Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Uy9oAEEDEmlju293TxE0HcBmX-g.roa
File: Uy9oAEEDEmlju293TxE0HcBmX-g.roa (raw, json)
Hash identifier: cDdgk0PdUUeXRoQMYqPIReTjvdB6nxpA4taHksWSMcM=
Subject key identifier: 53:2F:68:00:41:03:12:69:63:BB:6F:77:4F:11:34:1D:C0:66:5F:E8
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01867815E02517C605FFDFA92E119CF6B41F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Uy9oAEEDEmlju293TxE0HcBmX-g.roa
Signing time: Wed 22 Feb 2023 07:45:44 +0000
ROA not before: Wed 22 Feb 2023 07:45:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 82.115.8.0/22 maxlen: 24
212.87.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:15:e0:25:17:c6:05:ff:df:a9:2e:11:9c:f6:b4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 22 07:45:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=532f68004103126963bb6f774f11341dc0665fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4e:e6:e7:9c:78:dd:8a:4f:c9:7f:40:61:6c:
07:c8:76:77:4e:b8:a1:42:5a:a4:0f:5a:d3:c1:3f:
9c:40:e1:6e:95:c4:72:65:bd:11:0e:51:55:0a:04:
c5:dc:f2:aa:8e:b1:b9:ea:82:77:54:f7:4b:73:a8:
d1:07:c9:aa:11:ad:b3:b3:0f:70:a2:3f:05:43:27:
ff:27:1f:21:20:79:8a:4d:96:09:9b:bf:8f:72:fe:
7e:b9:65:ff:60:38:59:57:3c:4f:23:af:cf:85:e9:
a9:99:41:45:40:f1:2b:f5:b3:64:0c:93:c0:d8:dd:
96:5a:b0:6a:3b:ef:cf:14:d8:b7:9b:38:a5:4f:d1:
bc:43:c3:96:12:75:bd:da:0c:88:7e:23:d3:2a:b5:
e6:d1:2a:b7:f0:46:e4:6a:49:d5:1d:fe:3d:07:cb:
51:a3:57:f9:27:70:f8:1b:53:85:16:2a:fc:88:0a:
f5:1c:b2:54:72:7f:57:d5:15:15:10:9f:1f:98:99:
0f:8c:56:dc:5f:5f:4a:26:91:b9:57:5b:d6:d1:c7:
a4:b8:39:48:80:d0:e1:7e:c5:7f:4d:c5:5d:c8:98:
e4:ea:24:a0:76:23:5f:46:4e:42:11:a6:8d:40:9a:
51:c1:88:21:bd:dc:5a:3a:76:9a:f9:72:7a:a6:06:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:68:00:41:03:12:69:63:BB:6F:77:4F:11:34:1D:C0:66:5F:E8
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Uy9oAEEDEmlju293TxE0HcBmX-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.8.0/22
212.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:2d:54:66:19:46:b5:58:89:ca:f9:a0:85:55:0b:75:8e:bb:
15:5c:bd:46:d0:94:da:5e:33:c7:cf:3b:2d:03:3b:9d:d2:89:
df:64:19:75:c9:89:30:09:b6:fe:64:47:22:a7:aa:4e:9f:05:
72:19:ad:27:56:c8:9b:30:c1:97:c4:70:7c:c6:1f:dc:a4:85:
b2:43:5c:35:e4:7e:17:6c:44:4e:92:1c:63:71:98:30:b1:be:
60:5e:bb:c1:8d:98:a1:24:8f:27:86:9a:6d:2a:95:fd:82:7a:
ff:ce:4c:35:25:48:ab:03:10:d7:24:af:17:d4:d8:9d:94:ee:
19:fc:93:d4:52:ab:e2:f4:c7:49:5a:4a:e0:38:f1:ed:7b:e9:
60:85:de:af:3e:50:29:d6:e7:f5:d2:ab:7e:0b:8b:4a:99:8f:
b6:3d:2a:8f:15:7a:56:7c:74:d8:37:e9:04:d8:05:ca:21:4b:
d5:dd:74:39:94:cd:24:42:58:7e:a2:cc:aa:8f:2b:61:63:33:
50:92:1c:e1:48:82:c1:37:7d:f1:b2:da:c3:95:c7:d5:b6:f0:
ab:a6:42:12:f0:f7:6b:85:f6:93:ee:e3:1e:ae:6a:69:2f:06:
bb:34:d7:f9:32:b2:7e:b6:7f:cc:65:df:74:92:5b:a2:8c:48:
5a:40:70:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org