Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/27wEq6Lee-r21eJjau6ovl2jcmI.roa
File: 27wEq6Lee-r21eJjau6ovl2jcmI.roa (raw, json)
Hash identifier: rfr2rRvXBuRDTPdEyRJ/SViaf18b+6HxofsX4zU/TRE=
Subject key identifier: DB:BC:04:AB:A2:DE:7B:EA:F6:D5:E2:63:6A:EE:A8:BE:5D:A3:72:62
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018CE87F07023E53D804C53C1973705E9F10
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/27wEq6Lee-r21eJjau6ovl2jcmI.roa
Signing time: Mon 08 Jan 2024 09:54:48 +0000
ROA not before: Mon 08 Jan 2024 09:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21106
IP address blocks: 82.206.16.0/21 maxlen: 24
82.206.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 21:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:7f:07:02:3e:53:d8:04:c5:3c:19:73:70:5e:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 8 09:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbbc04aba2de7beaf6d5e2636aeea8be5da37262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:ad:5e:5a:4e:d2:b6:2b:51:29:35:c7:30:
f0:7f:8d:f1:fb:19:cd:20:33:36:0d:0b:1e:70:5d:
79:2b:24:16:1e:aa:58:a9:3f:36:6a:dd:17:a5:e4:
6d:2b:08:86:a1:24:62:ac:94:ce:87:31:33:0d:66:
b7:a9:dc:58:6a:80:2a:80:48:4e:38:5d:a5:13:1f:
f8:10:bf:4c:60:00:71:b4:52:cf:04:76:8a:d6:07:
df:ad:df:58:fa:3e:11:ed:d0:40:3a:c0:9a:34:0c:
4d:77:0e:b0:27:b8:20:29:37:8e:a8:c9:25:63:7c:
0e:f0:1e:f7:19:5c:bb:b9:82:be:e6:c6:f6:a9:93:
43:47:fb:3f:5b:58:f9:fa:1f:dc:52:08:9c:19:a0:
e2:9a:07:57:64:d1:21:15:90:a9:28:be:d0:e3:9a:
4f:55:8e:ec:99:f2:54:89:62:4d:60:b8:82:12:bd:
6e:d4:b3:a6:8e:9e:b0:c5:07:22:23:24:41:a5:dd:
33:eb:ee:7c:38:c1:bf:5b:b6:ce:8d:d7:4a:bc:6e:
27:86:0d:d5:71:26:7c:90:7a:87:56:92:a7:c2:01:
08:d3:ef:0e:ee:04:f0:f2:77:c4:eb:5b:28:55:ee:
49:16:84:0e:e5:bb:b1:ab:9a:8c:9c:df:98:22:6f:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:04:AB:A2:DE:7B:EA:F6:D5:E2:63:6A:EE:A8:BE:5D:A3:72:62
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/27wEq6Lee-r21eJjau6ovl2jcmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:6f:58:15:aa:93:1a:38:e6:6e:08:18:6d:57:ee:0e:fd:e4:
11:80:c8:09:32:e0:9c:6a:3a:80:e0:7e:06:4e:58:16:9f:43:
df:3f:7b:9c:52:4c:ab:53:12:4a:9f:4d:fe:6d:ff:8e:10:95:
f1:ea:d2:71:2f:77:8c:44:a6:af:8f:4f:9a:c6:37:bd:e0:07:
7b:af:38:36:83:31:8c:67:7d:86:5d:13:b2:09:b8:2e:6d:92:
04:b0:70:7c:5a:fe:54:40:fd:a3:f1:a1:74:eb:10:76:c3:69:
4c:a0:e4:21:66:4c:f8:33:a2:8d:c3:0a:4b:f5:fd:f2:c3:d6:
fc:73:eb:83:23:e7:04:a1:28:1f:a6:3a:fe:0c:2d:5f:33:e8:
30:38:69:8f:13:c0:d9:cf:23:29:3f:9c:4d:67:3a:27:46:29:
b6:ec:f5:c6:02:80:a1:a7:02:8d:6f:55:ee:1b:a7:86:93:fc:
48:fb:9e:b7:3f:98:74:28:df:2e:ab:86:ed:03:72:dc:c3:7e:
dc:e4:1a:c6:f2:99:ee:81:00:85:28:90:21:f5:24:85:9d:93:
75:c7:57:6c:96:d7:e4:02:79:46:0a:65:cf:c3:96:57:96:56:
3a:a2:fd:36:b8:5e:c6:ad:bc:ed:c6:bb:ff:5a:ab:ee:52:85:
cf:52:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 22:57:44 2024 by rpki-client on console-fra.rpki-client.org