Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/TOirfvn_pEq5LWB6ojBZu4XMlY0.roa
File: TOirfvn_pEq5LWB6ojBZu4XMlY0.roa (raw, json)
Hash identifier: K/zcH+rYNgRCwYlvNyIc5kLm9RiAg/NgmTrdrplJ5dQ=
Subject key identifier: 4C:E8:AB:7E:F9:FF:A4:4A:B9:2D:60:7A:A2:30:59:BB:85:CC:95:8D
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018C8B8F86602A8F502788E693D2CF2551AD
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/TOirfvn_pEq5LWB6ojBZu4XMlY0.roa
Signing time: Thu 21 Dec 2023 08:48:08 +0000
ROA not before: Thu 21 Dec 2023 08:48:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.206.56.0/21 maxlen: 24
82.206.64.0/21 maxlen: 24
82.206.72.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:8f:86:60:2a:8f:50:27:88:e6:93:d2:cf:25:51:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Dec 21 08:48:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ce8ab7ef9ffa44ab92d607aa23059bb85cc958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:72:f1:ed:48:a5:f0:3e:65:8f:a8:3a:b2:
62:5f:19:f9:de:f8:97:05:7c:02:df:86:76:fe:50:
f2:54:8a:7a:e9:11:72:ec:f9:90:90:4b:40:3a:bb:
86:a1:c2:48:e1:86:84:82:62:7d:ad:d1:08:91:83:
5f:a5:f3:cc:4d:62:e9:11:08:04:93:78:56:61:9e:
e4:8b:ff:b4:d7:8d:e6:b3:91:2a:a4:97:7b:13:34:
e7:e4:f2:76:23:8a:4a:15:7c:46:9e:36:b2:dc:6f:
1d:87:e1:11:9c:bd:19:63:1c:28:da:e6:48:cf:8f:
2f:49:52:82:06:db:30:37:9a:ae:99:6a:85:cc:4a:
e3:9f:bc:c0:84:22:64:36:97:f5:0b:58:1b:0f:ab:
90:4a:66:57:d1:78:61:83:21:bf:0f:91:aa:f9:cd:
fd:19:cc:40:b8:6f:c8:77:ab:a4:43:be:f9:b5:c2:
f5:99:85:83:a0:bb:06:bb:46:a9:bd:6a:86:c2:e3:
52:82:21:b5:8e:e6:75:1b:6b:d6:fc:45:da:62:4c:
8b:7d:7b:b3:f9:40:8c:32:e2:0c:cb:bb:ef:04:bd:
65:4a:c6:ab:ab:b8:f2:20:d9:bf:5d:b9:b0:1a:d2:
6f:54:90:bb:2a:bb:1a:cb:d3:de:df:12:59:03:fa:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:AB:7E:F9:FF:A4:4A:B9:2D:60:7A:A2:30:59:BB:85:CC:95:8D
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/TOirfvn_pEq5LWB6ojBZu4XMlY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.56.0-82.206.79.255
Signature Algorithm: sha256WithRSAEncryption
6d:01:e2:7b:2b:27:f7:9a:98:3f:54:a9:81:f7:15:57:7a:62:
6a:67:0d:91:f4:a4:d4:c6:1e:3c:39:a1:74:0b:19:79:5c:c3:
15:11:bf:56:43:cc:16:37:a3:a8:be:0d:4d:df:4f:a6:e6:47:
59:b4:3b:d4:3e:8e:22:c2:7f:fa:ea:f7:c8:66:35:cc:c9:23:
af:5d:44:10:dd:b6:69:0b:05:63:72:77:f1:68:bc:1d:85:2f:
d0:78:e4:2a:2d:c7:94:11:4e:a2:83:f3:8f:bb:fc:ff:6f:ed:
5b:cb:5e:2e:9d:b0:5e:bc:3f:5a:12:2c:a6:33:db:79:ef:41:
2f:e6:79:63:9f:a8:9c:6a:d5:f2:8b:69:13:62:33:ca:3a:e8:
d9:b8:a7:48:64:e4:9e:bb:e5:29:20:ed:98:71:f9:80:71:f2:
ce:6e:19:52:ec:de:f2:6b:b6:4a:fd:be:5e:4f:53:b1:ec:a9:
1a:78:43:d8:c6:07:ff:a6:27:70:60:19:93:48:c3:00:2d:b7:
8b:14:89:75:dd:01:6c:40:86:65:13:95:08:9c:0b:c6:6c:10:
d1:cd:18:e0:9d:26:8e:84:14:b7:54:1d:39:83:65:79:f4:9f:
f8:77:d6:b8:cf:12:72:9a:c8:c1:90:b4:6e:e6:e9:07:42:14:
3b:56:06:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 18:44:02 2023 by rpki-client on console-fra.rpki-client.org