Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8nyiLcQ6JDdG9tT5pQvQw540RWw.roa
File: 8nyiLcQ6JDdG9tT5pQvQw540RWw.roa (raw, json)
Hash identifier: neKiIf9a2hYQoYpqSeYDa2h5XiwSNdiHUS2rjPFXY4g=
Subject key identifier: F2:7C:A2:2D:C4:3A:24:37:46:F6:D4:F9:A5:0B:D0:C3:9E:34:45:6C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01904AD1FF92B47D1D4167B3BC9143F0602D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8nyiLcQ6JDdG9tT5pQvQw540RWw.roa
Signing time: Mon 24 Jun 2024 15:16:34 +0000
ROA not before: Mon 24 Jun 2024 15:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138156
IP address blocks: 82.152.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 21:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:d1:ff:92:b4:7d:1d:41:67:b3:bc:91:43:f0:60:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 24 15:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f27ca22dc43a243746f6d4f9a50bd0c39e34456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:17:40:d8:bc:bd:a9:ac:7a:5b:cb:e9:e5:
85:25:20:5a:6a:7d:04:2d:94:39:38:41:03:36:af:
bb:0c:11:bb:0c:1a:1b:af:9c:5e:61:45:45:a3:45:
92:ca:af:8e:79:b9:db:68:1a:02:f6:ff:a6:d0:22:
30:43:d7:10:06:ef:59:87:c3:55:98:e2:99:4a:86:
4d:2d:4d:3c:f5:89:0f:0a:d2:4f:83:93:66:5a:32:
df:8b:ef:53:52:2f:54:5c:ba:25:f0:f1:16:29:04:
b7:2e:f4:27:07:59:28:ef:02:b6:75:c2:54:70:45:
cb:a8:a1:66:00:db:65:c7:95:54:1c:a4:5a:38:08:
d3:58:0c:12:0a:4b:ea:b9:10:aa:e1:ab:64:80:82:
61:77:dd:78:24:5a:81:38:8b:41:c1:45:37:8f:0d:
a4:44:d8:0d:10:91:e9:0a:7b:3c:24:e1:b9:ee:8e:
92:3a:50:70:2c:19:ef:95:9a:f0:e6:83:65:92:9c:
be:50:a4:4c:4e:55:b3:94:63:c0:08:f0:b3:52:3c:
4d:34:89:c1:3f:45:b1:68:53:59:86:35:41:eb:2b:
92:7e:1c:63:f5:1b:03:40:ed:1c:93:35:ee:41:9a:
c0:ae:21:93:ad:a6:34:30:c4:54:59:e3:62:a4:41:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7C:A2:2D:C4:3A:24:37:46:F6:D4:F9:A5:0B:D0:C3:9E:34:45:6C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8nyiLcQ6JDdG9tT5pQvQw540RWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:28:02:7b:81:1d:d6:ed:fb:69:73:27:3c:44:64:02:54:1d:
be:ed:5d:39:04:9d:8f:bb:6c:f2:f8:98:26:3f:c5:60:b8:41:
01:11:84:38:86:c4:c3:3a:45:aa:92:1e:38:a2:9e:9d:d1:5a:
de:63:c9:a4:7e:e5:4a:db:0b:3a:94:08:07:d4:18:db:4e:0a:
4b:e6:ce:68:f2:ed:9d:0b:6c:c4:ef:16:6b:3a:ae:c7:99:bf:
75:e0:7f:8a:e6:d3:1d:08:29:c8:1f:e9:56:73:52:d1:4a:e0:
1b:17:5a:15:6d:3a:99:73:50:15:4f:38:bd:f8:5f:79:b1:29:
1d:64:1a:30:aa:e4:67:3a:21:a8:2b:53:24:92:96:a5:d3:6f:
7a:60:3f:85:f5:8d:ed:28:47:03:c3:b2:f4:28:49:10:b5:fd:
f2:05:71:13:4d:c1:9a:52:08:03:03:71:ad:8e:85:dd:b6:0e:
10:35:07:67:4a:1f:4c:b2:08:90:0f:6b:66:90:69:41:c0:a4:
e1:2a:d7:e0:5b:42:06:dd:76:75:ca:71:96:86:d1:4e:c3:53:
a5:b4:54:d3:48:ca:95:7e:01:3d:22:18:cf:fb:96:4e:92:fc:
58:c1:f5:3f:8d:06:0f:c2:79:e4:c7:c1:44:02:1f:3a:bf:76:
f2:64:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:14:53 2025 by rpki-client