Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/j07NsE9m4iiipiPdNk29TOlHJnc.roa
File: j07NsE9m4iiipiPdNk29TOlHJnc.roa (raw, json)
Hash identifier: SlaYd3ormbXYMzc5NaKjbNHBLhU5IHkXrBMDfBqYnqk=
Subject key identifier: 8F:4E:CD:B0:4F:66:E2:28:A2:A6:23:DD:36:4D:BD:4C:E9:47:26:77
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14F42491D20B9FA6397993C36FDAEE
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/j07NsE9m4iiipiPdNk29TOlHJnc.roa
Signing time: Sun 01 Jan 2023 20:45:22 +0000
ROA not before: Sun 01 Jan 2023 20:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204086
IP address blocks: 82.160.86.0/23 maxlen: 23
82.160.138.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f4:24:91:d2:0b:9f:a6:39:79:93:c3:6f:da:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4ecdb04f66e228a2a623dd364dbd4ce9472677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:99:88:41:c4:d2:53:1c:99:c2:11:79:56:
ac:ca:98:03:5c:c0:7c:59:1c:a5:22:c5:25:02:22:
56:b2:44:34:ef:69:a3:7c:4b:49:c3:aa:88:1a:a8:
69:29:cb:2e:a3:1a:a3:bf:0c:b3:20:56:1d:47:7d:
61:d3:67:c8:78:f6:f5:e7:d2:0f:3d:cc:3a:77:8d:
6e:58:69:91:28:77:77:5b:70:41:2f:8d:ef:4d:64:
87:cd:88:0d:0d:59:63:a0:f3:63:73:91:0e:b3:f3:
6c:ba:40:a8:8a:5a:b8:e3:77:7d:cc:96:87:81:38:
09:9f:2a:1d:4e:92:9b:1f:a2:c4:bc:44:dc:17:71:
ca:99:5f:72:0b:67:4c:85:a8:a0:e3:db:5c:72:4f:
30:2d:18:22:b8:13:82:1d:11:7b:e2:f8:79:c5:d7:
1c:89:92:ef:0e:43:91:37:d7:ad:d8:69:c2:23:63:
f9:35:fe:ec:52:63:34:ea:33:51:cf:44:01:cc:9d:
56:55:0e:a7:fc:59:3c:a0:9b:ef:99:60:3d:25:89:
4e:47:ff:8f:15:29:55:6c:2c:8a:22:0f:1b:e5:8e:
8a:31:c1:7c:4a:2f:a0:f0:a9:ce:bc:9d:f5:ae:5f:
a5:fc:6a:7c:b0:40:05:3e:59:f7:de:66:e1:72:c7:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:CD:B0:4F:66:E2:28:A2:A6:23:DD:36:4D:BD:4C:E9:47:26:77
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/j07NsE9m4iiipiPdNk29TOlHJnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.86.0/23
82.160.138.0/23
Signature Algorithm: sha256WithRSAEncryption
12:ed:c2:a9:ef:29:84:df:7a:f6:c3:27:df:43:d6:0d:11:8b:
85:b7:ce:2b:03:a8:3f:2d:fa:f9:84:3c:3d:79:a1:0a:e7:85:
7f:98:f6:ba:ca:f8:26:56:59:1f:2b:dc:d9:1f:8a:c5:c0:56:
9b:82:73:a4:e1:e3:5f:7b:74:83:09:f6:72:7c:c9:ee:11:d5:
15:dc:33:88:27:87:fb:8f:d3:19:5a:43:97:5b:d1:ac:c1:8b:
f1:0c:fc:10:f9:35:17:62:08:f3:74:25:c1:c1:55:a6:36:85:
a8:e8:7d:48:b5:45:7f:98:09:b4:9c:73:1d:fe:df:e6:50:28:
5b:ea:65:ca:8b:73:db:76:05:fb:44:c7:64:fa:d8:00:1f:70:
ad:a6:f0:a2:16:6b:f2:cc:29:8d:d7:04:e5:ca:c4:7f:d8:b3:
44:04:64:4b:1f:20:70:17:7d:ff:77:55:9e:10:b4:3d:f9:5f:
49:82:73:22:2b:05:ed:89:bc:4f:da:eb:aa:9d:50:8d:a0:08:
bb:93:93:a8:7a:06:c3:41:7d:2c:19:b3:b3:c6:26:84:6a:ee:
75:9c:6f:05:2f:43:61:57:07:cf:14:d7:17:95:d2:58:35:a4:
b2:81:46:f1:6a:01:79:fe:87:ae:5f:59:ae:5c:59:4c:03:19:
ab:ff:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:21 2024 by rpki-client on console-fra.rpki-client.org