Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F3flBeqVBSnkOlZuaF3GATgzuFE.roa
File: F3flBeqVBSnkOlZuaF3GATgzuFE.roa (raw, json)
Hash identifier: tyta3X5TbMa5O4IJAVhVtia2nBS5F2S+CtuRV5tly50=
Subject key identifier: 17:77:E5:05:EA:95:05:29:E4:3A:56:6E:68:5D:C6:01:38:33:B8:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF4A4DB57BC744F231E7DDDDA71E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F3flBeqVBSnkOlZuaF3GATgzuFE.roa
Signing time: Tue 02 Jan 2024 06:29:32 +0000
ROA not before: Tue 02 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60849
IP address blocks: 82.115.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f4:a4:db:57:bc:74:4f:23:1e:7d:dd:da:71:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1777e505ea950529e43a566e685dc6013833b851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:24:bf:37:54:ca:c1:4f:5a:96:b5:b6:8f:
69:3a:7a:0d:14:60:00:02:46:5d:50:3b:38:32:1e:
a3:78:13:eb:47:7a:68:b5:6e:dc:c1:9a:d3:a8:81:
48:34:b1:da:3c:43:a5:f5:d0:0e:3d:d7:95:9c:e4:
87:d4:ad:ab:3c:0c:1d:dc:d1:2d:d4:14:24:d4:a9:
1e:0a:12:b2:31:3e:e7:c6:14:9f:47:79:d9:df:ea:
e5:f9:11:74:d5:69:b5:ea:7e:b9:fb:83:aa:ba:a1:
5d:8c:eb:67:26:6c:8e:10:7b:ed:11:be:e6:7a:0c:
8f:e6:fd:f3:94:fa:9a:af:ec:eb:bf:94:44:e4:30:
91:4f:1d:0b:cb:dc:59:00:52:b3:f9:f9:17:b1:ee:
23:fe:3c:79:63:6f:24:7e:59:02:17:c3:28:6d:b1:
7a:8d:32:91:1a:05:df:9a:b1:5f:46:8b:19:bc:8e:
e3:c2:2d:66:31:28:c8:ed:e2:b8:c1:f0:e1:60:2b:
ef:b5:7e:08:d8:de:57:bf:80:63:52:e7:1a:46:77:
74:d5:2a:11:89:c8:89:15:2f:8e:a6:4a:db:ea:da:
96:ea:cd:37:72:27:f6:52:7b:c6:77:8d:f2:19:31:
69:02:a5:d3:69:8a:06:8c:cd:35:59:3a:a4:83:b7:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:E5:05:EA:95:05:29:E4:3A:56:6E:68:5D:C6:01:38:33:B8:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F3flBeqVBSnkOlZuaF3GATgzuFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a7:fb:47:83:0d:55:05:d1:2f:95:56:4e:7b:98:2e:7b:c7:
34:fd:28:d4:b1:46:b8:9d:ab:26:3e:6c:f3:ce:aa:5c:3a:60:
0e:59:3a:2e:f9:17:a2:ef:a8:1e:66:48:5b:f8:2e:83:d0:e5:
60:b6:1f:d7:33:85:8c:27:e8:17:e6:aa:5d:85:ff:69:57:00:
b0:28:4c:c4:ff:6d:8e:76:2c:82:61:f9:9a:1f:e8:39:08:96:
5e:c0:d3:32:d7:9b:1d:4b:cf:c8:80:38:de:de:37:ec:f7:f1:
f5:57:25:0b:0e:2f:8d:7b:85:64:a3:7d:39:9b:20:33:ea:2b:
84:3b:e0:b6:55:77:f4:f1:6d:84:dd:08:48:2b:24:40:5a:1f:
59:ac:4d:f9:9d:0d:8d:3b:4a:da:54:51:72:cd:8e:d5:47:7f:
81:a8:13:1c:26:21:83:d6:73:69:f5:41:1a:00:27:b0:50:e9:
62:78:34:28:87:e0:3f:4d:4e:1f:9e:21:40:7a:1b:d1:36:2e:
1c:4b:e7:a0:06:94:b8:a3:52:a4:a8:e2:ce:e5:e8:65:a1:e3:
0d:9a:38:5a:41:20:7f:9a:bc:c5:14:b4:bd:f1:05:fd:f1:d4:
1d:c0:09:f1:4f:7f:9d:13:af:55:f2:eb:01:c8:96:fc:ac:c5:
4d:a6:d5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 16:21:22 2024 by rpki-client on console-fra.rpki-client.org