Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/5xJPZXb9xCXHeoFAmDJeCpHl_T8.roa
File: 5xJPZXb9xCXHeoFAmDJeCpHl_T8.roa (raw, json)
Hash identifier: uUKXRutGqyZYRN1sqGv9LPyNudxMYpPE9yn0+BsLhL8=
Subject key identifier: E7:12:4F:65:76:FD:C4:25:C7:7A:81:40:98:32:5E:0A:91:E5:FD:3F
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 018CC726DC0F47C18F3B7B8B2429DDC945FB
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/5xJPZXb9xCXHeoFAmDJeCpHl_T8.roa
Signing time: Mon 01 Jan 2024 22:31:01 +0000
ROA not before: Mon 01 Jan 2024 22:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15739
IP address blocks: 82.146.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:dc:0f:47:c1:8f:3b:7b:8b:24:29:dd:c9:45:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 22:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7124f6576fdc425c77a814098325e0a91e5fd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:4c:13:75:d4:b6:f0:af:68:ec:ca:17:e6:
29:32:eb:fe:3b:dd:c7:a8:65:03:0c:6e:5b:e8:b5:
44:95:a2:9f:7b:c4:8d:fe:9d:e8:ee:4d:32:51:f8:
36:f5:a8:15:de:51:45:e5:db:d7:e2:fe:44:b0:46:
f8:c6:be:de:9e:58:1b:5f:ba:07:64:02:39:bc:0f:
af:38:7d:31:cc:0d:2c:a9:2d:8a:61:ab:9f:3a:d9:
47:a1:65:16:9e:94:c5:f5:52:6f:86:cb:da:87:55:
5e:ba:82:b3:96:b5:6e:ac:59:de:f5:a4:72:f7:2b:
18:5d:b2:13:95:ea:d7:1f:7d:78:72:3c:49:6b:ae:
09:b5:d6:b7:cf:a3:f6:78:4c:63:2a:0c:75:26:06:
32:06:e5:62:de:12:e0:5d:a5:c0:d6:d2:39:46:6c:
61:06:3b:f2:bc:d6:bf:8f:07:bb:cd:9c:d9:88:26:
ae:d9:25:99:3a:93:64:6d:21:e9:f5:56:ec:30:4e:
dd:1f:14:9c:e0:8b:ee:9c:bb:14:fb:e9:6e:9b:67:
57:15:8c:be:d1:ba:cd:7a:1c:f4:85:55:e8:b6:15:
e2:88:b4:39:06:f7:16:cd:aa:fe:4e:34:19:42:b0:
f6:64:19:8f:c7:7b:f1:58:93:f1:39:f0:f6:58:93:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:12:4F:65:76:FD:C4:25:C7:7A:81:40:98:32:5E:0A:91:E5:FD:3F
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/5xJPZXb9xCXHeoFAmDJeCpHl_T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0a:89:dd:01:4a:b4:6a:d2:31:86:b9:7c:7c:a5:0a:58:1f:
c9:c4:b8:46:92:79:45:17:32:ea:7f:22:7f:c0:ea:a8:a6:5a:
ee:be:e5:ec:1c:78:80:f3:f5:55:32:d2:2d:f5:26:03:17:26:
cb:c5:a0:1d:88:c3:8e:34:c3:9f:2e:db:ef:07:8d:99:7a:6d:
c9:21:1e:03:5f:5e:58:53:47:3b:93:1b:9c:f7:07:1e:74:f5:
00:37:52:8b:4a:e7:50:a4:6c:00:55:75:c6:69:f7:26:9f:89:
11:aa:c4:3d:28:e2:19:62:90:4e:2f:e5:ac:89:a1:87:87:f0:
8c:16:c7:38:e9:18:01:9b:bd:e5:af:18:5b:4b:1f:d8:ef:fd:
1d:18:bb:e5:f8:30:82:f2:c5:76:1d:6e:ed:42:a7:58:de:80:
f8:14:f2:5c:2f:c8:12:02:da:b9:a3:f1:25:73:c6:a8:82:34:
94:50:d4:1a:c9:87:b6:b9:1e:d2:97:f9:db:dc:f3:be:aa:95:
a4:09:56:a3:86:48:54:eb:29:60:7e:11:26:1a:cb:13:5e:52:
7b:b9:00:c6:eb:16:d5:c2:73:07:04:53:63:58:e2:ac:e9:21:
c7:f1:b6:ad:9b:ae:2a:13:32:e3:ea:99:55:a7:7f:bc:a9:bd:
3c:3e:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:43 2025 by rpki-client