Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/1pXucZu8vsiFmD4EV1u0UsX-0nI.roa
File: 1pXucZu8vsiFmD4EV1u0UsX-0nI.roa (raw, json)
Hash identifier: lquPATIFEC+zthU+LI+hT6WI2lpyDxmfM8plL2/ptU8=
Subject key identifier: D6:95:EE:71:9B:BC:BE:C8:85:98:3E:04:57:5B:B4:52:C5:FE:D2:72
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 018570B087D5848AD923F814289A03A30E89
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/1pXucZu8vsiFmD4EV1u0UsX-0nI.roa
Signing time: Mon 02 Jan 2023 04:14:55 +0000
ROA not before: Mon 02 Jan 2023 04:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51338
IP address blocks: 82.193.81.0/25 maxlen: 32
82.193.81.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:87:d5:84:8a:d9:23:f8:14:28:9a:03:a3:0e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 2 04:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d695ee719bbcbec885983e04575bb452c5fed272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:e0:82:65:94:06:47:1e:7f:e8:0f:3b:1e:
8a:1e:eb:d7:8b:f1:7a:59:7f:8b:9a:4e:61:00:bd:
9d:01:57:96:a4:3b:fa:62:00:53:0c:93:59:5e:5a:
0f:aa:dd:c6:f1:ad:1a:70:90:e8:b3:ea:85:92:f0:
e1:08:86:19:fe:a0:5a:68:b1:7b:16:8c:93:82:44:
3a:60:2b:5a:73:b3:4b:08:43:11:ba:0d:77:14:e2:
a1:0f:5f:16:90:8c:e9:b7:78:d0:01:80:cd:56:8f:
be:b3:80:da:4d:8a:67:06:f2:b8:db:d7:f4:31:ce:
79:47:9d:e1:c0:b5:24:c9:09:65:b9:86:9e:8f:05:
69:c5:d1:c9:c7:4e:5a:0f:74:3f:54:7e:a6:2d:68:
0e:1a:38:49:18:c5:7c:ce:76:c8:f4:68:69:24:ba:
e2:8f:15:7c:01:a6:d6:10:2e:52:60:82:e0:eb:9b:
01:b2:4b:74:39:da:8b:e7:d2:a3:78:af:4e:77:5e:
c0:1a:eb:88:1f:64:aa:fe:15:76:22:a5:5b:b5:7d:
fc:be:c4:b5:67:3b:b7:25:1c:98:5e:20:cc:ad:13:
6e:52:bc:87:e6:21:00:e6:2f:cc:d9:a9:84:92:58:
10:0b:4f:ee:85:33:b5:db:fd:db:5e:63:0c:c3:ff:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:EE:71:9B:BC:BE:C8:85:98:3E:04:57:5B:B4:52:C5:FE:D2:72
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/1pXucZu8vsiFmD4EV1u0UsX-0nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.81.0/24
Signature Algorithm: sha256WithRSAEncryption
23:57:57:22:9c:b8:a6:69:b4:f6:a7:53:b5:1d:99:7f:6e:d4:
60:b3:53:75:0c:2f:9f:fd:ed:de:4b:38:fd:73:53:07:bb:a8:
5e:be:e3:0a:2e:15:36:e2:e9:2d:df:f1:39:52:1c:3b:8a:a8:
f5:d5:96:45:3f:09:2f:93:05:8d:6f:f1:2f:b8:f9:dd:8f:1c:
7f:b0:fa:38:2b:1d:d8:ba:59:c9:01:30:50:2e:fc:ee:e9:1e:
43:b1:4f:6b:05:fd:4f:47:33:0a:ae:41:a5:70:47:db:77:75:
6d:ab:31:1d:7d:87:e9:88:a6:59:d8:dd:c9:54:18:9f:02:50:
cf:3b:e0:c8:ec:6b:a4:ca:7f:ef:2b:c9:eb:bf:45:21:0d:06:
83:84:e2:d6:78:b5:22:18:a0:eb:0d:a3:60:0a:07:06:08:8b:
6b:61:45:04:7c:97:eb:4c:5e:b9:41:cd:df:5e:dc:ea:a9:d2:
a9:da:3b:0f:f9:93:7f:2f:ec:99:a7:37:c0:4f:53:a8:f4:ba:
bc:71:6d:08:d5:02:ac:11:c7:ca:73:01:7c:23:e4:17:57:5c:
28:cc:47:d6:52:3b:50:73:31:e3:e9:d0:22:35:87:a8:3b:78:
b7:21:d5:4f:29:1d:55:b0:71:a5:f4:67:e7:ee:0a:8e:50:61:
b5:04:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:52 2024 by rpki-client on console-fra.rpki-client.org