Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cTC-7XLey0TFXa4NZ5JDMbHB-UI.roa
File: cTC-7XLey0TFXa4NZ5JDMbHB-UI.roa (raw, json)
Hash identifier: QTexiThjroj8Q7+rR+nGN5v5qJ4TroTC0jrKdZW8AeQ=
Subject key identifier: 71:30:BE:ED:72:DE:CB:44:C5:5D:AE:0D:67:92:43:31:B1:C1:F9:42
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A2A5B07433D899E5954D024B3EEC9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cTC-7XLey0TFXa4NZ5JDMbHB-UI.roa
Signing time: Mon 02 Jan 2023 12:34:46 +0000
ROA not before: Mon 02 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 82.115.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 07:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:2a:5b:07:43:3d:89:9e:59:54:d0:24:b3:ee:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7130beed72decb44c55dae0d67924331b1c1f942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:27:f6:b7:61:30:b9:06:33:95:85:5d:75:
87:4c:3d:80:f4:47:15:86:a4:af:5f:47:cb:d2:d8:
97:07:1c:c8:28:02:e0:d2:ee:78:8e:ca:39:2d:d0:
8f:af:f0:2b:86:55:1b:d9:a3:a9:c5:71:72:a0:74:
23:17:2d:78:e8:33:87:a1:8e:58:df:96:c8:0d:eb:
68:30:a6:84:ab:b1:23:b8:cb:bd:b2:46:fa:36:17:
0a:0f:eb:b1:1e:5e:ee:db:9a:1b:d3:c4:1a:d2:3d:
c2:5a:93:d9:6c:6b:4a:87:69:7d:1a:f4:cd:dc:e0:
04:1b:b7:69:d2:07:cf:24:43:98:a1:2d:45:f3:c3:
f1:13:b0:11:00:8d:58:d5:10:c5:dd:de:bc:29:ba:
14:7b:2f:5e:75:b4:93:45:96:df:54:63:52:67:a1:
11:eb:ed:8f:de:bc:0d:93:8b:52:61:10:77:8b:36:
7d:54:90:68:0a:79:25:ac:e6:21:dd:d9:9f:b9:e1:
64:6b:cb:2f:ed:55:80:c3:5c:fa:b0:b5:12:82:34:
53:3f:6f:cc:a9:47:b5:55:1b:98:16:c6:8c:a2:d1:
5f:5b:69:c3:a1:13:1b:a9:8b:b5:89:2b:a5:98:23:
ef:15:d8:3c:90:82:5d:bd:c7:cb:5c:93:86:ff:a9:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:30:BE:ED:72:DE:CB:44:C5:5D:AE:0D:67:92:43:31:B1:C1:F9:42
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cTC-7XLey0TFXa4NZ5JDMbHB-UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:9c:b5:ab:0f:77:57:eb:f3:29:8d:c1:63:10:88:30:ab:78:
c8:f2:0b:4d:3e:3f:4f:14:6b:da:d8:d1:f7:ca:f8:94:cf:c6:
c9:d9:cd:63:7a:0c:59:b8:dc:92:2c:e2:89:69:f5:ee:94:3a:
1b:99:a6:e5:aa:d6:a4:f6:a9:86:58:e7:00:7d:7d:70:8a:e7:
64:c7:3f:6f:54:94:71:6c:0d:98:fd:50:86:d0:78:2f:47:89:
95:2c:f2:8a:cc:e4:18:13:37:96:17:b2:20:a6:34:5b:c5:40:
7b:33:d9:da:43:d8:f7:d0:28:de:58:ee:a3:82:68:4a:5d:45:
f6:49:5d:6d:bf:eb:a0:6f:73:27:5b:32:cc:45:06:ed:72:97:
8d:46:79:4f:43:ec:b0:9e:03:da:aa:54:da:bb:c0:6a:c9:8d:
68:d9:72:3e:e6:8d:b0:fa:8d:3d:00:09:ab:8d:d4:70:c2:97:
95:f0:bc:d5:0f:2b:65:62:4c:85:69:d6:78:da:56:26:74:35:
95:e4:e9:7a:a7:f5:d7:3f:1a:03:8e:05:92:60:d4:03:ab:91:
b9:53:0b:74:ad:d7:61:5d:1b:d9:c9:f4:41:47:a6:a9:47:d4:
6f:8e:64:7b:d6:62:3e:e6:70:47:18:a5:5d:6f:b0:b5:1b:9b:
1b:9b:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:16 2024 by rpki-client on console-ams.rpki-client.org