Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/518NpPh7F1P7WO-njdIf6HP7jrg.roa
File: 518NpPh7F1P7WO-njdIf6HP7jrg.roa (raw, json)
Hash identifier: fTMKpxcawjIaSkO9U9o84pk5J+Iwqmpe67BZvaLnZfc=
Subject key identifier: E7:5F:0D:A4:F8:7B:17:53:FB:58:EF:A7:8D:D2:1F:E8:73:FB:8E:B8
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018BD821E38A966B8A6501AAE7647FD4A992
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/518NpPh7F1P7WO-njdIf6HP7jrg.roa
Signing time: Thu 16 Nov 2023 12:36:21 +0000
ROA not before: Thu 16 Nov 2023 12:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21106
IP address blocks: 82.206.0.0/21 maxlen: 24
82.206.8.0/21 maxlen: 24
82.206.16.0/21 maxlen: 24
82.206.22.0/23 maxlen: 24
82.206.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 13:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:21:e3:8a:96:6b:8a:65:01:aa:e7:64:7f:d4:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Nov 16 12:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e75f0da4f87b1753fb58efa78dd21fe873fb8eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:a5:0e:42:41:26:c8:93:08:70:06:15:11:
d1:9c:84:19:bf:fc:23:cd:5f:40:f6:98:c4:db:bc:
29:4b:c6:48:4d:7c:7b:b3:c9:79:4f:01:35:c9:b6:
fd:ab:ea:15:e5:fb:61:48:21:02:84:90:a1:00:f3:
1a:66:b1:b6:f7:29:48:ee:89:48:b1:56:3e:82:0f:
62:27:5b:1e:a0:4a:fe:74:41:9d:a9:17:1a:77:63:
c9:64:f0:80:6a:9b:ff:9b:a1:36:49:d6:a2:7b:e7:
b9:5e:5d:f4:23:db:67:68:46:45:fb:79:91:f5:90:
81:22:d3:25:a1:e8:7a:28:f6:85:34:c8:5b:52:09:
e9:f5:61:56:54:76:5a:7c:fe:9c:dc:c5:24:7b:be:
bb:79:96:fa:22:d8:8d:3d:12:88:e6:46:33:63:e0:
8c:06:4c:1b:97:48:36:ee:68:9e:bd:dd:eb:49:a8:
39:92:51:48:ca:eb:d2:2d:66:05:c6:8b:2e:aa:04:
88:d8:ac:6d:1a:f2:a8:db:1d:84:57:f6:95:8d:68:
05:a5:82:f6:59:c5:14:61:4a:02:b5:6e:fc:9e:4a:
94:85:86:d1:14:6f:fb:4e:03:2a:eb:ac:3f:49:dd:
50:40:96:3f:a4:50:d8:a3:e0:26:eb:2a:b7:41:91:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:0D:A4:F8:7B:17:53:FB:58:EF:A7:8D:D2:1F:E8:73:FB:8E:B8
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/518NpPh7F1P7WO-njdIf6HP7jrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.0.0/19
Signature Algorithm: sha256WithRSAEncryption
63:92:f2:25:b3:4d:52:b6:ae:9d:8d:67:fd:d7:00:bc:dc:f0:
f3:6a:7b:da:b7:a4:e6:cd:15:04:29:86:5e:82:06:14:40:c4:
e4:d0:15:3d:85:d1:8e:d9:eb:9b:29:12:77:61:39:77:91:f0:
c2:3c:7e:c2:79:7b:5a:2c:5a:df:42:00:0e:d2:32:8f:4d:ae:
ab:e9:1d:aa:28:05:89:93:a6:49:4e:14:e7:6b:66:63:a2:d2:
63:52:c1:f7:ea:6d:b1:cc:77:37:ec:94:bd:4f:bf:ee:c4:33:
1d:e2:c7:05:1b:5d:2e:d9:89:49:0e:ff:00:dd:5a:af:60:8d:
55:af:36:2e:9c:e1:fa:7b:f4:d4:11:2d:e8:d7:97:de:19:7c:
a5:0a:06:ee:dd:53:70:67:cc:7b:4d:62:22:8b:d7:af:ac:1c:
60:25:2f:18:67:49:00:30:af:1b:fd:51:66:a2:02:53:1e:b3:
df:6f:99:3a:27:01:5f:27:ea:e0:eb:bf:ef:42:c0:c8:b6:9d:
e3:91:62:ae:07:0b:cd:44:7d:40:0a:4e:b3:23:3c:af:3f:25:
ce:6e:47:09:64:36:3e:8b:47:ea:c9:91:91:93:07:08:59:a2:
78:c8:f1:01:ed:44:13:ba:74:48:ab:1e:d2:1e:21:d3:c8:6d:
1b:0f:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org