Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/me9YqXkRHK-4mcimTU-B8WFRqyY.roa
File: me9YqXkRHK-4mcimTU-B8WFRqyY.roa (raw, json)
Hash identifier: uaVhNOrDUdCY8+mXaORNoWLXnbE5/ySBfNcborPAxlU=
Subject key identifier: 99:EF:58:A9:79:11:1C:AF:B8:99:C8:A6:4D:4F:81:F1:61:51:AB:26
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 01918B2105C59F9DE33445B7CEA9DB4E99FF
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/me9YqXkRHK-4mcimTU-B8WFRqyY.roa
Signing time: Sun 25 Aug 2024 20:01:22 +0000
ROA not before: Sun 25 Aug 2024 20:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.115.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 09:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8b:21:05:c5:9f:9d:e3:34:45:b7:ce:a9:db:4e:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Aug 25 20:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ef58a979111cafb899c8a64d4f81f16151ab26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:52:19:8f:c8:47:6e:8a:16:7f:34:cc:36:
76:d2:3a:de:86:72:1d:6a:ef:76:d9:a6:e0:b8:2d:
a0:2f:69:8f:8f:12:28:9e:8f:df:c9:20:68:91:3a:
4b:65:22:a6:b7:c9:9a:2a:d3:bf:b7:0f:77:6b:d0:
d5:41:bc:e0:25:e8:80:7a:de:ad:91:58:85:ac:8b:
e7:ad:ab:88:09:6b:22:7c:41:58:77:63:68:6c:2f:
51:20:c3:4c:7d:89:34:b0:f5:7f:fd:a5:0c:f8:8c:
ea:31:0d:a1:3c:6b:f5:49:75:bd:b2:b9:4a:7d:d8:
90:2e:f5:cd:e2:18:9a:86:55:e5:9a:11:6e:cc:b1:
50:c3:58:02:40:15:30:d8:23:bf:ec:b7:f1:d5:e7:
3d:62:27:1c:63:97:c2:67:a3:03:f5:e7:ed:33:bd:
85:ff:de:a7:25:17:e9:69:a3:21:87:58:79:4c:e0:
9d:1a:16:4a:27:72:cc:c3:f7:54:3a:06:bf:a0:1a:
44:56:9d:55:a9:eb:15:59:3c:b0:d9:a9:fa:ea:d6:
80:a7:e4:73:51:11:2c:95:67:e1:c1:50:52:6c:9f:
e4:0b:05:ce:94:2f:51:74:57:00:aa:6e:6c:b3:61:
fb:e5:1e:50:b6:b8:ab:75:d0:d7:25:ef:65:fd:aa:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:58:A9:79:11:1C:AF:B8:99:C8:A6:4D:4F:81:F1:61:51:AB:26
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/me9YqXkRHK-4mcimTU-B8WFRqyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:27:c9:a7:01:e1:9c:7b:05:1d:e1:2f:00:9e:29:23:02:55:
fc:c7:1c:4c:ba:34:90:90:29:a6:3f:79:fe:11:92:83:0c:05:
f3:d8:ec:a6:b7:9a:e2:1b:f5:a5:32:53:aa:b1:2b:f1:14:67:
5f:77:ab:f8:05:06:a0:40:87:8d:78:89:5a:f7:9d:d9:bf:9b:
94:73:b1:05:82:05:01:6d:94:17:4e:2d:49:bc:a6:35:d3:5e:
9d:e7:99:3a:0f:cc:2f:0e:8d:79:e6:cc:71:92:16:12:f0:c6:
e8:47:4a:fb:ab:29:8f:d5:3d:77:51:22:d2:46:40:dc:ba:1f:
83:e8:68:0a:e5:83:48:41:88:63:ee:32:a2:f9:b1:4a:0a:e1:
3f:b4:fd:f6:59:0c:ed:1a:19:8d:de:f7:0c:b3:67:5b:80:91:
95:e1:54:b2:e0:6d:6d:92:66:6e:4e:18:9c:c9:5d:b8:4c:54:
70:88:06:96:28:4a:4d:7d:de:ca:18:71:ca:75:94:29:cb:55:
01:ee:3c:50:36:49:45:e9:08:9a:a8:d5:87:71:20:fc:e7:45:
13:1c:8b:cc:bb:08:f0:c1:76:5f:30:71:74:40:27:56:18:da:
33:33:d1:5a:c7:64:6c:06:2c:2f:e2:65:5d:df:08:68:dd:89:
bf:f1:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 14:02:05 2024 by rpki-client on console-ams.rpki-client.org