Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O_D2UZd3CS6QO_pegOBCgWteOn0.roa
File: O_D2UZd3CS6QO_pegOBCgWteOn0.roa (raw, json)
Hash identifier: hlAqC2VNN9glGHHHg44ZVsyuGwGoVe1o4ekdAoEwoF0=
Subject key identifier: 3B:F0:F6:51:97:77:09:2E:90:3B:FA:5E:80:E0:42:81:6B:5E:3A:7D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F3D662B71816066B02449E00AEE9F69AC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O_D2UZd3CS6QO_pegOBCgWteOn0.roa
Signing time: Fri 03 May 2024 07:40:56 +0000
ROA not before: Fri 03 May 2024 07:40:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64236
IP address blocks: 82.163.23.0/24 maxlen: 24
89.213.211.0/24 maxlen: 24
217.145.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 07:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:66:2b:71:81:60:66:b0:24:49:e0:0a:ee:9f:69:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 3 07:40:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bf0f6519777092e903bfa5e80e042816b5e3a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:76:a4:da:57:bf:88:92:6f:3e:dc:3a:1f:fe:
20:ec:2e:e3:a9:78:c3:b9:8d:32:0e:07:5e:00:75:
80:47:87:85:07:93:fb:39:70:44:d7:bb:a4:6b:5b:
c2:05:59:58:52:20:26:b0:d8:c3:5d:05:66:f8:6a:
30:9f:61:13:dc:e6:b3:cf:24:e4:b8:c7:6d:a2:fb:
7c:88:34:36:f7:d7:f6:a0:ef:7b:1f:83:d4:bc:83:
06:8e:91:64:9c:d4:e6:a5:af:2b:75:8d:21:ae:a2:
d5:10:85:c7:d4:10:9d:36:91:6c:af:af:9a:65:36:
fc:32:db:89:01:db:d4:76:f7:1d:5f:35:cd:f3:87:
ed:ef:a1:75:58:ee:3a:1b:66:20:82:45:7d:7e:16:
fa:61:ae:70:b4:03:15:af:f3:cb:9d:46:2e:66:fe:
2c:8b:57:3e:0f:97:28:34:ed:33:8f:52:bc:f8:ca:
8f:6d:9c:e0:b2:a9:29:2c:74:7c:ab:08:06:f7:25:
d6:f4:a2:0e:c6:84:7e:1d:d0:15:41:03:88:b4:99:
b4:d7:b7:6b:3a:66:9d:bb:35:c7:bd:24:ad:b4:a6:
fd:c2:a5:89:2b:da:13:7e:96:c3:7f:ff:f5:e6:d4:
04:2f:f6:57:28:83:fc:4d:94:c5:52:49:87:a0:ed:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F0:F6:51:97:77:09:2E:90:3B:FA:5E:80:E0:42:81:6B:5E:3A:7D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O_D2UZd3CS6QO_pegOBCgWteOn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.23.0/24
89.213.211.0/24
217.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ad:26:4f:81:35:08:38:64:0f:88:5b:f1:7e:eb:b5:a5:8b:
52:37:59:f7:31:91:73:b7:66:1c:85:63:ef:e3:09:ee:2f:73:
1d:1d:88:4c:2f:b7:c9:9c:58:a1:91:9f:a8:ae:4f:f4:0c:f5:
21:df:18:8a:e9:d5:07:43:dc:45:a3:53:48:1a:ba:b2:33:6a:
57:72:99:e8:08:8f:58:52:d4:1e:aa:2f:f2:b2:89:f3:cc:c7:
88:a7:df:ad:9c:ad:d8:d0:27:6a:25:52:36:60:8b:f9:4b:b9:
d1:ea:e6:aa:2d:c4:73:24:bd:c7:8f:82:fb:af:f9:d1:2f:cb:
9c:c5:81:84:82:ca:f3:1e:f8:d2:90:4e:89:02:4d:aa:1e:3e:
24:46:4e:38:93:1c:5a:ce:b4:26:c7:d7:83:ab:2b:1a:17:e1:
bf:7d:25:f6:e9:00:6c:94:bf:31:0c:48:35:33:96:eb:45:c7:
8f:f3:c4:3d:55:1f:60:6c:da:09:19:ea:82:c3:98:85:60:ec:
5c:0d:2a:09:85:c5:c4:eb:e2:c4:67:84:dd:b0:0a:85:2a:54:
63:da:4c:8a:f8:87:69:29:e5:c7:c8:b7:c0:7b:b8:d8:4e:37:
4b:fa:52:a8:51:bd:30:d9:1e:c2:26:22:f3:7d:37:35:ca:6f:
72:fd:20:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:23:21 2025 by rpki-client