Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/82d6S_kWqIJiP8uEAQf_RADJYOE.roa
File: 82d6S_kWqIJiP8uEAQf_RADJYOE.roa (raw, json)
Hash identifier: r1+EMfm+mL8NB76wb56U0swGeke2Kw4VC1IS5r45QSI=
Subject key identifier: F3:67:7A:4B:F9:16:A8:82:62:3F:CB:84:01:07:FF:44:00:C9:60:E1
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 01927F9A4FA8086DCFDC2926E8F60CFF2035
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/82d6S_kWqIJiP8uEAQf_RADJYOE.roa
Signing time: Sat 12 Oct 2024 07:21:12 +0000
ROA not before: Sat 12 Oct 2024 07:21:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28917
IP address blocks: 91.247.185.0/24 maxlen: 24
2a11:ca40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7f:9a:4f:a8:08:6d:cf:dc:29:26:e8:f6:0c:ff:20:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: Oct 12 07:21:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3677a4bf916a882623fcb840107ff4400c960e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:0d:e3:e9:68:e2:75:98:6f:45:2d:82:7b:
26:47:78:7d:d1:e2:3b:97:e2:1c:b1:25:7c:62:2e:
36:bc:9d:99:e1:c7:92:80:9b:03:5e:4f:25:97:e8:
83:86:ca:7f:55:16:a1:24:81:77:9e:2b:ed:1b:99:
86:0d:77:f2:ac:56:3a:fe:1a:36:50:ab:7a:8c:18:
c6:7b:2a:1c:6b:3b:ad:fd:b4:b1:84:34:e5:34:e2:
dd:28:83:b6:b1:5b:d5:c5:7d:ec:70:c1:46:12:8e:
36:35:aa:bd:ac:41:d0:0f:1f:9c:a9:cf:fa:a6:40:
21:73:1d:bf:dc:18:8a:28:e7:3a:aa:5e:d6:71:e5:
ab:70:e7:86:d9:12:0b:f1:55:5f:7a:4e:b0:a4:2a:
32:af:fd:2c:9d:4d:5e:5f:0a:59:b7:d6:7c:94:17:
77:6d:01:e7:e8:e6:2a:1b:fa:66:8c:1f:fa:31:e9:
5a:e2:b3:54:1b:9e:63:16:b0:78:f3:31:2c:a4:6f:
c1:7f:56:32:48:2a:e9:43:fe:7c:41:67:17:e5:a7:
d5:5c:6d:99:a1:70:40:53:d7:ab:f0:79:75:3b:23:
16:19:b8:32:62:5d:e1:89:be:5a:49:5b:ab:69:59:
49:b4:3b:05:e4:fe:39:a1:4b:7c:0d:5b:8e:2a:81:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:7A:4B:F9:16:A8:82:62:3F:CB:84:01:07:FF:44:00:C9:60:E1
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/82d6S_kWqIJiP8uEAQf_RADJYOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.185.0/24
IPv6:
2a11:ca40::/29
Signature Algorithm: sha256WithRSAEncryption
8a:56:37:64:6e:05:21:35:3b:9e:a0:8e:30:04:bd:16:f8:d9:
0c:54:68:e0:a4:1c:cb:5c:30:76:69:26:4b:ac:af:2c:1c:67:
cf:55:a3:3f:d6:bd:b4:68:67:6e:f2:b7:22:1e:cd:38:62:54:
8d:75:f0:a0:58:ee:b9:21:f3:e4:11:61:7a:0f:55:a9:d7:42:
fa:67:b2:19:6f:54:20:cb:46:d4:67:e4:53:5a:24:45:9a:f9:
9a:22:7c:cf:4e:d8:8e:8a:e5:14:a6:66:9d:c2:bb:09:8d:cb:
dc:78:27:16:be:a0:96:84:69:20:d6:92:cf:f0:d0:a0:cb:c3:
0b:59:5f:b4:ea:d3:7c:f4:d3:0a:9d:e3:e5:5f:19:40:dd:31:
53:3d:97:67:7e:9a:17:38:21:d1:3c:9f:32:c9:ff:23:85:9e:
c2:67:42:63:03:74:9d:60:36:cb:70:f9:ef:9d:c9:4a:5f:bd:
62:1c:73:ff:3f:a5:f4:0f:f3:8b:4e:bd:f3:03:83:b4:f3:52:
d7:20:75:36:37:87:9d:22:7f:73:5f:3d:6f:21:3a:67:a5:2f:
2a:da:58:a9:d0:41:52:89:4f:ef:c4:e1:7a:29:75:d4:fb:6b:
f1:46:53:65:3b:fc:55:98:80:c2:bd:4b:09:37:29:df:e9:51:
77:57:f9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:43 2025 by rpki-client