Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/fBcAyoK92ha4QfrS2ggVLyxf9M0.roa
File: fBcAyoK92ha4QfrS2ggVLyxf9M0.roa (raw, json)
Hash identifier: 8ioemloWBFVDqaylSQkSWB+09psEYK/TeEE1D72lyoM=
Subject key identifier: 7C:17:00:CA:82:BD:DA:16:B8:41:FA:D2:DA:08:15:2F:2C:5F:F4:CD
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B935FBBF6D1A3FA99E21BD91718E27A
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/fBcAyoK92ha4QfrS2ggVLyxf9M0.roa
Signing time: Sun 01 Jan 2023 04:24:58 +0000
ROA not before: Sun 01 Jan 2023 04:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27399
IP address blocks: 82.98.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:5f:bb:f6:d1:a3:fa:99:e2:1b:d9:17:18:e2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c1700ca82bdda16b841fad2da08152f2c5ff4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:af:98:84:d9:cb:fb:91:01:85:bd:25:f3:
dc:3b:a7:75:39:ee:48:c2:96:f8:18:a8:68:ce:90:
c2:a9:ad:cb:67:77:15:3e:1f:40:7b:90:13:c7:7a:
d9:07:53:27:b9:a2:94:cb:f2:17:af:df:92:fa:9f:
23:23:3c:74:e6:19:f7:be:ac:53:4f:64:83:93:ba:
87:25:e6:58:4d:02:2b:a0:b1:dc:64:d2:10:82:0c:
e2:bd:7c:dd:a5:fc:60:4c:91:e7:4d:17:d9:b3:08:
78:58:43:a1:1b:0c:aa:01:18:74:ad:cb:09:d6:68:
49:6b:62:83:f0:cf:9b:ca:b5:63:81:b9:7b:13:96:
0f:8d:96:19:7a:15:ae:bc:29:c9:25:94:95:ea:4d:
5c:9d:f7:14:63:57:fc:39:55:eb:b9:31:9d:0e:55:
ea:1c:22:93:c4:31:ce:80:57:f2:4a:31:cb:01:1c:
b0:63:5b:f5:33:09:b3:d6:2e:7f:44:a6:cb:ac:d0:
68:01:79:9a:c1:18:77:30:e4:55:ff:dc:e7:05:24:
a5:e6:e8:e4:9e:95:79:bd:41:46:d2:10:7e:30:cb:
2d:cb:1b:38:b4:a8:a6:59:92:e4:e8:bb:96:0b:0c:
60:63:ef:b3:8a:e0:23:d1:62:9d:ca:ce:4e:7e:bd:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:17:00:CA:82:BD:DA:16:B8:41:FA:D2:DA:08:15:2F:2C:5F:F4:CD
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/fBcAyoK92ha4QfrS2ggVLyxf9M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.194.0/24
Signature Algorithm: sha256WithRSAEncryption
39:46:0f:12:80:da:e5:2c:15:6c:fc:8e:09:e9:b5:e3:32:a9:
f9:00:d3:3b:50:a0:9d:ef:5e:7c:23:bd:a7:c0:8b:a4:2b:36:
18:21:78:4f:f4:b4:d5:d4:49:f3:51:27:d3:50:7c:d6:d0:de:
31:3f:dd:f1:2d:48:3e:35:6d:f3:4d:e1:8a:2b:ce:28:e0:41:
1d:56:2e:43:88:db:e9:aa:b1:af:74:a4:a2:1e:cd:ba:a4:54:
c4:4d:85:d0:7b:da:cb:d5:80:f2:4b:00:d9:a9:74:6c:68:ab:
7e:54:3f:7e:16:29:11:fd:c2:6e:8a:78:90:24:ec:26:71:cc:
73:d3:c7:bf:f2:6b:f5:ac:f9:c1:ec:94:e4:e5:a9:34:5a:b3:
7f:1f:5c:ac:f0:02:7f:43:c1:cd:e8:34:23:f7:6c:40:a4:32:
e3:ee:41:c5:cf:11:3e:ae:fa:7e:96:e9:7d:3c:88:d0:8b:f4:
85:eb:4d:d9:92:8d:fe:03:74:da:c9:cd:a7:5a:36:56:ae:96:
ef:08:35:14:85:d8:7e:98:34:44:18:61:74:91:26:23:7d:2d:
dd:8a:08:99:36:84:f3:da:85:d9:fa:47:42:41:f9:4c:8a:75:
af:bb:7e:20:7f:99:d0:bc:bb:0b:9f:e6:4c:7a:ff:c6:09:65:
96:6b:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:46 2024 by rpki-client on console-fra.rpki-client.org