Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rkhiuYRChmEGs7six7r3cdkcDws.roa
File: rkhiuYRChmEGs7six7r3cdkcDws.roa (raw, json)
Hash identifier: tjbAg1C5miIXEJOwr8tnAkaCPDxcVRwYI4LRtDmr3Co=
Subject key identifier: AE:48:62:B9:84:42:86:61:06:B3:BB:22:C7:BA:F7:71:D9:1C:0F:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F72684CBEC7D1E3FD479F9720ADC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rkhiuYRChmEGs7six7r3cdkcDws.roa
Signing time: Sun 01 Jan 2023 13:25:12 +0000
ROA not before: Sun 01 Jan 2023 13:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 82.115.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f7:26:84:cb:ec:7d:1e:3f:d4:79:f9:72:0a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae4862b98442866106b3bb22c7baf771d91c0f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:21:b4:42:04:b7:1f:4f:a1:9b:01:92:b6:
6d:00:67:4b:1b:93:83:5a:fe:84:b4:ce:18:73:3d:
15:d1:8a:36:9b:b0:ad:25:1e:bf:35:3b:dc:62:d0:
32:23:99:ad:55:8d:2a:89:91:9f:3a:03:06:30:02:
f4:02:05:15:47:9f:f2:aa:9c:ea:62:f4:53:7c:f3:
db:f0:f2:7e:d1:a7:b0:33:85:f8:4b:2c:a0:7d:b5:
1c:6b:1b:06:1b:75:4e:e3:0a:1f:a6:b1:c2:ab:d6:
11:3c:32:53:83:0b:83:c5:ad:a9:a3:e4:84:d0:26:
df:0c:1f:7b:c1:a7:28:e4:6a:e5:fc:22:b2:1b:7c:
87:3d:b1:9b:7d:28:22:72:70:de:11:10:e8:8e:cd:
eb:71:fa:72:16:61:89:a4:80:8b:7f:2f:bb:ea:b6:
df:e0:4a:fc:81:be:8c:64:1f:b6:b7:c8:de:63:64:
cb:d0:c3:6f:a1:12:33:b1:4e:30:f7:b9:76:ad:5f:
ba:ab:08:63:f8:cc:6d:b8:93:25:96:16:ea:29:08:
7d:2c:c3:ed:b7:8f:e7:37:cc:2b:e0:7f:61:ed:0f:
a4:ff:52:e2:77:a3:de:cb:27:3c:87:9b:16:b9:4e:
04:3a:d7:e5:84:72:3d:59:ae:1d:37:86:7e:e3:f3:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:48:62:B9:84:42:86:61:06:B3:BB:22:C7:BA:F7:71:D9:1C:0F:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rkhiuYRChmEGs7six7r3cdkcDws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.209.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4b:d8:ca:bc:e2:ac:9f:da:5c:f3:d6:6b:a2:c8:ac:02:62:
8c:cc:11:ae:6f:8a:cb:7e:4b:12:50:be:b9:25:44:6b:f0:cd:
3c:7e:88:da:6b:95:9a:08:d8:68:38:8a:0d:8a:3e:8b:8e:5b:
63:7f:5d:49:86:7d:a0:0c:96:42:65:c0:47:89:cf:7b:9e:67:
4c:d7:89:30:76:12:d9:d7:db:bd:ee:3f:b8:3d:34:3e:c5:29:
ec:96:c6:52:51:6b:e2:eb:07:65:87:cd:ad:64:8d:56:33:6f:
63:26:04:fb:cb:26:14:b6:36:c7:7c:50:5e:fc:aa:05:10:ce:
7b:6d:26:d9:1a:a8:29:14:45:53:f2:15:70:4c:c7:9f:ce:cf:
35:26:61:8c:25:ba:f4:17:2a:06:da:37:29:09:f8:c1:ec:a3:
ec:50:d5:62:36:ff:f1:67:95:e8:40:c9:a8:14:e0:fa:35:14:
0f:cf:93:e7:c1:11:5d:a8:a7:02:71:bc:6a:33:7c:e9:97:f6:
82:ed:0a:e0:cc:e2:8d:5d:d1:37:2a:b9:3c:00:6e:30:b6:a1:
cf:bd:15:3c:1c:ab:33:5c:2e:d2:f0:3d:7c:79:55:5b:2d:61:
cb:c5:d7:2d:d4:30:39:1a:df:8a:79:71:c1:8e:d2:2d:02:78:
38:48:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org