Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AncqwlaPhg2LWibxT26Hdov-zlQ.roa
File: AncqwlaPhg2LWibxT26Hdov-zlQ.roa (raw, json)
Hash identifier: ILbL93bfy3CJTIijcW5BxxleEKH8OP/CMjWQxqHXX+A=
Subject key identifier: 02:77:2A:C2:56:8F:86:0D:8B:5A:26:F1:4F:6E:87:76:8B:FE:CE:54
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01915600ABD682BB024553B96D4F21864583
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AncqwlaPhg2LWibxT26Hdov-zlQ.roa
Signing time: Thu 15 Aug 2024 12:26:10 +0000
ROA not before: Thu 15 Aug 2024 12:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214371
IP address blocks: 82.153.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 13:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:00:ab:d6:82:bb:02:45:53:b9:6d:4f:21:86:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 15 12:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02772ac2568f860d8b5a26f14f6e87768bfece54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:71:67:7f:f9:f0:c2:83:df:4a:9b:41:87:
cb:e7:11:22:36:81:88:1b:ca:27:43:69:08:6c:c4:
27:d4:23:bf:49:85:46:85:ff:de:98:77:06:d8:b0:
1e:f7:20:2a:5e:15:df:f3:92:e2:16:59:df:9a:dd:
9e:a4:45:ea:e2:39:7a:a0:c9:94:3a:39:54:c1:52:
54:67:b5:ab:1a:71:54:85:e8:8c:94:c2:0f:dd:ba:
92:47:14:e1:7e:cf:af:30:1e:96:1c:b4:e0:10:6c:
5d:ea:56:ec:f1:40:68:87:f1:d8:fa:e5:27:ee:01:
5c:92:0c:7e:2c:ca:52:a9:2d:e2:78:19:ef:40:fa:
41:d5:1e:27:b2:b2:db:84:01:b7:81:be:c6:d6:1a:
5a:17:1d:18:1e:d8:c4:1b:fd:de:01:2c:de:19:b2:
76:ce:4a:9e:60:d6:58:ef:d6:5f:58:a3:f7:86:63:
c3:1d:b4:2e:cf:b9:b8:1d:50:64:7f:47:ce:05:ae:
6a:36:0a:f5:26:fe:88:ec:0c:6b:71:81:4f:e2:71:
4c:68:0d:95:93:a1:ad:9b:c9:d3:42:64:58:fe:18:
0d:e6:d9:de:c9:36:0e:a9:ad:f2:84:6c:6e:12:91:
b8:4c:f9:fd:ba:18:db:75:bd:76:37:e8:f1:32:1e:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:77:2A:C2:56:8F:86:0D:8B:5A:26:F1:4F:6E:87:76:8B:FE:CE:54
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AncqwlaPhg2LWibxT26Hdov-zlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.205.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ae:d2:86:b0:79:d8:47:17:8b:67:ea:fc:44:0c:7a:3f:81:
e2:4e:a1:ba:d7:c9:90:e8:a3:6d:dc:4b:c0:4a:79:92:38:d3:
cb:5e:8e:3a:35:91:65:7e:06:2b:90:8f:91:c1:c2:8d:44:4b:
97:9d:b7:00:7e:c3:5a:5a:b6:7b:85:b3:28:df:46:41:b0:7a:
74:0d:c3:ba:a1:3d:97:78:8f:0d:8a:45:77:6e:88:d6:81:bb:
ce:b1:d4:98:52:75:1d:37:47:80:c0:30:8f:31:d3:84:c4:5e:
b5:fd:33:09:fa:be:77:01:35:78:4b:c8:36:c8:1b:7b:ed:58:
28:fc:69:88:a3:c4:05:14:44:cf:13:ce:ca:ed:98:2e:9f:99:
89:3f:c9:87:9c:dc:42:48:fe:5c:4d:b2:46:9c:64:05:05:b8:
87:f0:06:78:a2:a6:15:32:1b:d7:26:e8:9d:e8:89:a8:11:48:
0d:79:f6:88:75:0b:4e:da:1e:e2:f0:8d:3f:82:2f:4c:28:50:
93:8d:1d:67:23:97:1a:8b:f6:8b:ac:e5:e8:4f:54:35:2d:80:
b6:d9:10:8c:45:ca:91:2d:39:b8:0e:42:bf:14:69:5e:25:a9:
df:38:84:12:ff:e3:fe:d1:33:51:f1:a7:7c:21:af:c6:79:db:
a6:94:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:07:18 2025 by rpki-client