Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/3uZDh9mejqgg7WGWAIVwvk4KMxk.roa
File: 3uZDh9mejqgg7WGWAIVwvk4KMxk.roa (raw, json)
Hash identifier: KqD8cCw7lNLkh+5nd85+JrEVevR8tPvA0n6afWz076U=
Subject key identifier: DE:E6:43:87:D9:9E:8E:A8:20:ED:61:96:00:85:70:BE:4E:0A:33:19
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 0187DC1A4A727C3E50B0596266940BF6DEDC
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/3uZDh9mejqgg7WGWAIVwvk4KMxk.roa
Signing time: Tue 02 May 2023 10:55:23 +0000
ROA not before: Tue 02 May 2023 10:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12632
IP address blocks: 82.137.12.0/22 maxlen: 24
188.241.252.0/23 maxlen: 23
188.241.252.0/22 maxlen: 24
82.79.114.0/23 maxlen: 23
82.79.119.0/24 maxlen: 24
188.241.254.0/23 maxlen: 23
86.123.114.0/24 maxlen: 24
188.208.136.0/23 maxlen: 23
188.208.136.0/22 maxlen: 24
188.208.138.0/23 maxlen: 23
82.137.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:1a:4a:72:7c:3e:50:b0:59:62:66:94:0b:f6:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: May 2 10:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dee64387d99e8ea820ed6196008570be4e0a3319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:a2:c1:9a:43:89:09:cb:ab:8b:7b:c6:fd:
e0:32:bf:58:43:f1:3a:9f:c2:00:12:26:91:aa:fe:
ef:8f:1e:3a:d3:bd:5a:32:39:2d:aa:23:b1:2d:87:
de:66:48:72:4d:91:41:ac:a0:a2:08:ea:33:b5:5d:
9d:63:e4:d8:86:7c:72:30:54:64:6c:8f:7f:c3:f8:
20:4f:1e:e2:11:1a:5b:3b:76:45:b2:9c:f2:6d:d9:
02:4b:cf:64:03:0c:53:7d:a1:bc:cb:81:a0:82:ac:
e2:6a:58:a7:60:07:4d:87:eb:a0:0c:f4:9c:a4:15:
e6:aa:45:03:b6:f3:f4:05:96:9e:a0:06:4e:de:74:
77:c8:6a:92:56:3a:95:e9:aa:fc:c1:6d:af:61:d6:
d0:1e:1f:41:13:d7:57:df:ef:3d:79:37:16:7b:49:
86:c9:af:ad:36:f8:58:7e:0e:84:f1:92:14:47:b8:
ad:33:63:90:7b:e7:31:98:3c:85:06:f3:75:0b:fd:
8b:99:ae:26:05:dc:0c:36:e0:15:8f:5d:03:2e:3e:
9b:56:42:92:53:29:4f:10:d8:fa:b6:75:28:be:b6:
04:26:ae:96:d0:cc:49:b1:d4:21:55:2b:68:22:98:
b0:86:5b:5c:9b:bc:a0:af:04:0e:42:ab:fc:b2:7b:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E6:43:87:D9:9E:8E:A8:20:ED:61:96:00:85:70:BE:4E:0A:33:19
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/3uZDh9mejqgg7WGWAIVwvk4KMxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.79.114.0/23
82.79.119.0/24
82.137.8.0/21
86.123.114.0/24
188.208.136.0/22
188.241.252.0/22
Signature Algorithm: sha256WithRSAEncryption
94:19:bc:39:00:8c:f1:50:4e:1b:be:a0:1f:95:9e:a4:1b:95:
6d:48:6c:6d:07:43:ef:be:94:3f:4b:94:ff:7d:f3:b9:d3:18:
1a:5f:6d:48:85:44:7e:97:e7:bd:2a:e3:cd:fa:39:54:4c:a4:
25:94:ea:3a:5f:28:2d:6e:9d:50:25:10:ce:07:4a:9f:61:cb:
bb:e2:f9:d4:97:05:93:38:f7:32:29:cd:05:0d:a8:8b:a8:f9:
90:d8:63:fe:e4:b2:eb:07:cc:ce:00:97:ea:90:77:1e:17:35:
e9:c8:20:96:54:c5:84:94:1e:0a:d7:d9:2f:43:c4:e5:df:8f:
27:ed:ef:6e:a0:cc:00:f1:4c:d5:4e:63:77:5d:1c:82:2f:0f:
bf:2c:ff:90:70:1d:17:7e:e7:e9:1c:c7:73:54:30:8b:22:13:
0d:10:fd:ad:ab:67:0c:11:a7:48:93:19:04:d2:1f:93:60:3a:
e6:83:dd:91:dc:b0:a4:53:e9:8e:5a:ce:ef:81:be:e0:45:f3:
be:71:72:ed:51:70:88:d0:27:ed:44:cc:95:df:45:c5:e4:a6:
6f:48:a8:95:f3:f0:eb:4c:81:99:e7:be:98:4c:cb:3d:e7:07:
21:0e:6a:7d:0f:f4:b8:8d:a7:b9:3f:33:87:12:b0:0d:00:40:
c6:9e:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:17 2024 by rpki-client on console-fra.rpki-client.org