Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v8-Zlx3EGVW4YRoRNQDhJXrh-U8.roa
File: v8-Zlx3EGVW4YRoRNQDhJXrh-U8.roa (raw, json)
Hash identifier: sUxpaZRevFE/hljSyhMqs5wgAcXBn6PW2pTfZIIJgFU=
Subject key identifier: BF:CF:99:97:1D:C4:19:55:B8:61:1A:11:35:00:E1:25:7A:E1:F9:4F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01916B1FF8AA79202167F757B6071EFBFBE2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v8-Zlx3EGVW4YRoRNQDhJXrh-U8.roa
Signing time: Mon 19 Aug 2024 14:52:22 +0000
ROA not before: Mon 19 Aug 2024 14:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63902
IP address blocks: 82.152.12.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 13:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:1f:f8:aa:79:20:21:67:f7:57:b6:07:1e:fb:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 19 14:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfcf99971dc41955b8611a113500e1257ae1f94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:01:a0:6b:89:ed:84:38:ee:29:2c:5e:62:
22:1c:5e:79:33:cb:ae:f7:33:0b:cd:e5:44:33:35:
c1:88:de:54:ce:c5:01:a6:f4:d1:66:17:ad:23:34:
ae:40:e7:f5:82:3f:b7:71:48:4e:f1:26:74:5d:0b:
8e:f6:eb:b7:e5:c4:2b:cf:11:33:fd:bb:67:df:65:
14:88:d6:2a:d8:62:39:04:b7:39:79:e1:1e:b2:a6:
a2:be:71:60:3f:af:cf:48:73:7d:fa:c6:cd:10:48:
02:09:33:55:16:73:b6:be:8b:b3:b5:36:23:58:fd:
9c:ac:b4:cb:9a:c3:f9:0a:51:48:5c:08:2c:7e:dd:
15:05:94:d7:9d:b8:46:0e:a1:c3:9c:7a:82:80:a4:
43:a7:f8:74:d6:2b:b7:2b:92:d2:dd:04:a8:f2:88:
1d:0d:cd:59:fa:6f:4e:fe:df:cd:2f:38:4d:c8:82:
34:94:4b:5c:99:55:ed:77:92:ec:d0:57:74:e6:b8:
8b:dd:6f:5f:84:6e:35:59:93:96:f2:f8:57:3f:74:
b9:ef:6d:19:2b:22:da:73:05:6b:03:72:f4:5b:1f:
9c:82:58:84:67:ef:58:cd:f5:d9:f4:5e:b7:42:21:
04:15:eb:c1:f7:99:27:ae:ef:1a:53:30:5a:a4:af:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:99:97:1D:C4:19:55:B8:61:1A:11:35:00:E1:25:7A:E1:F9:4F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v8-Zlx3EGVW4YRoRNQDhJXrh-U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
82.153.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:35:aa:2e:6c:2a:78:9a:51:e3:4d:9d:98:57:23:8b:95:23:
a9:48:f3:77:c0:79:5b:ea:56:ad:ee:1e:fe:30:db:a1:bc:7a:
7b:80:21:e5:3e:16:db:2b:e1:ff:d7:de:96:d8:93:de:4a:2d:
97:ce:63:96:17:9a:e8:8c:cd:c4:0e:f3:7d:e4:ac:06:b3:b0:
56:1d:6a:16:20:63:86:fd:26:56:23:11:63:45:55:f3:5f:b0:
ec:c3:c9:6e:73:7e:d6:18:bb:c0:e4:5d:57:8d:4b:fd:28:e8:
25:20:e1:bf:a2:00:37:fa:cb:57:11:21:bb:df:81:36:12:d3:
8a:92:a2:38:be:33:39:32:36:6e:a9:d9:b2:52:86:f4:40:0f:
9a:d2:4f:b7:8a:92:1a:ab:59:3f:f8:87:b9:79:82:d1:e7:30:
aa:f4:19:52:64:15:ee:6f:72:ff:95:ce:85:ff:85:e3:4b:ed:
e3:2d:f5:5a:d3:77:11:a3:42:74:f7:9f:3b:9b:55:3c:2a:4d:
73:89:30:af:d0:7d:8d:9e:61:1e:b1:fd:b4:c9:ba:89:e7:01:
6d:27:d4:c3:57:0c:cf:f0:1c:fe:b2:50:dd:94:e1:55:82:bf:
aa:ee:50:ce:84:ed:ff:f1:5d:4b:96:62:28:12:56:20:3f:22:
e3:01:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:02 2025 by rpki-client