Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/BSspDZiF52IZdPC5eBBuDkcrCoE.roa
File: BSspDZiF52IZdPC5eBBuDkcrCoE.roa (raw, json)
Hash identifier: i+lO96ml1e8yXUAmCDCI2mgdG6fEg5WUlVtkHhtZppI=
Subject key identifier: 05:2B:29:0D:98:85:E7:62:19:74:F0:B9:78:10:6E:0E:47:2B:0A:81
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 01911B2B3EAD2C4FC74BFA025F3F221FABFB
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/BSspDZiF52IZdPC5eBBuDkcrCoE.roa
Signing time: Sun 04 Aug 2024 02:15:04 +0000
ROA not before: Sun 04 Aug 2024 02:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12533
IP address blocks: 82.145.98.0/23 maxlen: 23
82.145.100.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1b:2b:3e:ad:2c:4f:c7:4b:fa:02:5f:3f:22:1f:ab:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Aug 4 02:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=052b290d9885e7621974f0b978106e0e472b0a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:da:b9:5e:68:d2:3a:13:b0:21:a0:66:a1:
f8:fd:22:7a:d7:d4:68:13:a5:eb:53:bc:9f:26:42:
1f:a6:9a:fc:fa:fe:5e:4c:16:b0:36:73:05:16:b9:
63:89:54:10:f6:f5:02:c1:be:3b:f3:12:d5:0d:2a:
ed:44:f5:4e:84:38:01:56:9e:6b:c1:9e:2c:03:91:
3c:83:e5:96:d4:00:61:0d:c8:32:ce:b8:da:45:81:
c5:bc:62:2d:67:dc:12:26:b3:76:08:2c:7a:10:dd:
94:e9:ca:02:a4:f8:ed:d6:d3:78:35:9c:b4:8e:1c:
6b:3a:82:39:5f:89:23:c0:4d:58:16:39:63:32:95:
e2:8d:9b:8c:fb:fa:68:2b:62:88:2e:7a:3b:8e:02:
af:46:87:1b:7e:e7:f1:3a:3b:a7:5a:3d:d8:18:2a:
6e:d9:67:a3:2a:bd:de:ae:59:5c:32:49:ce:04:e0:
74:93:83:fc:8b:8d:6d:8d:49:21:40:55:f1:18:96:
e6:ea:1b:11:d9:e4:eb:83:5b:3e:5c:07:07:6e:a2:
11:0e:fd:da:fd:f1:7f:8e:16:e7:08:e2:3e:ff:d7:
18:0c:d6:b4:33:7c:59:70:c5:82:db:c8:87:e3:84:
37:74:18:7f:9d:15:e1:61:64:ee:42:3c:92:c4:f4:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2B:29:0D:98:85:E7:62:19:74:F0:B9:78:10:6E:0E:47:2B:0A:81
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/BSspDZiF52IZdPC5eBBuDkcrCoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.145.98.0-82.145.101.255
Signature Algorithm: sha256WithRSAEncryption
0e:44:83:9e:c7:19:e1:08:c2:b1:7e:d3:d4:5b:b0:c7:cc:13:
d3:b8:24:e3:a8:56:64:00:86:e1:60:84:2e:57:9b:47:13:9f:
e5:ac:ff:b4:6a:30:00:aa:7b:33:0e:d8:16:a5:ef:fa:ed:c3:
15:38:a7:f6:d4:91:b0:4e:85:10:41:47:46:2f:f2:41:ae:1f:
76:c6:78:15:b7:2d:d8:18:7f:c9:1e:b3:a5:e1:26:22:9f:69:
b7:73:30:3e:7b:16:7b:28:0e:5e:a4:75:5f:a6:ea:1b:81:0b:
c4:f9:bc:9b:91:67:75:91:9e:a2:f5:c1:d9:7a:f3:c5:b7:98:
a0:64:e8:be:f3:ff:14:ba:29:43:51:81:e4:1d:c2:cb:db:29:
2d:20:52:30:97:f3:b0:4e:aa:19:2c:45:6d:3a:d3:71:aa:f3:
1d:a9:5f:27:c8:ae:54:89:b6:83:f7:86:fd:b7:b3:72:a9:ac:
a8:c7:ae:97:55:5d:2c:38:ff:30:b6:aa:92:ae:f4:06:4f:64:
66:88:b8:29:59:df:19:28:5e:74:d6:98:e4:f7:b4:b0:77:48:
fb:bc:23:19:ba:5f:e1:b7:19:d0:1f:bb:58:46:68:8a:a3:6e:
e7:ad:f3:9d:55:cc:ea:00:06:54:69:c9:61:2c:fc:1a:e9:c6:
b0:55:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:51 2025 by rpki-client