Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/dC_X2DmdtdtEqpAbfeARboyz2fM.roa
File: dC_X2DmdtdtEqpAbfeARboyz2fM.roa (raw, json)
Hash identifier: rTd82I/nucWvVR7qb7UVa7DhIFIxsHrdEuF+De1x04s=
Subject key identifier: 74:2F:D7:D8:39:9D:B5:DB:44:AA:90:1B:7D:E0:11:6E:8C:B3:D9:F3
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 018CC726DD1C6361E5C9B59B6F01156C9381
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/dC_X2DmdtdtEqpAbfeARboyz2fM.roa
Signing time: Mon 01 Jan 2024 22:31:02 +0000
ROA not before: Mon 01 Jan 2024 22:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43905
IP address blocks: 82.146.180.0/24 maxlen: 24
82.146.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:dd:1c:63:61:e5:c9:b5:9b:6f:01:15:6c:93:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 22:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=742fd7d8399db5db44aa901b7de0116e8cb3d9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:1b:1b:d3:70:08:54:82:c3:2d:3f:11:7d:
2a:9a:58:ca:7f:49:19:11:7f:e8:55:a3:72:bb:d9:
0b:e7:98:85:a9:31:b7:4e:f7:23:6a:27:48:aa:0c:
4a:da:8b:da:26:ea:73:98:fa:eb:59:5a:43:f2:12:
d0:f9:e6:a1:75:75:a8:6f:23:9f:1a:20:46:a4:b3:
00:73:0f:d0:5f:27:22:38:d5:9a:33:9b:b5:a4:dc:
16:29:12:f0:d3:20:ea:6c:f1:78:c7:d0:70:3d:c8:
6b:c3:27:f9:84:77:6f:1d:f3:b3:55:82:51:61:23:
f9:2a:39:67:78:8a:5d:3c:e2:cf:18:48:26:15:2c:
41:35:81:65:67:eb:98:d0:fc:02:f9:ef:70:c7:05:
44:ae:94:d0:93:d4:87:e5:03:4a:db:ae:47:c5:c7:
fb:aa:4e:85:21:46:bb:5b:5f:71:ee:6b:0c:9c:0d:
85:be:b6:44:ed:f6:fc:d1:fc:c2:49:2c:b0:cf:6c:
8c:ad:3e:b7:52:25:ee:a8:0d:26:80:8c:fe:06:06:
86:e7:64:2c:f0:f6:94:43:1b:ff:c9:d4:9a:f6:4d:
7e:8c:2b:de:15:f7:2c:2e:cd:b4:da:55:93:f8:2c:
a3:66:52:a0:fc:5b:42:66:b8:b2:a8:45:80:a3:e8:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:D7:D8:39:9D:B5:DB:44:AA:90:1B:7D:E0:11:6E:8C:B3:D9:F3
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/dC_X2DmdtdtEqpAbfeARboyz2fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.180.0/24
82.146.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:7b:3a:1a:40:77:5f:e8:30:fc:8b:9f:a3:c4:5c:64:89:51:
75:95:8d:62:73:d8:f9:55:9a:04:31:76:cf:d4:60:60:eb:6d:
c3:20:29:06:ed:9d:09:c8:8d:b4:39:2c:a4:44:79:f2:d5:3f:
ee:a8:66:aa:05:28:bf:6a:4d:38:18:0d:78:3a:bc:18:97:3d:
50:d2:7a:f8:c8:f1:ef:e1:47:c4:63:c7:ca:97:29:81:b8:0b:
cb:68:7d:11:e5:6f:d5:67:78:9c:6e:8a:d6:86:27:f5:69:ad:
7d:6c:5c:c5:b1:d0:07:04:c3:c1:22:47:93:75:77:ea:06:6b:
ef:81:37:ed:38:44:aa:ad:74:df:ce:0b:e9:34:fa:02:e1:c3:
f5:c0:67:18:5a:81:cd:1e:5e:5d:dd:19:d9:dc:bb:3a:fb:5e:
21:ea:1f:8f:b7:e1:61:03:79:2b:bf:0c:72:90:9d:e3:4d:8b:
0a:8a:e5:65:a0:d7:c7:5e:89:8e:90:3d:4c:e8:3b:94:4d:17:
e3:66:00:2f:24:57:a2:d5:70:f5:4c:c3:a8:9d:cb:ab:28:fd:
e9:5a:d3:71:32:7c:fb:7f:06:d3:94:59:94:8f:4b:b4:41:ae:
21:b3:03:28:42:b3:21:94:18:d6:a2:3a:9a:9c:1e:31:9d:0f:
e0:3a:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:07:43 2025 by rpki-client