Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Ae52iLrfyOQX5UfrygVTmAoefW8.roa
File: Ae52iLrfyOQX5UfrygVTmAoefW8.roa (raw, json)
Hash identifier: 281NYO1AlK5vbtpHGW5ueUq0q/A2WvcaeIXs0cuRuTI=
Subject key identifier: 01:EE:76:88:BA:DF:C8:E4:17:E5:47:EB:CA:05:53:98:0A:1E:7D:6F
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018BA94ED7C94090F79C06D1951463227AD1
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Ae52iLrfyOQX5UfrygVTmAoefW8.roa
Signing time: Tue 07 Nov 2023 10:23:18 +0000
ROA not before: Tue 07 Nov 2023 10:23:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 82.206.80.0/21 maxlen: 24
82.206.88.0/21 maxlen: 24
82.206.96.0/21 maxlen: 24
82.206.104.0/21 maxlen: 24
82.206.112.0/21 maxlen: 24
82.206.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 08:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:4e:d7:c9:40:90:f7:9c:06:d1:95:14:63:22:7a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Nov 7 10:23:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01ee7688badfc8e417e547ebca0553980a1e7d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:15:16:4d:be:cf:56:d2:ad:d1:36:2a:d8:
ca:2b:e4:f3:99:7b:d2:2a:77:f9:e4:50:4e:9a:bd:
b2:20:62:00:37:8b:89:ba:4e:b0:70:dc:6f:86:05:
39:4e:8d:73:e8:ca:4d:3f:cd:83:e1:0f:9f:f0:0b:
1b:f2:cc:62:51:8c:5e:0f:88:b3:4b:f3:a6:b1:cf:
0b:61:30:68:75:33:dd:0f:3e:95:f5:28:96:30:29:
1b:6d:ff:a6:66:44:2d:ad:a4:f6:1b:90:8c:25:21:
56:a3:6a:69:71:ce:17:08:be:6a:bf:23:77:67:bc:
f4:bb:83:91:28:56:e5:a3:0d:b3:cf:cd:4f:47:19:
cc:f4:93:5c:03:c6:b5:a4:04:ed:b1:d2:39:b8:47:
bf:ad:34:41:51:98:8c:b5:3e:73:5f:23:7c:bd:da:
69:df:e6:3f:8f:3e:9a:ee:09:42:76:7f:26:db:c7:
8c:3f:4c:6e:d3:00:91:75:9b:5c:de:32:97:de:eb:
7f:5b:1d:41:f5:88:a5:ba:18:04:f5:ab:fb:77:63:
93:5d:9a:ad:d9:98:32:c3:a5:50:85:b3:39:48:54:
3f:a4:cd:47:36:4a:ea:02:cc:41:77:f8:fe:8c:b8:
19:02:ab:0e:bc:1b:32:3a:fd:d7:b2:a1:0b:93:06:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EE:76:88:BA:DF:C8:E4:17:E5:47:EB:CA:05:53:98:0A:1E:7D:6F
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Ae52iLrfyOQX5UfrygVTmAoefW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.80.0-82.206.127.255
Signature Algorithm: sha256WithRSAEncryption
83:83:3e:74:78:7e:62:7d:dd:a2:97:10:25:e1:32:f3:a2:f1:
34:57:ff:c9:00:ae:d1:c1:1d:9b:69:51:13:d1:b5:ef:4b:53:
53:17:5e:89:4c:cc:b5:d3:5e:24:a8:e9:20:46:84:a2:ad:36:
d8:6f:32:72:a5:65:aa:6f:4c:0c:e8:67:00:50:fc:8a:5f:4b:
75:d8:ca:f4:ca:29:a0:3c:5b:66:3e:13:b7:0a:62:2f:12:d8:
ee:a1:6e:16:da:02:dc:6c:fa:c4:b6:4c:af:6e:b5:b9:05:db:
14:db:b1:cf:f6:9a:73:8d:50:25:3e:45:f2:50:f2:be:ba:ff:
4f:85:3c:dd:cf:16:37:aa:8d:98:31:bf:1e:9f:cc:82:f7:26:
f2:7c:13:86:38:d1:b9:30:a7:cf:4d:bd:a1:81:dd:96:df:49:
6b:c6:a8:79:34:d6:37:11:26:ba:3a:d9:86:43:7c:29:f6:a6:
ee:2b:5d:c6:f7:a9:56:df:69:ca:db:70:6e:c2:43:fc:26:38:
d4:e8:a5:82:90:74:bb:97:f2:e6:e5:86:43:d1:d9:a6:3c:d7:
0d:4c:cf:af:1f:53:8c:ce:f9:d7:a8:99:47:89:99:14:0d:99:
92:d9:de:97:d0:b8:6e:28:f3:99:17:8f:02:5f:12:1f:18:ff:
85:28:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org