Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sdW3o1xYK68DYuzxqgHukTGSYBI.roa
File: sdW3o1xYK68DYuzxqgHukTGSYBI.roa (raw, json)
Hash identifier: PUDWoJcjkQYRahld2fOg/8cw46pH9Nn+SeADwoX+Kec=
Subject key identifier: B1:D5:B7:A3:5C:58:2B:AF:03:62:EC:F1:AA:01:EE:91:31:92:60:12
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143F6A15A0366B128C04307A7585C1A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sdW3o1xYK68DYuzxqgHukTGSYBI.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 82.152.12.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 10:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f6:a1:5a:03:66:b1:28:c0:43:07:a7:58:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1d5b7a35c582baf0362ecf1aa01ee9131926012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:c9:cc:69:39:91:e4:fe:39:6e:65:fc:ca:
cb:e1:32:51:45:cc:6d:a8:9e:79:2c:8a:72:42:0c:
1e:0e:19:4d:ae:70:2d:be:28:0d:42:b6:07:9f:c8:
5a:a6:ed:49:a6:e3:6c:c1:4e:34:49:0b:74:8f:0e:
fa:6f:71:4f:2a:a1:ac:c2:25:60:8d:ae:79:15:e6:
25:12:4f:61:88:15:b7:df:97:60:c9:d0:92:be:c0:
dc:52:42:8f:5b:f2:8e:37:67:72:a0:65:28:8a:6b:
6b:d5:19:91:55:42:cf:54:ac:39:d0:4b:6b:82:fe:
42:fa:41:03:7b:29:5d:10:0d:25:f5:82:60:fb:05:
ab:10:20:ef:f5:ed:fb:2c:2a:ee:16:93:cd:5c:5d:
18:94:fd:59:44:ad:f4:a8:1e:8e:bc:1c:ed:17:51:
51:61:be:b6:a2:a8:87:d1:b0:92:ec:b5:e1:ae:da:
cc:a2:11:c4:54:58:5b:1a:f2:ef:d0:6e:f9:42:66:
cb:4b:03:e0:ba:79:e6:ad:96:27:9c:f0:14:1a:b1:
4d:c6:53:19:44:34:d3:fd:d8:ba:79:5d:ce:32:81:
b3:85:83:0f:15:33:37:5c:ba:e2:8c:14:78:c4:38:
a8:bb:0a:81:51:8f:14:e9:b6:a1:72:72:b1:47:f1:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:B7:A3:5C:58:2B:AF:03:62:EC:F1:AA:01:EE:91:31:92:60:12
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sdW3o1xYK68DYuzxqgHukTGSYBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
213.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f7:03:7b:dd:df:20:34:7b:c0:eb:41:c0:2f:d8:61:28:2f:
8a:ce:41:af:bc:8d:61:be:ed:0e:49:9e:2c:bd:6b:4c:d7:67:
b4:43:f8:91:22:16:88:88:12:dd:3b:ce:e7:74:12:f0:73:da:
46:0b:af:5b:58:61:9d:f2:12:b7:e1:38:6e:12:52:bc:ca:ae:
a6:b5:61:03:a0:0e:d4:14:a2:cf:f3:ec:01:20:b6:dd:74:c7:
6a:d5:60:00:65:9f:e8:89:15:e4:79:4e:4c:00:ae:35:90:97:
d2:f5:82:95:7d:2b:39:68:b4:4e:95:30:7b:be:c9:45:21:42:
c6:10:3e:5e:48:35:d7:1c:f7:91:ed:16:f3:d1:fa:9e:47:e9:
a5:29:07:b0:f7:90:a4:86:be:89:1c:f5:ab:c5:60:37:78:73:
6d:f8:d8:4e:48:73:27:47:36:48:0b:ad:c0:44:03:75:77:a4:
cf:d2:35:a1:5c:8a:9c:c7:79:7c:d3:b7:a8:7b:e8:61:71:c2:
9b:ad:c7:f6:fc:28:89:18:8b:a5:80:4b:bd:64:6e:1d:50:10:
35:0f:84:08:2d:63:51:90:30:e2:a7:f3:f7:91:59:9b:84:27:
d9:26:5c:c3:ea:9f:84:53:1d:ed:9d:3c:72:26:8b:02:5e:35:
08:73:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:16:26 2025 by rpki-client