Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/BAsbVO__kMZnsR1a80yiqVp_fhE.roa
File: BAsbVO__kMZnsR1a80yiqVp_fhE.roa (raw, json)
Hash identifier: koIVA8FY6IMReihFD6bT6vOJF3a+lbGjcCs47saWCUQ=
Subject key identifier: 04:0B:1B:54:EF:FF:90:C6:67:B1:1D:5A:F3:4C:A2:A9:5A:7F:7E:11
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019428240F9D321DFD4488FAFE73C6C18064
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/BAsbVO__kMZnsR1a80yiqVp_fhE.roa
Signing time: Thu 02 Jan 2025 17:50:39 +0000
ROA not before: Thu 02 Jan 2025 17:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 82.163.56.0/22 maxlen: 22
86.104.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 07:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:0f:9d:32:1d:fd:44:88:fa:fe:73:c6:c1:80:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=040b1b54efff90c667b11d5af34ca2a95a7f7e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:a8:36:ba:35:33:29:b3:0c:4a:cf:65:ea:
27:6b:f3:67:9b:49:1e:1b:67:e4:7e:60:6e:04:56:
72:f6:13:11:dd:29:cb:cf:12:80:93:11:ed:01:bb:
b2:c3:4c:4e:f9:4f:3a:04:c4:71:79:46:8e:59:1e:
5e:8b:d5:18:93:29:a4:03:d2:ad:2d:1f:e6:47:59:
e5:b4:4e:c3:26:59:84:59:42:79:16:01:bf:37:38:
f9:aa:91:fa:5d:6a:cb:a6:22:d6:3d:4f:41:26:84:
ae:29:78:8d:6e:87:8b:29:06:d3:57:9c:d6:2c:5f:
9a:42:aa:2e:fd:71:f2:71:d6:11:10:67:4d:42:44:
e0:47:88:bb:3a:ea:26:e4:98:db:40:cb:d7:f9:8f:
44:86:4b:ab:1d:1d:9a:2c:8c:5f:ae:b9:da:0d:86:
42:52:88:f2:a8:5f:7f:03:94:d0:19:05:5d:73:48:
9d:40:07:98:54:40:49:fe:90:9f:25:99:6d:dd:ab:
44:e0:19:58:8a:c3:e1:33:84:0f:df:f0:5a:ed:5f:
9f:e7:93:51:2d:fc:7b:7c:0f:4a:fe:33:d2:10:10:
e9:23:08:7a:59:4e:98:0d:4e:eb:49:0e:62:56:35:
22:50:7a:ba:23:9a:44:9b:e3:61:51:d0:da:35:cf:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0B:1B:54:EF:FF:90:C6:67:B1:1D:5A:F3:4C:A2:A9:5A:7F:7E:11
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/BAsbVO__kMZnsR1a80yiqVp_fhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.56.0/22
86.104.160.0/22
Signature Algorithm: sha256WithRSAEncryption
31:a3:5c:91:53:f5:8d:62:4f:23:ca:bf:e0:c1:6f:6d:f8:54:
ce:e7:dd:57:78:bb:c8:83:2f:96:31:c2:6d:6e:9d:a0:2c:eb:
63:b6:9e:5f:37:ff:2d:f1:5c:94:46:a7:4f:4d:a6:d0:42:30:
62:d8:28:c5:36:4a:7e:e3:c0:33:ef:e5:c3:8a:11:d2:1b:7a:
c0:e0:d9:be:be:9e:d7:1b:7f:52:37:bd:29:32:d2:50:d3:e1:
58:72:61:d7:a0:fb:29:5a:6e:d9:8a:95:fe:58:00:2d:42:dc:
06:44:56:91:56:85:85:d1:74:3d:b5:28:92:a6:c5:66:b7:60:
28:e6:e4:8b:b0:7a:40:88:e8:d1:af:d9:04:35:ec:07:16:4e:
4d:e8:c5:31:4f:a7:f4:63:25:cd:80:e4:ad:3b:55:5a:2f:89:
ee:c6:e5:a7:95:78:c2:ca:e8:af:0d:9e:5e:51:35:8e:c2:b5:
0f:01:29:55:b3:b2:70:e4:2c:d6:e3:a8:9f:b4:79:a8:77:1b:
9c:3e:e4:4f:4d:bd:48:f4:1f:58:ef:e2:80:02:92:50:e6:56:
57:a8:69:0d:af:64:7c:e9:97:b8:d0:36:6f:51:b1:17:3b:02:
00:f4:df:a1:fa:07:02:d0:8e:a2:99:16:77:cf:0a:7a:ed:8a:
1b:cb:db:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:57 2025 by rpki-client