Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cMwTEDQQToIDHj9Q5QcNHQes_N8.roa
File: cMwTEDQQToIDHj9Q5QcNHQes_N8.roa (raw, json)
Hash identifier: 7YDCH7OxCh5v9OXK/xuLuIbxzxDo+XwmIzX0XQIE8xo=
Subject key identifier: 70:CC:13:10:34:10:4E:82:03:1E:3F:50:E5:07:0D:1D:07:AC:FC:DF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01909D282F1E889B7AA16B32456F1CB9429C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cMwTEDQQToIDHj9Q5QcNHQes_N8.roa
Signing time: Wed 10 Jul 2024 14:59:34 +0000
ROA not before: Wed 10 Jul 2024 14:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50917
IP address blocks: 82.153.207.0/24 maxlen: 24
212.38.89.0/24 maxlen: 24
213.218.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 16:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:28:2f:1e:88:9b:7a:a1:6b:32:45:6f:1c:b9:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 10 14:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70cc131034104e82031e3f50e5070d1d07acfcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:85:0f:0f:1f:6b:f4:d8:13:d2:6c:e4:a9:
9f:77:21:ca:9c:fd:d4:d0:5e:81:52:36:45:38:43:
ca:7d:4d:48:60:11:68:c5:b7:28:85:e2:64:5f:dd:
41:06:2b:92:9c:91:a0:f0:14:c9:53:b7:4b:5b:53:
65:36:8f:98:47:6d:0c:1b:9a:61:a8:b2:1a:4d:75:
74:21:96:a2:ae:91:45:18:0d:31:20:25:ac:7f:b3:
34:ec:97:c7:1a:ec:ac:d5:ac:b4:ad:7b:c1:bf:4a:
3f:83:48:52:df:3c:91:96:52:de:a9:e1:d9:c6:9d:
2d:4f:17:eb:9e:38:c8:63:95:4e:33:f8:0a:bf:39:
9f:f1:11:08:86:b0:31:87:ee:82:0d:32:73:7a:e7:
b6:87:ec:7e:ae:04:e5:14:b7:ed:f5:d0:a3:88:9d:
0a:ce:d6:6f:cc:ee:42:e2:93:0f:a3:cf:20:4c:46:
3a:4d:6c:fb:d0:c4:ce:ba:79:03:81:e6:ff:ea:12:
72:a9:e8:66:d9:7b:31:a6:62:41:1f:52:60:42:44:
67:6e:ed:b1:03:56:58:4b:4a:5f:3c:df:50:fe:18:
dd:e8:5f:51:e6:24:42:4f:e2:2d:32:bc:13:02:e5:
ba:ca:4b:d2:6e:3d:47:80:40:3d:16:d7:16:1e:fa:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:13:10:34:10:4E:82:03:1E:3F:50:E5:07:0D:1D:07:AC:FC:DF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cMwTEDQQToIDHj9Q5QcNHQes_N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.207.0/24
212.38.89.0/24
213.218.209.0/24
Signature Algorithm: sha256WithRSAEncryption
56:87:e6:6e:b8:c8:75:df:eb:87:01:08:fd:bc:5c:1f:d7:c4:
18:7e:28:be:39:fa:a8:7e:d2:ef:75:7b:75:0e:7b:ae:b8:47:
56:d4:02:29:56:f9:cf:c2:ec:e5:66:68:58:9c:5f:66:9a:d0:
b6:1c:ea:22:ff:db:53:fa:c2:22:6a:7a:d6:4d:1b:37:5c:fc:
3d:83:ae:6e:97:36:f8:ae:fb:d0:d4:f2:ef:19:c1:4a:fb:dd:
a7:13:0c:ce:72:68:ac:4a:d1:a5:37:a9:1a:8d:d7:38:de:09:
88:be:b3:ee:ca:96:6a:6e:07:b1:78:1b:3c:6f:6b:17:26:62:
b1:e6:83:a3:8a:e1:5b:48:14:67:73:87:ea:a1:78:73:d9:6b:
02:d5:11:55:45:f5:21:21:6f:cf:bb:48:18:cb:0c:03:6b:30:
ba:9d:6f:6a:e9:79:60:85:19:e2:a6:cd:b1:10:2a:f7:05:6e:
f7:8e:a8:02:c9:61:e8:61:18:c9:c2:23:ec:e4:1b:7c:8f:1c:
98:af:ec:21:f2:69:e2:07:d0:18:0e:ad:ed:12:d0:c5:4e:b1:
3b:d8:d9:ff:4b:27:77:9b:fd:02:10:0b:8c:f2:95:e2:61:e3:
96:35:8f:a3:4a:71:d8:87:25:e6:3e:9c:eb:cd:56:7d:ab:08:
c1:e9:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:31 2025 by rpki-client