Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Txfjo_VIkWaWtVaANO-WbENMAoE.roa
File: Txfjo_VIkWaWtVaANO-WbENMAoE.roa (raw, json)
Hash identifier: QCfU3H9+vHCTB0i/Mg5+9zF5JLEI+wnf53aj1KnUKrY=
Subject key identifier: 4F:17:E3:A3:F5:48:91:66:96:B5:56:80:34:EF:96:6C:43:4C:02:81
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190175D64DAFDBFDD1379C6CDEAC4CA3FC0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Txfjo_VIkWaWtVaANO-WbENMAoE.roa
Signing time: Fri 14 Jun 2024 15:28:34 +0000
ROA not before: Fri 14 Jun 2024 15:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 82.152.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 08:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:5d:64:da:fd:bf:dd:13:79:c6:cd:ea:c4:ca:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 14 15:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f17e3a3f548916696b5568034ef966c434c0281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:6d:ac:4a:f4:91:76:c2:aa:db:90:07:0c:
d1:0e:dd:42:01:16:1e:88:56:f2:5f:ee:cd:5f:10:
8e:fa:ee:f7:56:6f:a5:c5:29:13:b2:03:1f:1e:55:
c4:96:d0:77:79:fb:07:fe:9b:29:4f:82:63:f1:0e:
85:ff:bb:79:78:b3:4c:7a:9b:52:b7:72:93:eb:3b:
a4:10:e1:7c:f2:d0:27:fc:17:b1:ed:2b:d4:a7:a1:
b4:40:1d:70:6a:34:7f:fd:8e:7b:df:0a:91:44:4b:
f4:7e:12:8b:31:35:88:7c:ee:c8:f0:b9:4c:34:3b:
54:90:f6:42:5e:e7:3d:77:77:25:83:dd:9b:76:5e:
ae:7c:76:0e:9a:c3:77:38:25:bd:4a:d9:21:53:29:
ef:73:c1:15:dc:47:2f:ea:60:6a:b0:73:f9:31:46:
58:13:66:ac:99:cf:ba:ed:a1:c1:6d:d7:0d:45:6a:
0f:54:1f:a1:41:22:5b:5b:93:cb:6b:22:6c:6a:a1:
c3:f7:5f:9b:47:76:d1:b6:52:3a:e9:71:8d:d7:c3:
9d:b3:b8:42:3d:dc:ba:84:c6:f0:10:e5:5b:e2:1f:
10:0b:7b:a4:81:07:6d:98:ac:08:98:12:f5:ba:bd:
bb:2a:0d:74:3c:41:ab:d5:57:52:d0:55:74:33:af:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:17:E3:A3:F5:48:91:66:96:B5:56:80:34:EF:96:6C:43:4C:02:81
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Txfjo_VIkWaWtVaANO-WbENMAoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2e:3b:93:99:bb:96:43:23:06:a8:29:e2:c8:0b:b1:74:d3:
f0:a4:2c:d8:ed:01:5b:cb:9d:45:d9:9d:b0:22:e7:21:33:2e:
02:cf:55:21:ad:66:11:a0:20:a1:cc:06:31:ad:6a:09:15:cc:
2c:4e:4b:05:e9:a0:10:15:51:21:5c:bd:f0:75:99:bc:ca:47:
ef:96:99:0f:76:f3:00:e1:4d:79:fb:3c:32:84:1f:10:3e:03:
1a:c2:2e:ae:8e:82:8a:ac:db:1d:18:b2:bc:1d:df:29:8d:9d:
01:51:4d:33:18:51:b7:3b:f5:22:4e:5a:fa:cc:fb:e1:4e:3b:
c6:4e:e5:12:88:68:d6:da:c3:20:ff:3b:0b:6e:f8:bf:0e:00:
43:16:a1:2b:23:82:04:3d:33:03:80:2e:4f:b6:d1:0e:9f:9d:
21:77:47:fb:cd:47:57:76:2f:00:99:35:2e:8f:03:28:57:c8:
b0:e3:75:c0:95:71:3d:84:35:5e:8c:92:41:24:87:40:e9:e3:
3f:e6:c7:88:90:57:16:db:be:c4:23:ee:95:88:58:7d:10:6c:
29:22:84:f7:7d:7d:88:3e:a7:7f:c2:20:eb:fc:87:2d:3d:d1:
27:48:f8:4f:c2:9e:d4:ba:c8:8e:f0:d9:60:c9:15:c8:df:6a:
97:d7:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:16:37 2025 by rpki-client