Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e60WI3gvRsyPOlN4SBqaG4A6gD8.roa
File: e60WI3gvRsyPOlN4SBqaG4A6gD8.roa (raw, json)
Hash identifier: UfKIq7+Zp85qdMShoGxcB1lXrbB3VH9w9j1fUCxf0lM=
Subject key identifier: 7B:AD:16:23:78:2F:46:CC:8F:3A:53:78:48:1A:9A:1B:80:3A:80:3F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC349464FA30830C103E6653CC93F7CBC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e60WI3gvRsyPOlN4SBqaG4A6gD8.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 996
IP address blocks: 82.153.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 12:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:46:4f:a3:08:30:c1:03:e6:65:3c:c9:3f:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bad1623782f46cc8f3a5378481a9a1b803a803f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:cf:f5:43:2f:52:b5:3d:91:a3:39:6e:57:
f0:99:b1:8e:5d:81:ee:40:ab:3b:12:99:2d:1e:a4:
0c:89:68:35:1b:d7:ee:bb:c0:41:39:4d:02:1d:99:
6a:c8:4c:8f:0f:4b:14:e3:40:91:15:13:ab:66:1d:
0f:bb:da:3f:7d:c0:14:78:b2:aa:67:25:04:f4:0a:
b9:1c:31:a5:80:b3:cc:5d:33:9d:8e:4b:d2:8f:f9:
2e:e1:37:18:ad:0b:18:d5:6d:9a:28:1c:90:18:6d:
d9:59:9f:79:dd:96:82:9e:6a:af:d7:91:8f:f8:d1:
c0:8f:0f:20:74:78:b3:1b:a7:55:7e:7d:19:2c:d0:
2f:03:eb:d9:5b:17:2a:9f:56:76:54:73:11:e7:e3:
b9:84:f2:cf:e6:a3:f1:2c:e5:1b:16:8d:79:b2:23:
fe:28:a8:80:2c:91:c8:b9:d2:d4:a4:c4:04:33:41:
07:63:f8:b8:e5:ca:38:f4:90:c0:37:f5:8d:4e:42:
ff:0a:ee:a1:4c:06:2d:24:82:fa:0d:b5:7b:92:1e:
db:48:d5:8a:58:00:1e:34:25:45:fa:09:be:a9:ef:
ef:db:fa:75:67:c9:41:02:d2:7c:4f:a5:e5:42:58:
40:96:cd:8c:4f:1d:b7:b0:1a:2e:74:28:51:d8:19:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:16:23:78:2F:46:CC:8F:3A:53:78:48:1A:9A:1B:80:3A:80:3F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e60WI3gvRsyPOlN4SBqaG4A6gD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.231.0/24
Signature Algorithm: sha256WithRSAEncryption
47:95:05:81:6d:2f:f0:32:f0:e4:b3:f3:62:78:6a:2d:c1:6b:
be:b1:53:18:7d:cf:fe:61:ae:de:fb:c8:6d:1d:d9:70:09:39:
25:1e:a6:62:b0:ec:81:9d:25:40:3a:17:13:5a:a7:f3:53:76:
1c:57:31:a4:b9:7c:e4:a2:4d:75:32:9c:76:00:d5:72:cf:5e:
38:33:17:bf:c4:60:a1:6e:94:05:f3:31:11:e7:a5:b1:36:13:
69:f0:5f:77:1b:30:71:b4:70:28:d7:3e:79:b3:c4:19:9f:32:
b6:6c:fb:45:50:26:1f:f7:62:08:ed:90:bd:d5:d6:f0:d9:55:
be:df:23:d3:0c:e4:02:48:2e:67:c2:fb:b8:e7:3f:14:c1:04:
e0:4d:c5:29:ea:2a:2a:2a:33:3c:de:63:77:a6:28:d2:78:cc:
90:17:62:0d:ca:1a:b3:d6:a8:05:e7:0a:dd:4a:42:fc:1c:ca:
f8:9a:51:ae:df:95:87:27:48:24:bf:6d:35:3a:5c:80:84:64:
98:70:7c:93:f9:7d:2d:5b:2f:43:c2:24:0d:53:07:ea:03:03:
07:9c:8c:40:d6:96:67:b6:e9:ff:f8:e6:25:17:be:30:73:d4:
44:bb:25:ab:ea:87:ca:2f:8b:10:8b:cf:33:8e:33:99:b0:a3:
1b:82:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:40 2025 by rpki-client