Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/tp9KtSadAMXbVjrmQBiMjwnaZJc.roa
File: tp9KtSadAMXbVjrmQBiMjwnaZJc.roa (raw, json)
Hash identifier: J2UhWE1SikM3RAzUZyk62W9qqX7hPtvQ8JAHqSmsS4Q=
Subject key identifier: B6:9F:4A:B5:26:9D:00:C5:DB:56:3A:E6:40:18:8C:8F:09:DA:64:97
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 01882D9D768FB0D9651EC5A39AFAFFC5F7AB
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/tp9KtSadAMXbVjrmQBiMjwnaZJc.roa
Signing time: Thu 18 May 2023 06:47:54 +0000
ROA not before: Thu 18 May 2023 06:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 82.116.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:9d:76:8f:b0:d9:65:1e:c5:a3:9a:fa:ff:c5:f7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: May 18 06:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b69f4ab5269d00c5db563ae640188c8f09da6497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:f6:68:77:0b:e4:f0:3e:f0:1c:f8:89:55:
3a:d8:66:9b:01:bd:5c:43:68:8b:4c:5d:78:ce:ae:
43:15:91:ba:b9:e6:34:fc:b9:82:1a:4c:a5:73:1e:
c8:c6:9e:e1:46:23:ad:91:36:1e:a3:d5:50:95:4f:
c8:4c:9d:87:c8:ed:82:66:4c:c8:73:0f:9a:b1:9e:
1c:1c:32:ee:13:3f:20:aa:29:ff:cf:b3:af:5d:97:
0e:ad:b9:b2:8a:14:c6:f5:a3:8b:87:60:9d:5d:78:
cd:50:4c:53:5f:29:8c:9b:7a:fe:b0:36:c0:8d:9e:
a4:bc:7f:25:e9:e6:b5:bb:5c:d5:d3:94:6e:98:2d:
4b:23:51:13:11:99:d3:6f:c6:3c:67:d1:fa:77:4b:
79:6d:2c:75:45:a7:5c:5a:6d:c1:ed:73:b9:e8:2a:
bc:12:e6:83:9d:00:45:6c:7d:0f:7e:eb:a9:b1:15:
0d:8a:d6:ed:72:dd:89:40:6d:b8:d5:29:af:8e:96:
b3:91:05:a2:22:fb:3c:7e:a7:4d:47:71:13:28:2d:
b0:08:1f:df:8d:a9:21:60:6c:c3:4d:e7:24:54:6c:
70:a2:9a:0e:74:fe:12:36:a7:8f:65:43:f4:3a:27:
bc:a0:cf:55:9a:56:34:7c:ee:df:32:84:4c:14:f9:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9F:4A:B5:26:9D:00:C5:DB:56:3A:E6:40:18:8C:8F:09:DA:64:97
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/tp9KtSadAMXbVjrmQBiMjwnaZJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.159.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ce:e7:78:ca:9e:c3:3d:6c:a3:a2:13:32:5c:94:0e:df:ee:
19:88:cd:e3:92:b7:b5:b1:80:5b:83:ce:50:67:e2:78:be:62:
f4:83:ea:fd:78:d6:d9:f5:7f:6a:c1:b6:ca:c5:e6:8b:72:4d:
05:8b:ef:77:d7:b6:63:1c:df:c9:bc:3e:a8:d0:c7:03:d6:ab:
41:50:ea:ed:eb:8e:f3:e8:8f:f1:dd:ae:98:54:38:de:13:40:
38:76:c3:c2:9e:50:be:1b:7a:bc:d9:dc:17:7f:53:31:19:45:
26:f8:2e:41:ab:1e:bb:84:bf:ac:87:19:21:bb:b7:e3:83:61:
50:56:f1:4c:a6:1b:4e:03:46:80:bd:34:4a:4b:56:d7:b3:2e:
b9:4c:8a:f3:77:c0:eb:a2:7b:ed:c3:cc:6f:76:6f:97:94:d1:
a4:aa:03:3c:4c:a8:2b:13:ea:0a:f6:e4:ab:ae:ae:02:10:b5:
56:e3:0b:71:b3:a2:1f:e5:67:1d:9a:ed:bc:dd:bb:50:89:50:
ff:cb:35:de:a2:b7:b4:3a:27:68:ee:b0:4c:8c:c8:0a:83:49:
ee:c0:c0:66:b0:61:ea:0b:55:81:9c:ec:1f:69:a6:cf:a7:09:
e2:7e:2f:19:2e:63:d3:25:42:59:ed:20:8f:ec:7a:a9:61:78:
e4:c2:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 06:16:23 2023 by rpki-client on console-ams.rpki-client.org