Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TCk5wDjbJIjYJ8Uw6khSNqZmNhk.roa
File: TCk5wDjbJIjYJ8Uw6khSNqZmNhk.roa (raw, json)
Hash identifier: gV9/zRXc+qomDQALUmstRovDhT1P9A8Ba58BucXGf8w=
Subject key identifier: 4C:29:39:C0:38:DB:24:88:D8:27:C5:30:EA:48:52:36:A6:66:36:19
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01901C4000C82F864E1C201E6BF23BF4D70C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TCk5wDjbJIjYJ8Uw6khSNqZmNhk.roa
Signing time: Sat 15 Jun 2024 14:14:34 +0000
ROA not before: Sat 15 Jun 2024 14:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 82.153.228.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 16:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:40:00:c8:2f:86:4e:1c:20:1e:6b:f2:3b:f4:d7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 15 14:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c2939c038db2488d827c530ea485236a6663619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:75:2b:34:42:ef:4a:91:73:f8:07:cb:b1:99:
75:c0:c5:7e:41:2d:3a:df:37:9e:5c:82:f9:38:a6:
68:fc:e2:4b:e2:3a:3f:8f:27:c3:7e:6d:12:46:bf:
70:dc:37:2b:3c:a4:fb:c3:7d:23:18:e4:09:06:ce:
80:57:27:eb:cd:88:7e:6d:8e:6e:95:52:23:9b:dd:
2d:91:f3:8f:74:f6:ed:a9:a9:54:06:7f:eb:d8:98:
9e:fc:d7:1c:2b:41:19:33:4c:d3:aa:86:25:97:11:
61:79:f8:e9:fb:37:1a:0c:26:a6:6b:c7:31:23:f6:
e0:8c:1d:e0:19:ee:c2:ad:7f:83:66:38:98:dd:65:
77:f6:0f:c3:11:04:8c:c0:10:77:62:35:be:48:43:
d8:68:f9:7f:2d:00:33:47:7e:6d:65:c7:52:f5:a0:
82:07:d9:81:55:ce:6f:5c:25:bd:d5:ba:e0:c7:b0:
44:47:4c:d2:19:e9:0b:30:07:b6:3a:ae:2e:2f:80:
6d:41:4d:8e:1b:40:05:84:95:62:19:79:58:98:b4:
57:a3:ab:39:39:dc:c5:a3:53:fd:1a:00:ef:e8:9a:
87:19:b4:94:59:1f:d9:16:9a:ad:ef:c7:8a:d9:4a:
d5:53:ff:85:90:79:cf:21:27:6a:2e:32:63:50:2d:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:39:C0:38:DB:24:88:D8:27:C5:30:EA:48:52:36:A6:66:36:19
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TCk5wDjbJIjYJ8Uw6khSNqZmNhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:99:ac:7f:60:bd:06:dc:a0:92:94:fa:82:bb:91:de:88:1e:
79:23:98:25:c0:49:18:ec:89:67:48:77:85:ef:71:43:d7:32:
52:02:db:50:8a:64:8f:02:a1:bf:b7:e7:7d:58:76:85:d1:4d:
4a:0f:05:66:87:18:1b:85:93:2a:f0:95:3d:b7:50:b2:90:13:
13:0d:33:31:12:e2:a7:4c:c4:83:46:41:c5:92:2b:c9:61:df:
26:6b:f9:05:4a:8b:54:c4:7b:bc:c6:fc:9f:c3:f7:9a:6f:7d:
c3:6e:3c:cb:10:ea:ab:9d:30:b3:68:7d:52:b6:ec:cc:d0:fd:
10:75:a2:86:da:e6:52:df:bf:7f:f0:6b:f8:88:6a:9a:0f:b0:
8b:9f:b7:40:71:61:ba:4e:41:d9:cc:37:be:a8:47:c2:23:70:
7b:7f:3b:9c:b1:cc:d3:85:b7:8f:6b:03:60:a1:87:ef:ab:6a:
f3:36:4b:6c:e8:b5:65:e9:d8:d4:00:af:8d:5e:a1:6b:83:77:
06:43:ea:98:8a:65:4c:b2:44:85:d7:10:db:c7:17:ad:36:92:
14:e6:f3:0b:f8:a0:66:fe:aa:a0:74:f0:03:3b:13:70:ff:b3:
fa:be:93:5d:66:ec:44:99:9d:89:d5:16:81:af:9d:4c:5d:94:
e5:ec:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:43 2025 by rpki-client