Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/4WyCo7_TBHLA42ae1e5p_l_vduo.roa
File: 4WyCo7_TBHLA42ae1e5p_l_vduo.roa (raw, json)
Hash identifier: 91adVf4XJ3uM8jFvExJSw7luobK0f3tCXmaMzpi2J3M=
Subject key identifier: E1:6C:82:A3:BF:D3:04:72:C0:E3:66:9E:D5:EE:69:FE:5F:EF:76:EA
Certificate issuer: /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial: 01856E78E08F6E9010566949C63C9EC73E37
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/4WyCo7_TBHLA42ae1e5p_l_vduo.roa
Signing time: Sun 01 Jan 2023 17:54:53 +0000
ROA not before: Sun 01 Jan 2023 17:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12319
IP address blocks: 82.116.160.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:e0:8f:6e:90:10:56:69:49:c6:3c:9e:c7:3e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Validity
Not Before: Jan 1 17:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e16c82a3bfd30472c0e3669ed5ee69fe5fef76ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fc:a3:83:ae:cc:e9:28:dd:45:3e:b4:74:78:
c4:97:08:ed:39:67:17:49:ec:34:86:f4:2f:a7:e6:
09:fd:c4:9b:cd:cd:9e:f9:16:c4:39:74:37:c1:6a:
87:c4:8c:c6:70:c9:53:27:ac:9c:60:15:e2:56:ee:
e0:36:60:54:1e:42:08:0b:bc:c5:5b:e9:f2:e4:46:
09:a1:1e:f3:b2:82:f1:7d:c6:13:da:cd:53:6b:fe:
24:e7:3c:98:08:cc:ae:e4:c4:fb:a5:3c:20:bf:23:
76:71:da:5e:f7:89:d2:3a:4d:68:8f:80:9f:de:a6:
5b:46:33:56:4f:34:a2:04:ac:93:39:a5:50:27:17:
36:07:d8:9e:b0:c8:ee:52:4b:23:38:db:71:24:8a:
2e:63:cd:38:7d:33:f9:64:39:d5:8c:83:c8:c3:7e:
76:73:53:16:8a:56:c2:17:f2:94:89:0f:1b:8c:ae:
d0:a5:72:4c:a8:b5:24:83:25:c7:f7:eb:41:52:7f:
46:15:55:02:ea:14:c0:e9:ea:90:00:64:8d:b3:02:
40:b5:26:03:e2:5b:bf:57:da:83:6a:f5:08:6e:ca:
e9:2c:d7:cd:f3:eb:da:1f:c7:18:dd:d5:8c:ef:cd:
ec:49:be:0f:b5:64:65:2c:ae:bf:0e:f7:79:5b:52:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6C:82:A3:BF:D3:04:72:C0:E3:66:9E:D5:EE:69:FE:5F:EF:76:EA
X509v3 Authority Key Identifier:
keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/4WyCo7_TBHLA42ae1e5p_l_vduo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:a1:e1:43:9d:47:01:e3:0c:9e:20:3e:38:e8:43:7d:88:91:
76:07:f0:9f:09:3d:32:46:02:53:6f:b8:77:62:c3:2b:08:f6:
bd:b1:8a:f2:8b:d5:06:3c:47:8f:25:4f:33:3c:f9:c2:06:4e:
b2:92:75:55:1d:72:a0:b4:0f:4e:7c:c6:05:43:d4:c3:e5:ea:
fe:19:a4:30:7b:70:20:85:41:06:60:0e:d4:7b:d4:eb:ee:d9:
9e:c5:37:bb:8c:e4:ee:86:4d:9d:4f:66:55:1e:02:ff:a0:c3:
e8:a1:74:36:6d:9b:d1:97:ec:7f:56:a2:d4:54:cd:c2:f6:ad:
89:75:bd:68:02:35:9b:af:47:d3:e9:16:63:d5:29:dc:cb:f0:
14:23:30:fc:2e:f9:7b:3f:3f:d9:5d:61:2e:64:8e:fe:6a:c2:
c2:3f:db:6a:1c:ed:b2:37:39:be:26:32:78:84:25:fa:93:07:
70:1e:e9:17:6a:48:df:3b:be:5e:65:2f:b6:30:44:e3:31:cd:
af:8a:01:28:8b:51:86:35:f3:3a:bc:6b:93:f1:b7:96:30:5e:
7e:6b:00:a5:66:05:58:17:7b:00:ef:ae:32:b2:0b:29:65:01:
ed:6b:d6:e9:e6:cf:a9:8e:dc:d7:e7:65:ed:2d:71:4a:ab:2c:
d6:e3:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:16 2024 by rpki-client on console-fra.rpki-client.org