Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/dtADPWMp9ALcXlH9HHc6-EL--fA.roa
File: dtADPWMp9ALcXlH9HHc6-EL--fA.roa (raw, json)
Hash identifier: TVQ+UpEsmvqv3orKqInLnqyAQhUxnHK+3yLVwIRzEPo=
Subject key identifier: 76:D0:03:3D:63:29:F4:02:DC:5E:51:FD:1C:77:3A:F8:42:FE:F9:F0
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 01882D9D75DE62B0A478F2F931017A9518CE
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/dtADPWMp9ALcXlH9HHc6-EL--fA.roa
Signing time: Thu 18 May 2023 06:47:54 +0000
ROA not before: Thu 18 May 2023 06:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 82.116.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 05:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:9d:75:de:62:b0:a4:78:f2:f9:31:01:7a:95:18:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: May 18 06:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76d0033d6329f402dc5e51fd1c773af842fef9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:9a:de:dd:8c:b4:1a:4c:ae:3d:56:55:9d:
be:e0:e7:08:18:c4:c7:be:83:53:85:b0:dd:c4:2d:
18:d0:9a:bb:f5:93:10:73:00:0e:93:1b:bd:dd:73:
f2:c1:f3:44:a3:45:fb:41:41:eb:29:a6:fa:1d:6f:
0a:30:90:85:02:80:0a:45:4f:25:4e:2b:1b:55:71:
fa:4e:be:30:13:0c:39:c4:ea:8b:4d:9b:43:1a:0b:
0f:ea:80:80:d7:3c:1c:04:b0:75:2d:21:83:02:78:
33:7b:5f:09:e1:db:0d:2b:e3:cf:66:a1:69:7e:d8:
93:cc:a6:de:35:93:41:aa:8f:fd:df:29:e7:e5:b3:
29:0f:75:dc:24:24:7c:f2:b9:16:81:4e:36:7f:30:
87:78:00:bf:14:2b:02:4f:23:81:0f:12:50:c2:3f:
9d:6f:be:e0:28:74:c8:5d:21:b0:62:a2:ff:61:27:
28:24:50:6a:82:a4:84:c4:3f:10:b7:0e:b2:ed:72:
54:51:4f:35:a2:3e:70:f8:c1:67:2a:f2:15:3e:99:
24:f2:78:af:dd:4c:a2:7b:ca:ff:9c:ed:ad:b8:a7:
2e:a8:91:7a:9d:50:d4:b4:a6:22:98:a9:24:9e:34:
0e:e6:ad:21:6c:75:60:91:e3:61:8e:58:c0:8c:18:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D0:03:3D:63:29:F4:02:DC:5E:51:FD:1C:77:3A:F8:42:FE:F9:F0
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/dtADPWMp9ALcXlH9HHc6-EL--fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.159.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f5:c7:d1:6a:8f:ec:8e:62:c6:d7:b8:e4:f5:53:55:93:f8:
c6:10:05:0c:a6:6f:61:20:68:71:d1:25:ec:41:91:d8:4b:4f:
75:86:4f:6f:cf:cf:e0:08:4d:f3:d7:b1:eb:82:4c:5b:c2:f5:
5c:f2:ab:22:97:c0:db:00:da:e1:fa:2c:e1:b2:57:59:9a:98:
cc:2c:b4:9a:c0:95:11:f0:27:9f:03:dc:cc:51:5d:d0:3d:44:
07:fa:00:f4:c8:15:46:7d:b8:f4:31:5a:6c:9a:f9:2a:0f:39:
f7:ae:86:2f:71:a7:5e:c7:c7:ea:db:ad:cf:3e:43:a2:e0:26:
36:92:b7:b0:8b:6c:d7:36:a0:9d:2f:ae:2f:4a:d7:d5:b9:12:
32:27:58:dc:a1:b7:d3:0f:c0:0b:11:f4:50:91:2d:1d:37:df:
1a:de:e3:9c:6e:f2:92:2d:81:08:6e:16:5c:71:50:67:46:f2:
cf:cd:e7:11:5c:cd:62:18:5c:ad:d4:61:5d:6f:73:18:d9:ab:
47:a1:4b:2f:4d:ca:e3:e8:ad:97:48:9a:b4:c4:00:61:36:e9:
3d:79:13:80:90:1f:ec:fe:2f:4c:45:52:52:8d:f9:a3:85:b0:
5b:6b:63:7e:2a:87:05:c3:c7:09:31:f5:0e:db:38:82:60:92:
c9:81:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:10 2024 by rpki-client on console-ams.rpki-client.org