Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-pkm8KyySJtcWIyFNBUto2b32uI.roa
File: 1-pkm8KyySJtcWIyFNBUto2b32uI.roa (raw, json)
Hash identifier: iMd7YELD5pZ0aEpptBg/WZUUJgAtd7SuiULIUOdzYbg=
Subject key identifier: FA:99:26:F0:AC:B2:48:9B:5C:58:8C:85:34:15:2D:A3:66:F7:DA:E2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194A70DCCB97A76FC0ADA4431A433B8EBB6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-pkm8KyySJtcWIyFNBUto2b32uI.roa
Signing time: Mon 27 Jan 2025 09:18:06 +0000
ROA not before: Mon 27 Jan 2025 09:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203758
IP address blocks: 82.153.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 20:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:0d:cc:b9:7a:76:fc:0a:da:44:31:a4:33:b8:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 27 09:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa9926f0acb2489b5c588c8534152da366f7dae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:d8:4b:fd:82:fe:68:64:40:f3:9a:6e:0f:
04:d0:17:f0:e7:18:91:13:7f:b3:f0:b4:5b:23:f8:
00:f1:2a:7d:9e:de:17:2a:ac:24:ac:e3:53:a6:e7:
19:34:b6:f4:d1:8d:b1:e2:ef:46:0f:42:bd:b7:f5:
22:55:a3:0e:8d:00:56:69:57:91:9c:a4:f7:f6:a5:
f5:b8:15:0f:78:24:b0:27:46:bc:76:53:13:86:80:
68:5d:1a:10:fe:aa:c5:d3:f6:be:10:e0:a3:85:6f:
7d:bf:ea:cb:a2:2a:a5:7c:15:05:85:4a:13:7f:ef:
87:08:12:4f:ef:d4:21:c4:56:c7:63:00:c1:12:46:
6a:d7:10:4e:dd:3a:b0:5d:c8:29:84:c2:a0:60:bf:
a6:1d:fc:79:b5:78:6c:e9:c2:91:58:af:da:45:99:
78:f5:01:a6:99:28:fa:d7:22:8d:da:4e:39:23:a1:
4c:82:a0:b7:5b:ef:d8:4a:6f:0c:b3:77:aa:5b:d3:
ff:ba:ea:81:ae:0f:a7:59:cf:40:fb:37:23:1f:98:
96:05:06:67:84:24:37:f3:9d:ac:86:15:d3:c1:f0:
0e:ff:c0:eb:a3:66:ab:8c:15:3c:5d:d5:6d:a3:10:
22:5e:69:4d:f7:c1:df:73:5d:9a:6b:c3:8f:2b:47:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:26:F0:AC:B2:48:9B:5C:58:8C:85:34:15:2D:A3:66:F7:DA:E2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-pkm8KyySJtcWIyFNBUto2b32uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.70.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2f:a8:17:93:a4:53:ba:55:cb:56:87:99:cb:1a:3c:4d:b1:
c3:e6:28:bc:fc:69:ee:86:dc:75:25:a0:92:17:bf:d7:00:1d:
d6:60:1e:20:e6:7c:c6:1d:cf:e4:dc:75:77:b2:c8:9a:6d:dd:
ee:bb:14:22:58:2e:a2:11:7e:9e:cb:9d:23:88:aa:c7:3c:3d:
4c:e8:4d:75:62:fc:2b:17:1a:5d:ab:21:08:35:70:0a:78:fc:
d8:84:58:ca:88:b7:97:a9:cd:f0:5a:63:15:27:16:18:e3:1c:
2c:51:6d:27:92:b6:80:10:c5:85:ab:a9:e3:3f:44:82:17:41:
c8:bb:bc:1c:37:66:d2:ee:8d:b5:76:96:d6:12:a4:6b:51:8a:
2d:12:9a:ce:1c:7e:17:ed:bc:53:cd:0b:12:ae:fd:e9:dc:f1:
7b:19:a3:5c:19:25:2a:d2:6d:97:15:bf:58:47:73:96:ea:86:
ae:a0:48:03:d1:5d:c9:5a:36:59:07:c5:c3:73:ee:8c:96:7f:
5d:b0:e5:f3:e2:84:98:76:7f:89:3b:c7:97:ec:67:47:42:2c:
ed:26:8e:8f:73:40:b5:c1:d8:be:05:6d:d3:4e:fb:e0:be:06:
85:3b:9a:97:59:c6:38:e2:70:2a:94:2b:7e:6e:f8:7c:de:98:
ce:aa:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:17 2025 by rpki-client