Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R_oc-92ushJwXRS657WdQcv13r4.roa
File: R_oc-92ushJwXRS657WdQcv13r4.roa (raw, json)
Hash identifier: kEIauorJqhYLW6q6BFN/UTeqRGBU+w5RHAdCesG8SJc=
Subject key identifier: 47:FA:1C:FB:DD:AE:B2:12:70:5D:14:BA:E7:B5:9D:41:CB:F5:DE:BE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019002DBC225195217F29A7428729EC059E3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R_oc-92ushJwXRS657WdQcv13r4.roa
Signing time: Mon 10 Jun 2024 15:54:34 +0000
ROA not before: Mon 10 Jun 2024 15:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 82.153.138.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
213.210.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 21:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:db:c2:25:19:52:17:f2:9a:74:28:72:9e:c0:59:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 15:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47fa1cfbddaeb212705d14bae7b59d41cbf5debe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:3b:d2:a1:9b:96:5f:c4:87:69:9a:2b:7c:
e2:b1:ca:ce:36:fe:9b:51:fa:5e:dc:88:7b:b4:b6:
45:36:0f:0e:6c:b4:7f:b7:08:37:5b:3b:d1:03:09:
1e:90:15:25:a4:0b:bb:b0:68:61:3b:03:9f:7e:2e:
a9:76:48:f9:73:9a:e9:66:8f:30:9a:ff:5b:db:aa:
3f:db:7c:99:91:b7:5a:24:73:65:39:4f:80:ce:69:
f9:d8:67:28:ad:e6:d0:72:c0:ed:12:b9:6d:af:f5:
d7:69:03:fb:1b:44:96:9f:32:4a:73:b0:6c:42:02:
d9:54:6f:bb:9b:10:9d:1a:71:1e:95:c3:aa:b1:68:
a6:2e:67:dd:d8:ae:49:f0:fd:ed:8e:65:04:26:3a:
80:e9:37:48:81:17:74:2a:03:a3:34:48:fa:83:c8:
95:ad:31:5f:96:c3:be:c9:37:40:72:32:55:dc:26:
fe:7a:7d:66:0a:c0:4f:0d:01:6e:43:7e:00:7a:0b:
ea:8d:c6:1d:51:0e:26:fb:7f:fe:1a:dd:f5:2f:3e:
75:ee:93:52:b7:7f:ef:4c:71:a9:e7:c8:db:f1:46:
50:7f:bf:5a:bf:a0:51:37:bf:0b:7b:46:16:fa:84:
61:c0:1c:b0:b4:f9:87:1e:ab:75:b8:d1:32:52:eb:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:1C:FB:DD:AE:B2:12:70:5D:14:BA:E7:B5:9D:41:CB:F5:DE:BE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R_oc-92ushJwXRS657WdQcv13r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.138.0/24
82.153.220.0/24
89.213.174.0/24
213.210.62.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ac:10:7f:fb:41:1b:90:81:e6:0a:89:f3:de:bd:60:5d:47:
f7:c6:b9:58:e2:89:62:7f:67:80:0d:89:f2:97:85:89:37:a3:
9e:dd:6d:55:91:6b:6b:60:ed:52:2c:b5:da:4c:17:d9:4e:c4:
47:06:4b:1c:84:6d:e7:13:91:76:7f:46:3d:bf:c6:a9:00:cf:
c9:9c:4a:b3:5c:7b:8d:17:1f:bd:5d:b3:04:a8:6c:b0:bd:4e:
6a:16:d0:43:f5:80:21:d2:b1:d0:49:50:5f:60:c6:ec:3b:7a:
2e:63:a8:3c:0b:58:aa:a3:4a:ba:07:01:66:37:58:2a:b3:a2:
fc:39:05:d2:fa:c9:e8:f3:7f:4b:fc:be:f3:de:58:25:3b:06:
39:5e:17:16:da:04:3a:c8:35:ca:9a:b8:df:c7:bb:ca:71:02:
61:a4:0b:24:63:31:4f:6e:c0:dc:50:fa:1d:ef:02:1b:76:c3:
e8:24:2e:9e:96:0a:39:e5:6d:52:95:9d:79:d4:71:ed:68:40:
be:ab:c5:a8:a6:a9:2b:be:08:02:61:f8:3b:a4:c8:5e:b8:60:
98:cf:7b:73:6d:e3:cc:36:2b:a1:7b:bd:00:6f:bf:3d:21:72:
4b:9c:c8:e3:c9:5a:0b:22:56:72:e9:36:20:7d:5c:60:cf:bd:
89:cf:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:14:28 2025 by rpki-client