Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6OwV0_MKN6AnZukcQUF95pg3OsA.roa
File: 6OwV0_MKN6AnZukcQUF95pg3OsA.roa (raw, json)
Hash identifier: oMkr6buILhrFJYm8K5OCcBNPLcPITQM+X/sh84JTaTU=
Subject key identifier: E8:EC:15:D3:F3:0A:37:A0:27:66:E9:1C:41:41:7D:E6:98:37:3A:C0
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0193BA57498146B7622DF694C94AF333280E
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6OwV0_MKN6AnZukcQUF95pg3OsA.roa
Signing time: Thu 12 Dec 2024 10:08:22 +0000
ROA not before: Thu 12 Dec 2024 10:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 82.163.68.0/22 maxlen: 24
82.163.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:57:49:81:46:b7:62:2d:f6:94:c9:4a:f3:33:28:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 12 10:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8ec15d3f30a37a02766e91c41417de698373ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:13:a4:09:2c:fe:d8:f8:58:8c:91:08:99:
07:9f:46:b5:7d:7d:d3:75:03:26:da:c6:f5:0b:a4:
9e:98:4d:b3:9a:72:96:f8:81:28:7a:b0:fe:f3:45:
ab:31:b0:e3:af:6c:b5:6a:17:13:29:d6:c0:77:bf:
aa:1a:00:ea:99:f0:61:78:0f:35:94:82:2b:84:08:
ab:63:67:f8:bc:b2:5e:12:b8:d2:46:0c:68:0e:25:
51:dd:e6:10:7f:cf:26:8a:be:4c:ad:6c:11:78:97:
ae:fa:bd:02:aa:86:ab:cb:16:3f:d1:1b:4d:23:e8:
eb:c3:ee:77:29:06:bb:bf:44:6c:96:18:ba:35:33:
dc:25:a0:a1:50:63:e9:fd:2b:14:35:7e:7c:71:36:
b9:67:2d:a2:a5:77:40:8b:e1:ee:1f:01:49:49:1c:
a4:c0:ef:41:b0:4b:af:92:2b:30:75:2f:16:0d:08:
30:ee:05:98:4e:6a:51:a1:8d:ef:c0:f2:8d:c1:17:
77:be:9b:27:8f:d7:0d:d1:72:26:77:68:bf:89:9e:
1f:05:fe:7d:4d:21:ec:09:07:80:fb:cc:a3:f0:19:
d4:80:b4:5b:f1:35:b8:31:90:24:e0:c7:62:0c:30:
56:b9:e1:cf:7c:29:48:a9:82:c8:b8:b4:0a:d7:ed:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EC:15:D3:F3:0A:37:A0:27:66:E9:1C:41:41:7D:E6:98:37:3A:C0
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6OwV0_MKN6AnZukcQUF95pg3OsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.68.0/22
82.163.172.0/22
Signature Algorithm: sha256WithRSAEncryption
76:1a:a0:78:fb:56:b7:4e:b5:6a:f1:b4:29:1a:c9:d6:78:f0:
d8:c9:71:58:0d:44:9f:2d:57:9c:f5:e1:24:bc:5a:78:fb:9a:
9f:c5:18:3a:26:93:57:f8:4a:9c:41:62:2a:7b:fb:0b:23:72:
87:d0:59:41:91:f7:1e:6d:04:53:13:7b:91:7a:b5:cd:b8:d8:
44:90:47:c1:f5:26:dc:a9:f0:eb:2d:5e:6e:4c:83:ed:d8:a9:
9d:31:c1:51:5c:2d:b2:03:a7:52:3a:f7:0e:3c:b5:47:2e:93:
1b:c8:16:e1:82:c5:b1:f0:dd:72:55:56:f3:49:94:43:32:03:
fc:b7:6b:00:62:d6:af:81:b0:e4:9a:fb:25:cb:42:39:6c:12:
21:04:cb:9e:96:8c:44:21:81:9e:65:f9:ee:fe:8f:d1:c7:60:
13:d5:1a:e5:24:21:ff:e4:5c:01:de:9d:38:4e:e8:eb:9c:d2:
bd:5f:e3:0e:34:3e:6f:51:03:be:a2:8d:a1:f3:9b:c0:14:98:
1e:f1:ed:ea:ce:dc:e6:76:fb:1f:7b:b7:93:bb:d0:5e:7c:26:
fe:26:de:5d:68:52:e6:ad:66:7b:3a:f4:87:82:95:55:13:9f:
ea:70:17:44:c9:1b:2e:03:4c:ba:f3:6b:75:6a:1a:a6:89:20:
3f:f3:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:44 2025 by rpki-client