Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6NEaOLID9pOTT0txZSeWkO2Ra8E.roa
File: 6NEaOLID9pOTT0txZSeWkO2Ra8E.roa (raw, json)
Hash identifier: ESeOIzAqNY5RePvqGbX5sMxHrQgHCpolGxImvjjVx6Y=
Subject key identifier: E8:D1:1A:38:B2:03:F6:93:93:4F:4B:71:65:27:96:90:ED:91:6B:C1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FEC7A480D371A02BCF5CCCE57D89B6674
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6NEaOLID9pOTT0txZSeWkO2Ra8E.roa
Signing time: Thu 06 Jun 2024 07:36:27 +0000
ROA not before: Thu 06 Jun 2024 07:36:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 82.152.110.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 07:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:7a:48:0d:37:1a:02:bc:f5:cc:ce:57:d8:9b:66:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 6 07:36:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8d11a38b203f693934f4b7165279690ed916bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:ab:73:d6:fc:96:7c:bd:f4:59:95:fd:65:
4c:d1:bc:51:51:a8:0d:b2:fc:22:b5:28:72:b1:09:
0d:dd:68:97:28:93:65:51:02:cc:c7:8b:df:0b:c6:
8d:94:2c:69:60:49:5b:58:e1:09:70:13:3b:5f:4c:
23:6e:f4:83:82:73:28:e7:67:02:03:b3:ca:df:97:
2f:71:98:f7:a0:15:74:93:49:d9:c1:08:42:b3:fc:
12:e8:29:be:24:33:9c:b1:83:ae:60:6f:10:1d:c2:
f2:ed:15:15:c2:1a:ef:59:0d:d0:d9:c1:4d:52:54:
b6:60:8e:3f:9c:d1:cf:68:fa:9e:70:8e:9b:ca:5e:
1e:ea:60:7b:eb:8a:3b:c9:b6:3e:02:4f:e9:e3:93:
84:46:a8:14:04:5a:78:f2:9c:2c:06:b0:af:5d:35:
83:d8:84:73:05:69:5d:8e:58:3a:b9:28:7f:e1:1f:
78:e3:3e:0b:65:6e:e0:59:e2:06:b5:4b:d8:e2:88:
82:c2:17:ff:3d:f7:ea:dc:ec:a8:b5:61:c7:5a:84:
b4:35:d1:38:93:7e:e0:3c:a3:af:d3:9e:73:4b:e9:
bd:fa:9b:59:21:ff:2a:67:e6:74:1e:b5:9a:67:c3:
c1:9c:e5:f7:57:50:e0:79:a0:85:02:fc:5c:30:b5:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:1A:38:B2:03:F6:93:93:4F:4B:71:65:27:96:90:ED:91:6B:C1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6NEaOLID9pOTT0txZSeWkO2Ra8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.110.0/24
82.153.66.0/24
213.218.213.0/24
213.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:53:19:53:c2:db:90:cb:3c:5e:d6:f1:29:48:ae:a4:ea:f6:
da:a6:c6:04:cd:8a:0c:5b:68:39:88:40:42:64:59:8b:0e:9c:
90:a5:df:de:54:92:bd:eb:b1:06:d6:17:78:92:c9:a5:3f:5c:
60:4f:7c:4d:52:6e:c1:96:ba:c1:52:46:ce:bc:76:fb:3e:46:
3f:5f:0b:68:cc:05:80:bc:79:89:42:ca:ab:2b:82:31:d1:f1:
a3:64:23:86:2d:99:d6:75:0a:ee:ec:ca:2a:56:e9:0c:7e:70:
7d:db:07:32:4c:f3:4b:e6:4a:e7:23:65:60:1d:ea:e1:5e:e1:
46:4c:dc:f9:e4:df:a9:9b:0a:d0:4e:d9:7d:d7:a4:e1:39:04:
e6:56:2e:4d:81:fa:e6:e2:af:5c:81:98:8f:4a:14:07:58:07:
89:98:df:74:0f:ba:df:bd:8a:b3:f8:58:ba:dd:6d:56:cf:ce:
a1:2f:44:02:b5:b9:26:3a:0d:93:85:3d:b8:16:c0:9e:f3:5a:
d2:ec:a4:df:ff:1d:18:74:09:87:b6:ca:7a:c7:a6:64:7b:e9:
84:1e:ba:1b:42:f4:83:00:4f:6f:34:82:37:eb:43:3a:a4:32:
1f:8a:e5:f3:74:1f:36:fa:2f:46:20:32:5d:4d:78:3b:aa:e1:
e9:21:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:18:49 2025 by rpki-client