Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ioDtEWWX4sESjtA2hKP5_NBWMwY.roa
File: ioDtEWWX4sESjtA2hKP5_NBWMwY.roa (raw, json)
Hash identifier: LVSVlEh8w12HNcc37BCyfBQ3/rYVVbGNXBcEM2kaMRY=
Subject key identifier: 8A:80:ED:11:65:97:E2:C1:12:8E:D0:36:84:A3:F9:FC:D0:56:33:06
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428242BE538B4F01ACBF21CEC616B4C0F
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ioDtEWWX4sESjtA2hKP5_NBWMwY.roa
Signing time: Thu 02 Jan 2025 17:50:46 +0000
ROA not before: Thu 02 Jan 2025 17:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208046
IP address blocks: 82.118.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:2b:e5:38:b4:f0:1a:cb:f2:1c:ec:61:6b:4c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a80ed116597e2c1128ed03684a3f9fcd0563306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:41:85:4e:98:71:39:b1:ec:5a:d6:dd:61:
71:f8:80:c0:73:d6:05:4e:03:82:7e:6e:6d:6a:4b:
b1:a0:5b:26:8d:ad:9f:10:cd:9f:e6:88:53:08:35:
37:1f:aa:d9:3c:f5:19:16:00:e8:ac:f5:18:f9:b7:
9a:7b:5d:fb:f6:3a:91:71:39:eb:35:6f:88:8c:45:
12:7f:b4:e6:6f:d7:8f:a2:57:bf:3e:70:4f:bd:97:
aa:64:71:6c:06:11:06:29:00:28:ad:64:4d:5c:0f:
c6:8b:dc:98:da:10:6f:5e:1f:39:86:f5:24:e5:a0:
3b:96:6a:84:f2:29:3d:d2:45:9c:69:dc:bf:3b:0a:
8d:d7:3f:76:48:3b:3e:be:ed:91:c2:c7:b7:18:5d:
d3:09:18:8d:b2:d9:4a:27:f6:1e:a5:53:cf:41:87:
e4:93:95:70:ec:c7:16:4e:44:2e:26:15:07:65:ed:
96:a6:fe:e7:82:16:5f:94:d1:5b:b2:64:46:48:fd:
7f:e9:b0:30:c4:83:a8:c0:e2:00:9b:68:5c:60:76:
89:e7:97:c4:79:d2:6e:e7:f5:9d:1b:35:b7:42:b5:
3e:1c:95:dc:4a:3c:61:ea:b4:cd:43:45:19:d3:8a:
ea:73:d7:7a:53:6f:93:40:25:24:39:a5:9f:37:cd:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:ED:11:65:97:E2:C1:12:8E:D0:36:84:A3:F9:FC:D0:56:33:06
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ioDtEWWX4sESjtA2hKP5_NBWMwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:dc:ba:47:76:a1:2a:9f:f4:77:f3:e3:9b:1d:0e:55:65:5a:
fb:fd:ec:c9:9b:63:fd:4d:58:de:cd:43:0a:4e:93:b7:b9:85:
a1:1e:13:ed:97:45:a4:12:4f:39:68:f1:b0:55:f9:b5:77:5f:
dd:a9:a7:14:29:3d:57:91:af:54:78:21:8b:72:b6:df:60:3e:
02:df:45:29:04:91:4b:20:23:52:53:5f:38:f7:74:b9:6e:8b:
7a:26:7e:46:36:d2:4f:c3:8b:05:a7:6d:60:2c:73:17:b5:ef:
5f:8c:8d:0d:64:13:f4:36:9b:d3:2c:bf:56:43:fa:34:75:dd:
a4:ad:98:2f:5d:a2:b6:fc:ff:ad:c4:45:bf:3d:47:c9:80:ba:
f0:cd:09:65:be:1c:ac:48:16:c2:a3:34:a7:8a:e5:5e:93:7b:
6b:42:1a:5e:72:79:30:c9:cd:60:90:91:da:9b:6a:bd:8a:65:
53:cc:b5:a7:b9:0b:98:9b:fb:ff:7f:dc:0d:a8:a7:31:c7:bc:
6a:29:8c:06:8c:7b:a5:a8:8d:cb:9b:f6:8f:81:16:9b:fe:3b:
60:b1:75:27:a5:44:37:df:db:68:17:be:71:66:f2:c6:06:4e:
80:39:66:05:7f:15:b3:78:f4:55:f2:5f:2a:3a:56:da:04:8b:
db:67:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:40:19 2025 by rpki-client