Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fHk6aGio3No2twp9F_PN0fWf12U.roa
File: fHk6aGio3No2twp9F_PN0fWf12U.roa (raw, json)
Hash identifier: vmrrbmHlRQKcstNNovn6kBb1PU/tc1ID1cav+PgtVHU=
Subject key identifier: 7C:79:3A:68:68:A8:DC:DA:36:B7:0A:7D:17:F3:CD:D1:F5:9F:D7:65
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF971C08EFBE52D6E86CE0BAA2F6D6D
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fHk6aGio3No2twp9F_PN0fWf12U.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43651
IP address blocks: 82.147.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:71:c0:8e:fb:e5:2d:6e:86:ce:0b:aa:2f:6d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c793a6868a8dcda36b70a7d17f3cdd1f59fd765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:b8:5f:22:8a:7f:90:4a:f1:58:80:47:31:
bb:f7:eb:d2:8e:8a:a1:4f:f5:77:9d:7b:a6:4b:b5:
9b:17:09:ee:cf:0c:07:31:49:d8:e4:fe:1c:e6:61:
8c:bf:94:30:d5:36:15:f7:da:d7:21:11:92:5b:3c:
2f:0e:10:5b:d7:95:90:d1:77:cf:82:30:50:29:d3:
fa:01:ff:fd:5d:ac:38:97:86:ac:f9:8f:16:97:53:
9c:8d:a3:34:dd:65:ce:33:e9:0e:f6:ac:a3:e9:35:
d6:a9:03:4a:7e:e6:c0:80:5a:79:88:07:97:c4:da:
25:41:7f:e5:7a:21:c7:70:bb:53:d7:5e:20:0d:c2:
98:69:06:49:d1:00:24:0e:7d:c3:37:9d:e2:5b:3c:
8f:73:19:b6:79:0e:57:ce:fe:2c:00:fa:54:51:32:
c9:f1:17:64:28:1e:2f:c5:28:2c:34:b1:8d:38:81:
2f:2e:f7:8f:cb:13:36:1f:e8:7b:51:d5:63:65:e7:
16:b8:54:a1:f2:df:bb:b1:45:4e:38:a0:b9:43:2c:
b8:43:60:9d:f8:a5:c6:fe:57:3d:0c:76:f1:0b:e7:
b9:6d:03:51:3b:9e:8b:60:ff:2f:8f:01:f0:8c:60:
f1:8b:f1:d8:53:f2:b2:52:b5:1b:07:fc:af:44:8c:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:79:3A:68:68:A8:DC:DA:36:B7:0A:7D:17:F3:CD:D1:F5:9F:D7:65
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fHk6aGio3No2twp9F_PN0fWf12U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.134.0/24
Signature Algorithm: sha256WithRSAEncryption
02:52:b7:f3:f6:6d:d5:9e:ec:6b:7e:75:0d:fe:31:4a:de:a2:
51:27:67:f0:97:5b:7e:cc:63:0a:40:a9:fc:f9:88:b7:90:34:
09:8c:51:f3:0f:ec:01:55:e8:6b:fd:0c:3d:76:c5:85:f1:1c:
04:14:58:b1:7f:a9:67:5b:41:08:58:41:0f:a2:a9:4e:c1:db:
0d:2f:59:04:f8:1b:e9:ad:47:dd:1e:df:8e:ea:46:41:80:19:
8f:77:b5:52:d5:9e:9e:99:9c:20:8a:79:dc:e8:06:3a:8d:60:
1c:a1:32:64:19:c1:8d:ac:c1:b3:a6:75:0a:da:41:d5:20:92:
df:37:f6:14:e8:79:13:6e:b6:08:32:81:03:a2:a4:de:19:60:
cf:ee:e2:0d:c1:33:90:cb:68:20:e0:fe:8b:c4:73:d6:96:f7:
98:e7:4f:48:cc:6f:47:e7:ed:46:b0:59:6c:2e:7a:a6:2d:70:
65:19:e9:fa:4e:d9:71:34:ab:c4:90:ac:9b:85:d0:98:40:cf:
19:a3:38:d0:df:bb:39:1a:2e:9f:89:71:1e:6d:28:8b:1c:5f:
d1:b5:cf:24:fa:c3:89:48:9b:bd:6f:61:3b:cb:25:db:73:7e:
94:e9:16:9f:62:65:91:4e:9e:c5:4e:eb:a0:47:44:52:13:91:
37:29:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org