Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/0J-E8Jy1M4BnsDIAlUziESXdvGY.roa
File: 0J-E8Jy1M4BnsDIAlUziESXdvGY.roa (raw, json)
Hash identifier: XyAQ50j1fySKB6YOaMKhrgBywCklChaeg0MKagP1KXM=
Subject key identifier: D0:9F:84:F0:9C:B5:33:80:67:B0:32:00:95:4C:E2:11:25:DD:BC:66
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A999679A6494659D75E8FFA48674E512E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/0J-E8Jy1M4BnsDIAlUziESXdvGY.roa
Signing time: Fri 15 Sep 2023 16:04:50 +0000
ROA not before: Fri 15 Sep 2023 16:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 82.115.8.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:96:79:a6:49:46:59:d7:5e:8f:fa:48:67:4e:51:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 15 16:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d09f84f09cb5338067b03200954ce21125ddbc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:89:51:0f:30:13:9d:f1:69:2b:45:ea:e0:
27:b8:e8:6e:07:34:3b:3e:32:b3:4c:fd:94:59:ea:
85:c9:a9:f3:8b:70:a9:96:d6:f3:a3:e6:fe:5f:55:
86:b7:75:df:9b:88:e1:1c:b4:c0:bc:d2:d3:0c:bd:
68:81:ed:bf:c7:32:2d:ea:2b:cb:4b:ba:52:eb:22:
40:db:05:de:1c:15:fd:59:37:86:00:20:2c:d1:73:
0a:d9:3b:a9:a2:3f:c5:58:fe:69:2f:67:b0:68:85:
f9:56:be:9d:f5:91:74:a4:db:d3:c0:14:1a:1c:a2:
f7:21:8a:78:48:3b:f7:68:09:51:5e:84:8e:52:7c:
54:9a:5b:4a:22:77:6a:ea:e9:2d:f2:50:0b:99:3c:
4c:5a:f8:7a:37:0d:dd:ae:22:d0:e1:9e:e6:17:f9:
89:f9:6c:77:77:4e:91:ec:cc:be:42:8a:55:83:47:
63:46:f9:59:99:19:01:fc:c2:cc:42:bc:b6:ed:9d:
d5:c8:1b:57:bd:d6:7c:e1:36:dc:6a:4d:6c:a2:39:
c5:1c:ad:4e:dd:b9:5b:ca:30:2a:cf:64:55:bf:73:
78:4e:2b:ea:cc:16:ec:b7:df:99:d5:5c:06:13:cb:
fe:ff:d2:8e:a8:d5:79:77:45:ad:cc:a8:43:7e:f6:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9F:84:F0:9C:B5:33:80:67:B0:32:00:95:4C:E2:11:25:DD:BC:66
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/0J-E8Jy1M4BnsDIAlUziESXdvGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.8.0/22
Signature Algorithm: sha256WithRSAEncryption
63:04:d8:24:6e:dc:be:66:ad:2e:e5:13:e9:77:21:f8:5b:a9:
6d:71:81:3f:ff:82:9c:07:c2:e9:79:a3:b3:96:36:3c:e2:b7:
28:85:eb:6b:d5:af:03:4e:15:f6:7e:8d:4c:70:9b:96:81:5a:
d3:e8:07:0e:eb:d6:2e:da:bb:73:c8:20:68:cd:24:56:f5:bb:
e7:de:6f:f4:93:ae:2b:52:74:d6:37:5e:43:90:0c:23:64:5f:
01:d2:ed:8c:69:02:a0:1b:f7:3d:6d:17:3a:14:8d:58:96:bb:
ef:3b:81:78:c7:e6:fc:70:0e:30:37:d4:f6:0d:10:bb:8c:b4:
2b:b6:73:09:08:61:4d:67:2f:2d:f8:b3:45:a9:91:a2:30:30:
d7:f3:55:3d:fd:cc:c8:1b:3a:3a:91:08:aa:87:56:aa:20:e6:
7d:21:19:77:d1:44:4c:d2:4f:7d:c6:e7:10:3d:00:69:89:bb:
fc:62:4e:d6:f6:46:44:44:14:db:f3:3f:76:89:8f:66:e1:74:
c6:61:67:83:65:6a:30:71:bb:29:79:8a:61:79:dd:58:c6:87:
3d:05:51:3e:f8:1f:e0:bc:e7:6b:2c:e1:17:0c:e8:2c:76:25:
11:f0:c9:b0:0a:d7:bf:ea:cf:c7:0f:29:b4:10:bb:24:e5:0f:
fe:1f:72:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:58:25 2023 by rpki-client on console-fra.rpki-client.org