Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rI_-e-Qo-RUaUiNhGFo5y9VJB3E.roa
File: rI_-e-Qo-RUaUiNhGFo5y9VJB3E.roa (raw, json)
Hash identifier: ZhXxiN1I0DEWHw5YS8oSvbYA/Dg8cViBIE7uBb5ZJS4=
Subject key identifier: AC:8F:FE:7B:E4:28:F9:15:1A:52:23:61:18:5A:39:CB:D5:49:07:71
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01955D182C61FEF450C498B3548A88B4B9E3
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rI_-e-Qo-RUaUiNhGFo5y9VJB3E.roa
Signing time: Mon 03 Mar 2025 17:40:19 +0000
ROA not before: Mon 03 Mar 2025 17:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 82.206.48.0/21 maxlen: 24
82.206.96.0/20 maxlen: 24
82.206.112.0/21 maxlen: 24
82.206.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 09:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:18:2c:61:fe:f4:50:c4:98:b3:54:8a:88:b4:b9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Mar 3 17:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac8ffe7be428f9151a522361185a39cbd5490771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:cb:6f:da:40:ed:eb:e5:1c:e5:b9:1d:8a:
fa:3f:77:7f:52:d9:89:be:21:43:d3:d9:dc:21:8f:
e8:6b:f4:74:69:f0:9a:16:14:89:b9:b5:bc:07:84:
79:66:4c:cc:19:e6:01:53:33:17:68:64:f2:a3:1f:
5d:3b:51:1b:b1:4a:87:3f:3e:10:04:1b:93:1b:d7:
9c:36:67:8c:99:ca:83:90:1e:29:7a:87:22:e1:28:
75:70:af:83:30:9d:11:8e:fc:5f:94:f9:d7:d9:4b:
31:4e:92:77:df:b0:d5:89:e7:41:b4:23:42:54:1c:
61:e3:ea:61:f2:90:cc:17:b8:72:f2:ac:f0:9a:19:
39:c7:7e:bc:3b:a8:8e:6e:fd:57:87:98:08:e6:84:
12:06:09:fe:66:27:42:aa:9f:b3:56:b6:4a:40:60:
86:52:fa:2c:3f:ea:7d:db:6e:9b:44:04:ae:e6:fd:
a1:4d:4c:d2:66:3d:18:8d:2a:68:b9:d7:3e:a2:86:
95:dd:52:1e:66:39:82:6d:74:3b:a3:03:24:21:24:
c5:47:cf:8a:c6:70:af:f6:98:ed:7e:9e:15:dc:c4:
c1:fa:67:b2:77:76:5f:8d:99:54:f9:87:20:bb:ff:
12:d7:14:77:13:d5:58:77:43:ed:b0:97:ea:a3:fd:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:FE:7B:E4:28:F9:15:1A:52:23:61:18:5A:39:CB:D5:49:07:71
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rI_-e-Qo-RUaUiNhGFo5y9VJB3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.48.0/21
82.206.96.0/19
Signature Algorithm: sha256WithRSAEncryption
16:f1:07:4b:33:84:21:cf:bc:d3:15:d8:d2:03:7e:8b:fd:84:
bd:5d:27:99:68:62:59:38:66:0e:1a:82:2c:4f:4d:ec:d1:ff:
5d:f2:13:4f:33:c5:a6:8a:18:d9:ec:15:ef:28:5c:bc:2a:b5:
56:52:ae:9c:6e:3c:55:f8:45:9c:04:e6:97:df:32:46:2e:8a:
6d:7d:03:5c:2f:ae:ff:6a:69:96:a0:85:7c:0a:78:c1:5f:17:
38:70:e5:07:84:6d:58:68:61:d5:2e:4a:d2:a0:e9:5f:67:68:
af:2f:60:5e:91:a7:2a:d8:ba:fb:b9:51:31:87:94:aa:ae:34:
74:11:50:22:9e:1a:72:97:71:22:94:b8:a9:88:05:74:73:84:
28:ca:55:e5:ee:11:30:59:b6:2f:d0:fa:38:dd:52:12:e3:d8:
91:3a:89:71:0c:5b:2a:e6:a3:a9:08:7a:9c:ff:62:a9:8e:54:
6b:cf:34:be:bc:8a:69:37:92:3a:3e:0c:a8:bb:76:ea:3a:b5:
3b:4c:5f:7b:3e:7e:6a:d7:d0:74:b6:6d:9a:c1:4b:f2:18:c2:
30:9e:03:61:3c:a9:86:d5:b8:d3:aa:11:c1:15:44:2b:22:ba:
18:ed:0f:a4:0b:fd:69:4c:57:7a:ae:77:b1:6d:fd:36:55:bb:
98:e4:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:38:21 2025 by rpki-client