Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/78YnUWFfXp08qss3F8aaVkuSk6A.roa
File: 78YnUWFfXp08qss3F8aaVkuSk6A.roa (raw, json)
Hash identifier: /cC6PzOQazCI2EOay5sXm6jkwtSiFkM0yjpOLHaOKOs=
Subject key identifier: EF:C6:27:51:61:5F:5E:9D:3C:AA:CB:37:17:C6:9A:56:4B:92:93:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3494A1C6227E6BBD10DD4B7135DAEBB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/78YnUWFfXp08qss3F8aaVkuSk6A.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12912
IP address blocks: 82.153.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 10:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4a:1c:62:27:e6:bb:d1:0d:d4:b7:13:5d:ae:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efc62751615f5e9d3caacb3717c69a564b9293a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:00:cf:09:35:18:dc:c6:30:aa:50:b0:93:
d6:4a:c1:3d:7a:87:c0:ac:90:6a:3b:04:fb:eb:cc:
de:4a:e1:02:ef:e6:0a:07:be:5c:08:20:59:14:74:
69:a5:e1:44:de:8c:50:75:79:23:a5:91:3d:f0:1b:
4f:c4:50:5c:e2:35:8a:3a:b2:f4:da:93:d3:97:4a:
eb:44:0b:76:0e:f7:27:47:e4:03:86:54:41:99:21:
9e:83:df:6e:1b:79:81:95:d1:3e:f2:8b:62:f4:1c:
b0:a8:95:ef:ef:f6:a9:f5:cd:b9:c4:cf:7b:52:cd:
ff:6f:0b:35:fa:6a:ba:af:20:e7:cf:72:cc:df:89:
fd:28:c0:a7:76:9b:7e:63:95:1f:d7:4a:30:ac:03:
bd:61:1b:cf:0e:77:7e:97:30:98:e2:c2:32:1e:3f:
41:9d:df:13:4a:b8:c3:1c:ec:9f:3c:b3:e8:59:4d:
80:f2:66:b0:d0:75:15:c0:4b:81:39:db:36:39:db:
59:b1:53:a9:45:8f:f5:b7:ed:ae:8e:ad:7b:d8:48:
15:4a:e5:13:01:09:68:f0:63:b1:f3:8d:a2:72:a9:
68:24:8b:be:17:23:63:51:0d:a6:3c:87:78:c6:20:
47:af:cd:4d:4b:fc:71:2f:e5:90:2d:97:cb:a3:82:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C6:27:51:61:5F:5E:9D:3C:AA:CB:37:17:C6:9A:56:4B:92:93:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/78YnUWFfXp08qss3F8aaVkuSk6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d8:43:33:64:8b:a4:ae:f8:6e:50:db:a6:cb:a1:f1:be:6a:
05:6f:fb:f3:32:e7:fe:7b:02:de:c6:39:00:00:62:b2:57:cf:
1a:f4:5a:2f:3c:71:49:a2:86:b7:13:3d:7f:f3:f7:eb:a9:48:
6d:4c:22:cb:0d:e2:95:f9:c8:b1:f3:76:15:9a:b4:b5:27:e7:
23:5c:d7:47:20:42:90:38:69:d5:a3:e5:67:e0:09:7a:c7:85:
44:a2:93:09:a4:21:95:fb:ac:3a:ea:a3:38:9a:8e:aa:29:a8:
4f:27:02:0f:ca:0e:fb:d7:39:14:f8:b9:cf:a3:6d:a2:db:fa:
18:04:00:68:b7:7e:af:04:23:87:ca:19:53:6d:1f:29:f1:af:
6f:fe:4b:d1:c0:38:6f:b0:01:c2:ba:e6:ac:a6:d4:e4:9c:f7:
d1:37:28:df:17:f2:1e:0a:e6:3e:51:11:b8:91:ff:5f:57:cd:
57:47:76:a8:67:d8:55:13:8f:1e:5a:96:3d:04:41:87:40:de:
b3:ec:39:d7:05:22:cf:1f:31:a9:56:21:e8:05:df:80:03:47:
e5:0b:34:54:fc:b6:33:e8:09:48:4b:f3:23:9e:3f:7d:5d:b4:
c9:e1:5e:b1:2e:81:b8:8a:fa:84:b9:54:f0:35:9c:ef:5b:67:
7e:8c:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:15:42 2025 by rpki-client