Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NCobcwJWKckYVWqyx3SAtWm0zQg.roa
File: NCobcwJWKckYVWqyx3SAtWm0zQg.roa (raw, json)
Hash identifier: kCqLSwhc9BxdC3FF6qmtX326u37TV1UQiRQqpytOMx8=
Subject key identifier: 34:2A:1B:73:02:56:29:C9:18:55:6A:B2:C7:74:80:B5:69:B4:CD:08
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FDDC4B8318D5166D974F5B038CFEC1284
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NCobcwJWKckYVWqyx3SAtWm0zQg.roa
Signing time: Mon 03 Jun 2024 11:03:27 +0000
ROA not before: Mon 03 Jun 2024 11:03:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150698
IP address blocks: 82.153.241.0/24 maxlen: 24
89.213.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 10:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:c4:b8:31:8d:51:66:d9:74:f5:b0:38:cf:ec:12:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 3 11:03:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=342a1b73025629c918556ab2c77480b569b4cd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:82:9e:63:86:94:0c:b4:e8:71:98:f7:95:
7e:97:ec:20:74:f8:e1:d1:19:c3:02:8e:4e:d6:b4:
d6:2e:6e:64:e4:cd:96:6a:eb:9e:97:10:02:85:06:
ba:6a:84:4f:4d:1f:9d:15:53:05:42:b8:0c:08:b7:
a6:88:15:a4:83:32:b2:74:47:ce:aa:e3:de:16:51:
6b:4c:97:15:19:c2:63:35:5f:9b:1b:3c:0e:33:6e:
55:f6:b3:8a:ad:6e:be:85:01:f3:e9:5b:b4:f7:89:
55:89:5f:87:9f:e8:d8:76:d0:3b:43:db:41:f4:b1:
02:ff:42:88:21:07:a3:c6:05:db:04:06:45:fb:86:
89:9d:a5:11:c6:32:f9:ff:8d:65:87:17:8d:49:04:
57:a9:b5:8c:d3:1a:63:95:af:3e:fb:6b:47:b6:16:
e9:6b:9d:27:61:8c:14:2c:d9:da:1a:9a:b4:ea:08:
69:48:c3:de:20:b5:5d:91:fb:f0:3f:eb:1f:90:44:
d6:d4:c3:6d:68:e9:21:58:36:08:1e:6e:81:45:03:
52:0f:d1:1c:af:4b:69:02:2b:43:b1:83:47:6b:ee:
f4:4f:7f:52:2b:30:12:ae:aa:f0:88:0e:b0:a4:7f:
57:5e:f2:aa:ba:7d:0e:35:c6:3b:97:06:0c:7a:27:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2A:1B:73:02:56:29:C9:18:55:6A:B2:C7:74:80:B5:69:B4:CD:08
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NCobcwJWKckYVWqyx3SAtWm0zQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.241.0/24
89.213.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f8:c0:9d:19:65:ee:47:ca:9a:79:27:b6:79:74:b4:d2:f7:
66:7f:62:c2:7e:01:d9:8f:4e:35:6a:7c:5c:54:72:ac:90:21:
ef:54:72:71:60:c9:47:bd:ef:5a:ef:ca:d9:b5:33:bd:7d:7e:
5e:e6:1d:eb:70:b5:ed:73:37:58:55:a0:02:5d:3f:db:8f:c0:
d7:83:37:a8:64:3b:8f:7d:9b:23:e5:e7:28:b8:7c:03:97:2b:
d1:dc:50:69:cc:c1:a0:52:58:94:46:3d:20:e9:1d:74:df:2b:
db:d9:21:0d:91:1d:d2:1b:71:c9:36:0b:27:c1:f6:33:33:04:
6d:56:83:ed:fc:00:7b:18:11:b9:ab:0e:b0:82:9f:b4:15:26:
a2:62:17:ee:0e:9b:a6:3a:c2:68:ae:9b:39:43:ce:16:91:f4:
56:6e:e3:ff:a5:37:71:4a:de:1e:d1:bb:5c:03:59:f1:c3:1f:
bd:7b:05:47:a6:73:87:43:f6:3b:c2:fa:d4:97:ed:b3:b0:52:
e5:6c:e5:6b:9e:de:bd:60:15:17:2c:4d:16:77:1f:d9:67:e6:
59:1d:88:b6:5c:54:89:76:09:24:68:2f:6a:3a:7f:a7:08:21:
af:63:5c:97:5a:db:22:52:0e:27:6e:9f:d0:35:66:0d:3b:0f:
f7:0e:0a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:21:42 2025 by rpki-client