Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/f82UG_CrC8aIyOkn-5wPNDKDxnE.roa
File: f82UG_CrC8aIyOkn-5wPNDKDxnE.roa (raw, json)
Hash identifier: sl8WumXdenyBxD80Bf3Fie7fXvnGYboqYXvA0ggvLeI=
Subject key identifier: 7F:CD:94:1B:F0:AB:0B:C6:88:C8:E9:27:FB:9C:0F:34:32:83:C6:71
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 018707CC121586E86ABC7786692F7B524C47
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/f82UG_CrC8aIyOkn-5wPNDKDxnE.roa
Signing time: Wed 22 Mar 2023 05:30:27 +0000
ROA not before: Wed 22 Mar 2023 05:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2516
IP address blocks: 163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:07:cc:12:15:86:e8:6a:bc:77:86:69:2f:7b:52:4c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 22 05:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fcd941bf0ab0bc688c8e927fb9c0f343283c671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:02:7e:51:0a:21:05:b0:dd:49:f8:9d:a1:
bd:e6:ae:5f:8c:08:94:4e:94:bd:8d:43:19:18:5c:
13:f2:1f:c7:9d:82:87:68:4e:5d:ca:eb:c2:ff:91:
bb:d9:4c:ff:c4:32:4d:21:ff:d3:39:55:c5:88:21:
ab:19:6b:41:8b:f6:a1:90:b1:da:4c:f4:e1:75:59:
1b:42:b2:68:1e:57:2f:20:13:a8:db:12:15:ce:10:
f5:e4:ad:78:e6:9f:c6:ec:cc:d5:90:79:2e:04:a2:
a3:63:99:d6:5a:04:4b:51:1d:a3:82:40:3d:d5:de:
97:08:44:0b:d6:b0:86:92:48:87:91:8d:05:b1:62:
b0:d2:8d:11:45:50:f5:89:9c:c0:c9:ad:8d:48:c4:
b2:c8:c4:13:1a:5e:6b:d0:d5:ee:4a:6c:21:5b:2a:
25:f8:5d:4f:c9:dc:d4:b4:c4:4a:ac:ff:25:b7:27:
95:6b:3b:f1:a1:f2:57:cc:cb:72:a3:05:a1:86:e5:
1b:7b:22:b9:4b:b0:d6:1f:59:be:29:f9:89:46:34:
35:46:75:7f:92:7b:52:38:90:07:bf:05:4e:b8:8a:
26:44:b8:27:f8:c5:45:3e:3d:68:87:22:db:52:8c:
24:61:d9:84:e7:7a:94:a3:c2:b2:6c:c8:ed:9b:c0:
a3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:94:1B:F0:AB:0B:C6:88:C8:E9:27:FB:9C:0F:34:32:83:C6:71
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/f82UG_CrC8aIyOkn-5wPNDKDxnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.171.84.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:4e:36:7b:2a:1f:2d:ce:69:e1:2c:43:9c:14:72:57:5f:1e:
f0:fe:e6:c1:b0:6e:9b:50:a5:b6:a1:79:f1:33:6a:ec:a1:66:
05:49:4d:bf:56:0a:8f:e3:6b:c2:2e:0a:6f:da:e1:e3:c8:10:
51:04:5b:d3:1a:4c:c9:10:9e:d0:56:ca:76:a6:27:1c:0a:e0:
28:0b:40:8e:be:7b:c3:35:8f:ee:30:d8:a6:59:e2:9b:3f:02:
79:26:59:02:1e:aa:fe:d9:26:76:ab:58:44:25:bd:74:26:6f:
89:b9:85:b5:de:7f:f1:a8:d8:c6:03:18:b9:66:77:68:26:2c:
23:4c:e7:30:19:dd:7d:9d:e6:9c:1e:31:95:62:96:e3:34:99:
16:97:dc:08:d1:5f:89:db:87:f7:53:f6:03:ca:0c:b3:b6:0e:
eb:2c:dd:f2:0f:8f:69:70:e8:17:2f:76:56:7d:c7:fa:38:9d:
a5:aa:83:2a:ba:8b:2a:cf:03:b5:c4:15:bf:6d:10:60:5a:43:
ac:71:58:29:72:18:ac:d2:a5:df:47:ed:14:28:1f:c3:b5:24:
b5:05:bb:fc:1a:57:33:be:0f:0e:77:a5:c0:8f:df:50:98:10:
45:2d:2b:29:4c:92:7a:9f:58:c9:d3:bc:e8:f4:e5:14:1b:8a:
23:ee:84:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-fra.rpki-client.org