Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/Eu9xf22zHOcfMCFBXJr_IiatrcM.roa
File: Eu9xf22zHOcfMCFBXJr_IiatrcM.roa (raw, json)
Hash identifier: kwxmv/TCnH9xn6wukb6kVEzvr1VpD7YFWxEUwURbknA=
Subject key identifier: 12:EF:71:7F:6D:B3:1C:E7:1F:30:21:41:5C:9A:FF:22:26:AD:AD:C3
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 0185A146B9BB2527C82BAA60502F7843D4DB
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/Eu9xf22zHOcfMCFBXJr_IiatrcM.roa
Signing time: Wed 11 Jan 2023 14:40:44 +0000
ROA not before: Wed 11 Jan 2023 14:40:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28819
IP address blocks: 82.112.170.0/24 maxlen: 24
82.112.168.0/24 maxlen: 24
82.112.169.0/24 maxlen: 24
82.112.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:46:b9:bb:25:27:c8:2b:aa:60:50:2f:78:43:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jan 11 14:40:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ef717f6db31ce71f3021415c9aff2226adadc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:c6:24:e6:72:68:93:f2:14:ed:f5:62:dd:
8e:47:d8:81:41:ae:6f:1f:84:21:45:11:8c:46:cc:
fa:d1:b6:22:95:36:d0:15:08:29:7b:ff:53:1b:4f:
1f:e9:36:d5:18:23:f7:de:d3:9c:ac:0c:ed:40:d2:
a4:53:f1:82:ae:ea:24:3d:11:67:6f:f1:9b:16:76:
65:7f:3b:9b:82:42:d5:f5:ca:49:56:b4:d8:17:03:
3f:01:1f:bc:46:67:8d:1e:cf:1f:3c:76:f7:b5:bd:
3f:12:e3:7d:48:93:c7:60:49:a0:2a:5b:f5:99:fa:
d0:ef:a6:e6:ba:3e:8d:56:44:55:12:50:a6:69:27:
dd:95:57:97:05:62:e4:ef:73:b9:11:f4:5b:f6:8a:
b7:4b:be:d5:da:1a:60:6c:9c:45:ca:ce:ba:38:73:
85:0a:cc:cc:d6:fe:31:45:df:ff:06:ed:24:36:7e:
a3:d2:e1:55:32:26:b8:7a:bf:85:08:59:f6:cd:31:
d3:56:3b:52:66:b0:18:62:e9:c0:9c:cd:f4:5d:cd:
30:ac:c8:88:3f:df:a0:2d:b8:80:67:d9:12:e8:10:
ab:9a:14:ce:b1:58:a2:5f:17:4d:51:07:2e:0c:e9:
cf:3c:83:00:db:04:03:77:34:96:5f:0a:f0:e8:ff:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:71:7F:6D:B3:1C:E7:1F:30:21:41:5C:9A:FF:22:26:AD:AD:C3
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/Eu9xf22zHOcfMCFBXJr_IiatrcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.168.0-82.112.170.255
82.112.172.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0f:24:7a:92:5a:54:ff:10:5b:c4:b1:88:60:8c:cb:ce:c0:
ea:e0:34:83:e2:da:9e:e7:45:26:48:9e:07:19:59:60:ee:b0:
c1:58:b3:31:8f:a9:4a:07:97:ce:69:fb:ff:8a:4c:1e:2d:8a:
c3:91:2c:93:37:ac:c4:59:83:88:61:e6:c8:fe:c8:ce:72:fc:
7d:0c:79:6f:c1:af:aa:3b:33:4a:75:e1:f9:3b:26:cc:4e:8f:
19:68:0c:a9:64:1d:48:d4:e8:45:a8:f3:73:66:13:a4:09:b9:
d9:fa:0f:7a:56:86:05:40:f9:ca:06:25:46:9b:39:30:a9:0a:
ca:90:10:1e:8b:8c:65:1f:84:f6:63:86:47:5a:a7:ab:bf:27:
98:f4:c0:34:5b:19:bf:70:a3:1a:9b:c5:41:72:2b:56:96:99:
c4:7f:bb:49:2e:f2:c9:b3:6f:2f:b1:98:c0:5f:18:7e:24:39:
2e:81:4c:84:62:c7:74:92:75:0f:1f:d5:8b:65:35:af:d6:78:
d7:b9:dd:e1:15:4a:d8:6c:3e:5c:f0:b0:0b:e3:ee:65:12:48:
8d:2c:d0:a1:e9:04:65:f0:81:8b:64:f8:f3:0c:d3:b6:2e:e8:
14:e3:eb:16:e4:6f:46:c8:c7:c0:d9:1d:6a:d9:ab:01:64:02:
75:f6:f8:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:01 2024 by rpki-client on console-ams.rpki-client.org