Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RdBktuGUrDLHYiwSNFXfJT9aaig.roa
File: RdBktuGUrDLHYiwSNFXfJT9aaig.roa (raw, json)
Hash identifier: uwBMFAuprnUGPKaiPiETvPrXzQrkLowAbbBwrXoevDU=
Subject key identifier: 45:D0:64:B6:E1:94:AC:32:C7:62:2C:12:34:55:DF:25:3F:5A:6A:28
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01906B07E9139E2F1E5CC3956A452CA4050F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RdBktuGUrDLHYiwSNFXfJT9aaig.roa
Signing time: Sun 30 Jun 2024 21:23:18 +0000
ROA not before: Sun 30 Jun 2024 21:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 82.153.220.0/24 maxlen: 24
213.210.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 12:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6b:07:e9:13:9e:2f:1e:5c:c3:95:6a:45:2c:a4:05:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 30 21:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45d064b6e194ac32c7622c123455df253f5a6a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:2e:f6:66:df:42:da:77:ee:90:62:b0:a9:
ba:fd:9a:6b:57:f2:f7:36:18:7a:83:a4:23:03:58:
a6:4f:4c:ff:fc:fe:91:23:53:8f:95:22:71:c4:28:
63:1e:18:6a:29:a8:f5:b1:b2:f2:02:f5:6f:0b:4b:
56:3b:3b:e0:cc:c5:37:0c:05:ab:63:96:16:3b:9a:
d3:0c:e4:bc:23:bb:19:52:e9:23:18:08:60:af:84:
39:bf:1e:cc:53:5c:98:4f:14:ae:9c:53:6c:9d:8d:
de:47:a5:ff:5e:97:26:f9:ef:9d:d8:61:58:81:05:
57:0f:9e:de:33:62:75:d9:c3:e4:2e:69:ee:04:c9:
1e:6a:db:2d:a8:6b:35:bc:4b:31:97:b4:47:5b:f8:
73:cd:98:02:1d:ef:8b:d1:18:6a:7a:a6:92:29:43:
08:32:dd:57:2e:e7:86:8b:e0:e8:04:59:91:d9:61:
58:2c:58:21:98:b8:6a:7d:f9:e6:09:76:d0:fb:55:
e8:ee:49:e6:0b:75:2b:7d:32:7e:a3:bd:e8:29:b5:
9d:8a:ec:76:71:6c:17:6a:ef:e8:a7:fa:b8:b3:dd:
5b:64:c2:50:04:0f:56:a3:d3:7b:1f:bd:93:e0:7f:
1f:66:52:de:81:5a:9e:41:8d:7a:18:2e:33:10:58:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:64:B6:E1:94:AC:32:C7:62:2C:12:34:55:DF:25:3F:5A:6A:28
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RdBktuGUrDLHYiwSNFXfJT9aaig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.220.0/24
213.210.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3f:0e:55:41:8e:6a:cb:28:13:b2:7d:33:84:54:5d:e1:d8:
0b:be:98:ff:a8:4a:58:63:0a:5b:9a:f1:d2:d4:c5:45:fc:03:
ec:79:04:29:d6:b0:4d:79:66:5d:5a:79:14:90:61:b7:be:96:
bd:53:d2:55:13:60:d2:6b:73:7f:26:a3:29:ef:81:12:26:df:
5a:52:50:b4:c2:3a:80:42:7d:77:3b:12:00:a8:ce:54:67:1e:
55:e6:2b:47:67:44:82:63:87:87:cd:ac:44:95:45:19:3e:88:
f5:4c:4f:b1:8e:61:5a:e7:d4:29:ad:00:2d:27:9a:c4:d3:fa:
51:b0:e5:da:0b:3d:f5:da:c6:48:bf:e6:41:53:7e:17:78:41:
a0:a3:d9:6a:32:60:3a:a6:64:e8:ec:a2:3c:dd:16:e4:de:b4:
0e:93:d0:1c:be:ac:9e:f5:8d:32:61:41:01:37:ff:91:ee:a1:
6a:49:0f:37:5e:fa:de:3e:ad:72:c0:4b:ba:c8:e8:d2:07:1a:
a7:29:37:07:1d:a7:d6:f5:88:c7:c9:3d:c9:1e:7d:7f:e8:46:
a2:12:3b:30:a5:7b:5e:64:7c:bf:b0:cf:5a:1a:08:56:a0:51:
f2:ff:19:5a:c6:dd:c2:68:33:87:9b:28:61:ab:48:15:1c:be:
89:2e:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:11:10 2025 by rpki-client