Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/1-5iUPQLlgvjga0EQCLsWDUI6o80.roa
File: 1-5iUPQLlgvjga0EQCLsWDUI6o80.roa (raw, json)
Hash identifier: lRhN11wdgDLs5JvpN4CeRJn4sSToof+XJCUgYJGsT9c=
Subject key identifier: FB:98:94:3D:02:E5:82:F8:E0:6B:41:10:08:BB:16:0D:42:3A:A3:CD
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0193D16DEE71B2B1451DD07F8E9A76C99EA0
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/1-5iUPQLlgvjga0EQCLsWDUI6o80.roa
Signing time: Mon 16 Dec 2024 21:44:22 +0000
ROA not before: Mon 16 Dec 2024 21:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60258
IP address blocks: 82.194.16.0/24 maxlen: 24
82.194.17.0/24 maxlen: 24
82.194.18.0/24 maxlen: 24
82.194.19.0/24 maxlen: 24
82.194.20.0/24 maxlen: 24
82.194.21.0/24 maxlen: 24
82.194.22.0/24 maxlen: 24
82.194.23.0/24 maxlen: 24
82.194.24.0/24 maxlen: 24
82.194.25.0/24 maxlen: 24
82.194.26.0/24 maxlen: 24
82.194.27.0/24 maxlen: 24
82.194.28.0/24 maxlen: 24
82.194.29.0/24 maxlen: 24
82.194.30.0/24 maxlen: 24
82.194.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 07:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d1:6d:ee:71:b2:b1:45:1d:d0:7f:8e:9a:76:c9:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Dec 16 21:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb98943d02e582f8e06b411008bb160d423aa3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:7d:d0:5d:d2:3c:de:b3:ac:88:7d:6f:ec:
8e:19:d4:73:e7:35:48:29:99:21:ad:b3:5f:99:35:
7d:ae:4a:30:3d:89:df:39:ad:db:95:47:76:a7:f5:
e2:d0:13:33:16:84:92:d9:97:fe:84:18:ce:74:73:
9d:5a:9e:cc:6b:d8:0a:fd:d6:65:42:b7:25:c5:b4:
c7:8f:63:d5:56:03:d2:ce:08:ae:9c:99:f0:43:cb:
c3:88:0e:bf:6a:98:d6:21:9e:56:c5:fa:6a:ef:97:
a8:53:3b:6e:16:88:ed:04:f4:49:42:fd:d2:b7:3e:
9f:e6:01:46:e4:3c:e5:b9:a8:33:3d:40:d0:2c:63:
02:09:21:94:92:cd:6a:b8:15:c0:bc:5e:c5:94:80:
db:12:35:6a:45:81:bb:8a:b6:0a:7e:15:b9:83:ee:
f8:b6:c7:2c:fb:01:f0:fd:5e:a0:71:2c:a2:25:a0:
25:a5:ab:b9:98:ac:80:51:e2:70:43:89:c3:fe:15:
3f:03:c4:c5:f1:05:f0:9b:b6:cd:b4:3c:7c:89:f0:
a2:fc:03:cb:1b:d7:b1:df:3a:d3:fe:ba:c9:82:f7:
3d:cf:9b:8b:3b:a4:6e:2d:71:2f:d1:0b:0f:28:a7:
64:c3:19:4f:a6:47:b3:cf:a2:eb:6b:27:e5:1f:78:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:94:3D:02:E5:82:F8:E0:6B:41:10:08:BB:16:0D:42:3A:A3:CD
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/1-5iUPQLlgvjga0EQCLsWDUI6o80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:94:30:9f:c8:4c:f9:6b:11:c5:b2:73:b0:38:12:85:8b:d1:
47:db:7f:b2:72:f2:78:84:cd:7a:50:0e:d3:42:8a:c7:20:d3:
ab:d7:4d:a7:87:a0:c5:28:e2:d0:97:37:d6:26:fe:d3:dd:66:
32:40:06:37:ff:13:e9:55:fb:12:f0:fb:5e:a7:1b:7d:88:b9:
1f:cd:78:b5:6a:78:a2:74:2b:fb:0d:03:63:f0:c0:b1:df:6f:
0d:be:20:4d:f5:34:3d:7a:49:09:2a:c5:94:ac:38:a2:5b:7e:
f4:d3:6f:d0:81:cb:8d:eb:5f:10:7c:1b:73:9e:38:7e:36:a2:
eb:6c:58:fd:6b:97:8d:f2:f4:ed:ab:3c:bf:34:1a:40:71:80:
2f:c6:a4:66:6e:a0:70:b6:5b:c3:55:1d:cb:02:df:f4:f0:16:
6e:e6:0c:51:a4:73:b8:e4:78:61:60:0c:08:d9:58:24:65:13:
c1:a1:77:f9:03:8c:eb:74:db:c2:bb:30:e3:11:e7:1f:a1:84:
ed:c0:b3:ad:96:6b:e9:4e:25:3b:26:c8:24:50:61:da:19:b0:
ba:03:6f:d3:7d:0f:93:4c:27:23:9d:71:9e:e9:59:16:62:d3:
2d:14:a8:d4:a4:f7:7d:f5:00:61:94:48:21:25:24:96:a7:1a:
bc:96:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:09 2025 by rpki-client