: 24
82.115.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 14 Jan 2025 13:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:6e:a7:75:63:38:e4:a3:d0:e8:ec:8b:6b:d9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=924369a1429da4426f7b0d7e58b26feb79a09214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:72:0d:99:cc:83:3c:a9:16:22:0a:96:19:
71:fb:dc:50:39:d6:2f:8a:9c:9b:e7:c8:be:be:c4:
0b:0e:08:33:fb:8e:b5:d8:16:57:fa:0e:7c:1b:7b:
73:32:ad:dd:f9:5f:03:4b:83:20:ee:74:1c:85:e9:
99:bb:ca:45:3a:25:44:bd:7e:4a:5c:6d:3f:8b:e9:
2e:ba:65:20:d2:45:ee:2b:1d:fd:14:1a:0d:52:eb:
c3:5e:e0:75:c8:83:ee:ea:a5:66:28:66:80:15:8a:
8f:4f:33:ec:cc:a5:a9:dd:28:f9:76:f2:7d:3a:5b:
bc:d2:c8:c3:4e:bf:80:b3:93:db:7f:75:d0:dc:7a:
4d:0a:9c:97:22:d6:f4:30:9a:98:e8:5a:76:3f:8a:
78:3f:53:ca:cf:d8:12:a3:78:53:cf:45:82:9b:8b:
80:0f:32:c6:5f:93:d5:db:e3:e1:42:0d:8b:72:6c:
fa:4b:27:45:20:e0:e8:a8:05:e4:eb:22:c1:9a:67:
db:84:c6:f3:f3:de:a2:bf:c5:c2:e4:04:2d:f1:3f:
d9:bd:78:4d:c7:32:1f:8e:ab:b0:ed:81:57:b3:b0:
ba:0f:2b:59:a2:eb:bc:a3:86:37:11:56:aa:46:ab:
26:e2:66:7b:28:be:d2:01:54:f8:7b:9c:17:96:ac:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:69:A1:42:9D:A4:42:6F:7B:0D:7E:58:B2:6F:EB:79:A0:92:14
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kkNpoUKdpEJvew1-WLJv63mgkhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.1.0-82.115.3.255
82.115.10.0/23
Signature Algorithm: sha256WithRSAEncryption
13:be:b9:03:e9:e2:5f:c7:6e:6b:e5:c5:e1:86:53:21:b7:ba:
1a:17:48:77:ce:3c:56:00:2e:12:bc:b9:61:c3:d1:0d:8e:fa:
5b:87:4a:b0:20:35:67:2e:cd:cc:0c:92:4d:4c:25:94:cf:51:
dd:8f:7e:db:00:85:2d:47:64:4d:29:59:63:b2:45:b8:bf:fa:
7b:c5:76:aa:d1:64:1d:aa:68:50:cd:d8:5d:04:a7:82:57:51:
a2:ad:bc:8f:40:7d:ae:7b:1f:ea:e3:99:50:7f:ff:39:5d:98:
11:b5:88:b2:b7:25:8a:00:01:29:92:f8:87:e1:58:f9:26:e9:
1c:44:cb:03:eb:ab:6e:84:28:e6:11:d6:6c:32:73:f6:49:11:
d5:94:21:7b:32:3a:ed:ce:e8:2f:fa:24:60:24:63:e9:db:d2:
2a:e9:89:59:07:00:3e:f2:7a:b1:dc:2c:b2:fb:b8:02:f9:41:
1a:d7:ca:0b:c9:41:e9:af:ee:35:ac:10:c5:86:a9:b8:e6:90:
4b:4b:ad:24:b2:18:51:42:18:4e:34:c2:a2:7e:e6:48:3f:36:
a8:a8:b8:b3:51:cb:77:d3:25:df:97:b7:c9:92:fe:7b:ec:e5:
7d:1e:22:59:68:b1:3b:04:dc:85:02:c6:a8:8f:d4:78:a2:92:
a6:9c:47:8a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQl/G6ndWM45KPQ6OyLa9klMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwMTAyMDc0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjQzNjlhMTQyOWRhNDQyNmY3YjBkN2U1OGIyNmZlYjc5YTA5MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRlyDZnMgzypFiIKlhlx+9xQOdYv
ipyb58i+vsQLDggz+4612BZX+g58G3tzMq3d+V8DS4Mg7nQchemZu8pFOiVEvX5K
XG0/i+kuumUg0kXuKx39FBoNUuvDXuB1yIPu6qVmKGaAFYqPTzPszKWp3Sj5dvJ9
Olu80sjDTr+As5Pbf3XQ3HpNCpyXItb0MJqY6Fp2P4p4P1PKz9gSo3hTz0WCm4uA
DzLGX5PV2+PhQg2Lcmz6SydFIODoqAXk6yLBmmfbhMbz896iv8XC5AQt8T/ZvXhN
xzIfjquw7YFXs7C6DytZouu8o4Y3EVaqRqsm4mZ7KL7SAVT4e5wXlqzMLwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJJDaaFCnaRCb3sNfliyb+t5oJIUMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEva2tOcG9VS2RwRUp2ZXcxLVdMSnY2M21na2hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABScwED
BAJScwADBAFScwowDQYJKoZIhvcNAQELBQADggEBABO+uQPp4l/HbmvlxeGGUyG3
uhoXSHfOPFYALhK8uWHD0Q2O+luHSrAgNWcuzcwMkk1MJZTPUd2PftsAhS1HZE0p
WWOyRbi/+nvFdqrRZB2qaFDN2F0Ep4JXUaKtvI9Afa57H+rjmVB//zldmBG1iLK3
JYoAASmS+IfhWPkm6RxEywPrq26EKOYR1mwyc/ZJEdWUIXsyOu3O6C/6JGAkY+nb
0irpiVkHAD7yerHcLLL7uAL5QRrXygvJQemv7jWsEMWGqbjmkEtLrSSyGFFCGE40
wqJ+5kg/NqiouLNRy3fTJd+Xt8mS/nvs5X0eIllosTsE3IUCxqiP1HiikqacR4o=
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:53:07 2025 by rpki-client