Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/h1CiGKX1a927HGdAOO2p-6M7wCg.roa
File: h1CiGKX1a927HGdAOO2p-6M7wCg.roa (raw, json)
Hash identifier: EebbZsmG4kL9wHZ+D4KCS+fA8N1pEDuA+kdCo5b9RCw=
Subject key identifier: 87:50:A2:18:A5:F5:6B:DD:BB:1C:67:40:38:ED:A9:FB:A3:3B:C0:28
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019253299E2A8D0AD19164CC4CF57BBCA0E0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/h1CiGKX1a927HGdAOO2p-6M7wCg.roa
Signing time: Thu 03 Oct 2024 16:14:49 +0000
ROA not before: Thu 03 Oct 2024 16:14:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215772
IP address blocks: 82.163.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 22:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:29:9e:2a:8d:0a:d1:91:64:cc:4c:f5:7b:bc:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 3 16:14:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8750a218a5f56bddbb1c674038eda9fba33bc028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1b:25:16:21:5d:d1:99:77:55:84:6f:1e:be:
96:87:f8:fb:d7:f4:a1:46:c9:c6:76:08:a3:59:80:
aa:a6:e3:9d:a1:35:0d:d5:63:df:e4:b4:30:37:fd:
2e:14:42:e6:fe:51:28:0c:bb:01:3e:58:50:23:10:
65:0e:2d:62:01:2d:6a:4d:3d:a4:f3:42:ca:13:c4:
57:5c:95:eb:47:ab:44:a7:bb:69:47:fe:32:09:7f:
22:e2:25:bf:7f:78:ee:cd:b2:1b:cd:d1:3b:91:80:
48:95:8e:38:31:b3:86:97:5d:e6:ec:18:f1:51:9f:
f3:19:ad:51:ce:8a:88:c6:16:9b:05:30:ed:74:95:
9b:d6:38:15:6d:a0:ba:00:91:e9:de:05:a5:41:bd:
81:56:16:75:04:68:d4:c4:f1:b6:e0:1d:4e:e8:d4:
ab:36:8a:5a:81:d5:01:59:96:f8:94:e1:37:71:a5:
53:7a:fd:21:72:58:0c:5d:28:5e:cd:49:01:61:c7:
ff:44:e5:b4:5a:5f:bc:8e:e6:e1:52:c9:41:c1:8e:
52:20:9e:87:c8:62:43:f4:ea:82:a5:d0:2b:63:15:
66:0b:8f:73:90:22:ac:f3:d1:fc:ae:db:49:27:b5:
d2:cd:d5:88:ae:df:9f:da:35:17:b4:39:c0:da:3f:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:50:A2:18:A5:F5:6B:DD:BB:1C:67:40:38:ED:A9:FB:A3:3B:C0:28
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/h1CiGKX1a927HGdAOO2p-6M7wCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.23.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e9:b4:2b:f3:69:d4:5a:e2:23:da:8c:20:9d:39:f3:e7:eb:
79:83:fe:2b:2c:fa:cd:56:5c:f7:5f:7d:17:24:ce:0f:80:d9:
13:0b:dd:52:04:c9:18:5a:b9:99:77:d6:b2:3b:04:6a:a2:f9:
e6:65:cb:17:da:8e:24:28:bd:76:63:2f:b2:88:d7:24:06:0d:
bf:bc:1e:c0:de:9b:e5:97:a3:ea:87:a9:04:7e:1e:ff:f8:d4:
c8:5b:33:89:ed:5d:d3:32:9a:a2:c7:a4:a0:bb:dc:3c:a8:81:
ec:8f:e0:e0:1d:37:33:56:42:38:31:a6:67:3d:2e:5b:6e:fa:
08:dc:a5:7b:d4:af:97:54:11:39:75:a9:e8:f6:fb:5e:32:52:
95:3a:5b:5a:cb:8d:cd:e1:45:0f:77:ae:e6:13:e0:4d:3c:3d:
65:12:ed:e7:e7:42:36:fa:7b:ed:14:e8:f4:fe:3f:be:8e:2a:
a4:e3:13:cf:dc:87:3a:8c:79:a6:66:4c:3a:ba:7d:4d:71:08:
17:c3:6d:c2:cd:be:a4:bb:7f:62:42:43:ca:7c:33:a0:43:67:
47:38:e7:a7:6f:67:c8:a8:4f:b2:70:79:4a:25:a5:a9:ed:49:
b7:a9:ce:b6:67:f6:65:1f:26:0c:b6:53:bd:0a:47:d5:16:d4:
b5:36:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:18:48 2025 by rpki-client