Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qebY6T40Uc8y2EW-CpMAydkWEgk.roa
File: qebY6T40Uc8y2EW-CpMAydkWEgk.roa (raw, json)
Hash identifier: RMozt2eeEM6H+z0T5PVr3tWsCfK4HKA5yy1DIv5Fm1g=
Subject key identifier: A9:E6:D8:E9:3E:34:51:CF:32:D8:45:BE:0A:93:00:C9:D9:16:12:09
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E4368CC0BEAD870DFD111B8C7014C931A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qebY6T40Uc8y2EW-CpMAydkWEgk.roa
Signing time: Fri 15 Mar 2024 18:38:45 +0000
ROA not before: Fri 15 Mar 2024 18:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142019
IP address blocks: 82.152.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 10:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:68:cc:0b:ea:d8:70:df:d1:11:b8:c7:01:4c:93:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 15 18:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9e6d8e93e3451cf32d845be0a9300c9d9161209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:54:10:c2:65:5c:80:38:89:45:b8:da:47:
6e:f5:aa:17:2f:16:9b:0e:29:11:4d:8f:e6:f1:c6:
e8:3b:28:37:ac:d9:51:6d:dd:ad:28:db:30:2d:63:
34:23:fd:8c:c8:33:72:12:b9:5a:4a:59:51:30:b0:
05:60:eb:68:3d:39:02:0c:19:6f:01:35:6a:a5:cf:
f6:f2:f8:1e:62:bc:01:d5:b1:54:f3:da:f5:c8:18:
51:1a:7b:27:ee:18:e0:13:39:69:ca:53:68:58:85:
bd:f3:dc:d3:85:f5:d3:62:b3:82:20:04:ce:5e:0d:
ac:98:1b:ad:46:4c:e0:e7:ad:68:28:53:f7:d7:b4:
8f:33:ce:9d:37:96:28:9c:36:7c:3d:f7:fe:5e:2c:
b5:55:50:ae:f4:76:38:87:ec:0b:a6:aa:ac:d3:6e:
3a:d0:93:fd:3e:6a:f5:12:f0:11:76:5b:ba:f7:e9:
cb:63:c5:5a:db:f1:77:49:b6:74:08:e9:0f:b0:99:
2c:71:22:3c:d1:18:a5:90:35:a0:97:7f:16:8f:3c:
34:b1:cd:52:bf:c1:85:bf:dc:1b:77:a8:bb:af:1c:
70:a4:96:4f:a7:2c:6d:74:46:fe:5c:06:2e:01:7e:
58:0e:bd:55:1e:3b:22:20:25:a4:8a:2f:99:6b:28:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:D8:E9:3E:34:51:CF:32:D8:45:BE:0A:93:00:C9:D9:16:12:09
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qebY6T40Uc8y2EW-CpMAydkWEgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bb:f6:52:80:92:b8:a7:b6:2f:3e:4c:82:bb:c0:4f:5a:a8:
c1:d2:09:cc:b9:7a:61:63:98:6b:23:75:c8:85:88:6c:3e:ca:
f7:9c:fc:9b:9d:3a:e7:ad:db:bb:d9:5d:fb:ef:ad:4e:aa:05:
5b:40:7b:cf:f7:51:22:2a:2f:c5:a6:c1:e9:55:8b:21:60:60:
db:45:e5:40:ff:db:5e:17:01:ee:f2:6e:b8:31:f1:31:a3:dd:
d8:ae:78:fd:9f:0d:c6:4e:9b:9f:30:ab:17:e9:87:08:d6:91:
6c:87:b2:c8:4d:1d:fe:dc:c3:5b:f5:2f:43:d0:bf:28:28:44:
86:d3:30:9c:91:2a:dc:73:35:73:e8:ea:df:9b:e9:b1:77:01:
6d:87:0c:01:81:6e:a2:ae:2f:2d:73:fe:13:fd:6b:d5:29:74:
05:57:c1:12:09:75:3b:2c:93:26:6b:15:fe:d2:d9:4e:f4:67:
71:db:46:3a:5b:b5:53:89:2d:27:28:ef:31:6d:bc:d5:1b:00:
70:01:80:53:31:a5:32:44:1e:e0:cc:bb:ed:9e:72:c4:45:b4:
90:96:d9:67:c8:4c:dd:17:0b:f3:21:7d:da:1c:1b:31:b9:32:
49:e0:23:3f:8a:be:f8:c5:f6:60:e5:4b:7e:86:a0:c1:53:95:
37:1e:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:15:10 2025 by rpki-client