Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Cr03Jk1-gLMWAel8abUQPDWHucE.roa
File: Cr03Jk1-gLMWAel8abUQPDWHucE.roa (raw, json)
Hash identifier: WhrQI9wD0fKiKGq6wuvWUTEQFBhCoMnidsVobbXlfE0=
Subject key identifier: 0A:BD:37:26:4D:7E:80:B3:16:01:E9:7C:69:B5:10:3C:35:87:B9:C1
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018CC2DB12E8D25A572C05505B0FDF57397D
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Cr03Jk1-gLMWAel8abUQPDWHucE.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 82.206.32.0/21 maxlen: 24
82.206.40.0/21 maxlen: 24
82.206.48.0/21 maxlen: 24
82.206.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 09:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:12:e8:d2:5a:57:2c:05:50:5b:0f:df:57:39:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0abd37264d7e80b31601e97c69b5103c3587b9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:49:96:ac:e6:ae:71:b5:b4:e3:b2:eb:fa:
0d:5c:a1:4b:a7:c8:bc:71:f3:ef:b8:12:af:97:b2:
c7:ae:56:1d:c3:9c:58:c6:26:c6:70:c1:f0:9b:db:
79:4f:d7:59:1c:24:7e:00:be:63:01:ea:7c:6d:96:
76:03:c5:41:fa:24:3f:c9:ad:f9:e6:f4:1b:03:35:
8f:53:dc:ec:7a:bd:f9:35:35:c6:89:de:7b:34:6f:
7f:fe:94:03:8c:b2:fd:07:af:98:d4:b7:2e:e3:f6:
61:86:d6:bf:e5:d9:9b:97:9b:64:1a:4f:0d:3d:15:
ba:18:35:5f:73:45:41:07:c4:30:55:37:ee:cf:92:
83:e6:dc:63:4f:b3:55:14:ab:95:ee:4e:d3:82:9e:
e4:73:70:83:a0:14:4e:d8:92:fd:65:4e:ab:9e:35:
07:5a:25:cc:35:d3:65:95:74:e5:05:1d:f3:10:1e:
e8:b6:0b:17:25:0b:90:df:df:82:d9:85:88:2d:1a:
f1:b3:50:7d:21:2e:c0:84:3d:5a:48:1a:36:cb:c5:
17:9f:63:4c:f2:56:c9:9d:55:ef:3b:ea:b9:e2:4e:
ad:73:6d:45:55:c7:df:67:b9:83:a6:43:eb:c9:a3:
30:68:44:fe:ca:35:dd:f6:b0:9b:6a:32:c2:7f:8e:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:37:26:4D:7E:80:B3:16:01:E9:7C:69:B5:10:3C:35:87:B9:C1
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Cr03Jk1-gLMWAel8abUQPDWHucE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.32.0/19
Signature Algorithm: sha256WithRSAEncryption
98:75:8a:58:b3:23:63:88:65:ea:a0:75:92:35:46:16:3e:ab:
6c:8f:95:63:dc:c8:96:93:89:5f:df:d4:ff:fc:52:f1:2b:2d:
34:34:a7:9f:e5:af:75:75:dd:49:be:f2:32:c6:69:d6:b4:4c:
78:0c:74:5b:22:53:ac:59:d1:7f:3d:c0:e6:49:60:eb:b1:fc:
4d:58:22:e8:30:e8:29:5c:c0:e8:01:42:ae:10:7a:83:ff:ce:
78:e4:90:28:79:3d:02:47:08:9b:f8:ee:c9:77:d7:7f:40:b2:
e2:46:22:ea:d3:a2:1b:7a:1a:f6:66:e3:e1:3c:b2:5a:5d:cd:
8f:d1:90:8c:5f:22:01:de:e4:4b:dd:f5:17:13:79:a1:1f:ba:
51:db:9d:f8:24:f9:fa:ca:52:64:ea:85:9e:8d:0d:c2:a9:c5:
8c:8a:a1:e1:34:3d:8c:24:bc:25:e0:ef:e4:83:0d:9e:80:88:
f7:6b:3e:d0:41:14:30:94:c2:99:78:12:bf:73:03:ca:5c:ed:
1d:1e:9b:27:20:27:5a:20:41:9c:28:db:ad:28:95:a0:a6:c1:
37:cc:3c:bc:3f:8e:50:9f:b1:d0:44:47:96:d2:19:3f:e9:13:
6f:bf:8d:b8:8f:53:be:29:06:fc:de:ca:c5:7a:11:55:1f:19:
14:03:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 13:50:32 2024 by rpki-client on console-fra.rpki-client.org