Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bv6ZJh1Kr_mEJhL_ZPTfSzlN83k.roa
File: bv6ZJh1Kr_mEJhL_ZPTfSzlN83k.roa (raw, json)
Hash identifier: ECTNtcshZD1xLHnTruCe5IuViulxc84piraAJYE9PvQ=
Subject key identifier: 6E:FE:99:26:1D:4A:AF:F9:84:26:12:FF:64:F4:DF:4B:39:4D:F3:79
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01909D76007629900377055C26287F342644
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bv6ZJh1Kr_mEJhL_ZPTfSzlN83k.roa
Signing time: Wed 10 Jul 2024 16:24:34 +0000
ROA not before: Wed 10 Jul 2024 16:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50917
IP address blocks: 82.153.207.0/24 maxlen: 24
212.38.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:76:00:76:29:90:03:77:05:5c:26:28:7f:34:26:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 10 16:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6efe99261d4aaff9842612ff64f4df4b394df379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:29:dc:eb:60:ca:af:77:c7:d5:4e:c5:e7:
41:60:0e:6b:89:af:d8:4f:39:b8:d3:ab:fd:91:dc:
55:4c:55:30:8e:89:19:ca:16:67:d8:cd:a2:03:33:
40:fc:07:35:cd:6a:f4:73:e1:ae:2b:94:74:8a:4b:
d6:b0:82:f4:4f:a7:dc:e7:61:21:a0:55:21:6c:20:
c9:71:8a:ce:97:4c:49:d8:0c:6b:92:36:82:ae:83:
51:f2:6f:2e:0e:d4:fa:df:34:f4:4e:0b:b2:70:7c:
d1:b2:f3:30:9a:6c:99:4c:b6:66:dc:d0:94:55:73:
e8:6a:80:7a:66:32:eb:16:7c:14:23:4d:92:0a:15:
90:8f:f8:52:8e:d6:40:5a:54:33:60:41:9c:b1:5a:
37:8f:24:1b:8a:b8:7e:a3:c0:bd:7c:60:60:fc:a2:
3d:0c:2c:df:13:4e:91:5f:35:a7:de:f7:84:a6:a2:
85:13:44:70:b3:b3:78:bb:60:bd:3a:ec:8e:de:0d:
b5:c3:21:b6:0b:0c:1f:fd:5c:67:13:25:15:ba:85:
ac:a8:a3:2e:3b:3c:f3:27:62:cc:18:42:55:a8:bc:
61:0b:80:ec:66:bd:4f:99:56:47:ad:30:a6:1e:a8:
fe:57:f1:a0:54:73:71:1e:70:d2:c0:27:4c:a2:11:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:99:26:1D:4A:AF:F9:84:26:12:FF:64:F4:DF:4B:39:4D:F3:79
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bv6ZJh1Kr_mEJhL_ZPTfSzlN83k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.207.0/24
212.38.89.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:44:82:ec:fb:7f:f8:e5:98:14:b0:eb:55:6d:c8:c8:98:7a:
e0:30:7b:51:12:28:10:bf:5d:92:8f:b7:b9:24:11:92:62:cb:
9e:a8:b8:3d:97:82:11:a8:a3:14:66:32:b8:ef:03:35:62:9e:
00:81:4c:c8:44:b2:13:9a:b0:99:e5:a3:89:f4:d9:91:b4:3c:
7d:b8:46:b8:e0:a5:4d:d2:81:be:fc:bd:75:cc:30:2c:c9:7a:
22:a7:fa:77:47:09:5b:29:26:15:ad:a9:cd:3c:93:b1:ef:33:
36:fa:61:2b:e4:54:79:39:67:90:ef:49:84:ea:d6:9a:17:09:
35:63:98:d4:52:80:25:ff:72:5b:2b:8a:9f:9e:d7:83:15:ca:
3a:12:10:30:db:2b:31:73:9b:b4:09:cd:96:de:31:d3:11:88:
af:57:1d:fa:1a:16:4b:7a:bf:e7:5d:f0:52:b1:29:c7:6b:5f:
41:ca:fe:c3:4e:a7:34:54:04:35:4e:a9:bf:ba:e4:f8:39:f4:
2a:84:10:14:b6:0b:66:20:d8:cc:cb:3e:da:5f:32:63:22:e8:
49:5e:a7:74:2a:ea:74:93:fa:73:0f:02:29:0d:78:10:70:4e:
1d:fd:c0:2b:4b:67:db:f6:43:41:dd:55:75:4b:c4:8e:f8:3f:
00:df:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:39 2025 by rpki-client