Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/t9SONAjqj8BPm7mOkgG4yjKIBho.roa
File: t9SONAjqj8BPm7mOkgG4yjKIBho.roa (raw, json)
Hash identifier: Iu3drvVIKPwpiKUw0uRkRhF8W1CfxTNxOf1AZ8hkjis=
Subject key identifier: B7:D4:8E:34:08:EA:8F:C0:4F:9B:B9:8E:92:01:B8:CA:32:88:06:1A
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018CC3B746F3A8C82D9E01464801783E680B
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/t9SONAjqj8BPm7mOkgG4yjKIBho.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51190
IP address blocks: 82.200.77.0/24 maxlen: 24
94.251.92.0/24 maxlen: 24
82.200.122.0/24 maxlen: 24
82.200.123.0/24 maxlen: 24
82.200.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:46:f3:a8:c8:2d:9e:01:46:48:01:78:3e:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7d48e3408ea8fc04f9bb98e9201b8ca3288061a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:1c:cd:6e:fa:7c:9c:c5:b6:0b:61:37:cf:
66:e1:4b:0f:b6:82:ee:e3:9b:d8:c9:43:69:ff:cf:
cf:9f:d5:23:f5:54:05:54:f1:64:2e:16:ba:22:87:
c0:e6:0d:ca:68:3c:f6:00:3b:9b:55:6a:0d:2a:16:
7a:ba:8e:1c:c1:d7:f1:58:82:b7:1b:ec:34:97:16:
d3:78:1f:7c:81:37:b9:e2:01:fb:b1:f4:ad:b1:7b:
a8:56:3e:26:9e:a9:b4:58:53:be:af:25:3a:3a:8d:
fa:46:c1:55:58:d9:f5:66:22:f1:ab:03:13:8e:3d:
db:59:04:0c:1c:75:1f:72:c8:2d:8b:96:6d:7d:19:
05:44:b6:89:71:f7:aa:9a:22:3c:fd:a8:2b:71:35:
2e:73:9d:27:6a:c8:26:7a:55:1e:91:9d:fb:55:92:
e3:05:1f:39:fa:00:1f:cb:c0:c3:d6:9a:47:35:e8:
9f:23:9a:cf:b9:c9:f8:39:56:af:b2:d9:c0:9b:5b:
fb:85:a3:bb:e8:33:39:34:45:1a:60:80:a8:37:58:
5d:06:c2:33:ce:88:ad:08:58:ff:6f:c6:98:5e:35:
49:02:f2:7d:ba:7f:11:1e:21:95:77:ae:9e:61:5a:
3e:67:7c:29:55:63:57:22:64:5f:df:71:73:0f:b3:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:8E:34:08:EA:8F:C0:4F:9B:B9:8E:92:01:B8:CA:32:88:06:1A
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/t9SONAjqj8BPm7mOkgG4yjKIBho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.200.17.0/24
82.200.77.0/24
82.200.122.0/23
94.251.92.0/24
Signature Algorithm: sha256WithRSAEncryption
72:72:45:ff:e0:95:76:c7:c1:f8:00:35:4b:0a:5f:e5:57:5c:
ef:56:fe:77:47:dd:34:fb:4c:2b:9c:03:3a:8f:5e:85:4d:22:
90:87:a5:5b:27:58:e2:d1:2b:81:23:e7:f0:9a:23:7d:54:be:
4c:4f:e4:78:09:f7:26:7b:07:a6:c3:4c:da:34:03:48:32:a6:
93:a3:ec:c3:11:42:c1:29:c0:b2:d9:47:1b:ac:87:ef:3b:11:
ab:ea:24:42:fc:10:b8:4e:10:2c:47:12:7f:3c:85:03:2d:6e:
9b:59:2a:04:cc:24:56:c0:6c:ab:d5:0a:97:37:7f:9f:a8:70:
4f:96:51:32:b7:14:52:55:7f:21:c6:7e:66:10:ed:f1:19:f2:
cb:60:89:f9:c2:e0:33:4f:95:c6:a4:37:16:ae:de:07:00:34:
1a:7c:10:13:f6:34:16:24:e8:10:b2:19:4f:f0:51:b8:a4:a1:
c0:33:94:47:34:5d:31:3a:0d:d3:c7:b8:31:08:81:7c:cb:b8:
44:c5:0d:80:13:42:a6:c0:48:36:ad:54:6b:70:3c:65:98:f1:
3a:6a:7a:24:48:42:43:bc:a4:06:32:ec:a6:ab:54:7e:35:14:
98:05:53:f1:86:42:d8:d5:b7:ac:ed:79:bb:60:e1:da:83:49:
a6:8e:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:11 2025 by rpki-client