Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/f_s-WuCSj7Rfev8Lmn4wBEayURA.roa
File: f_s-WuCSj7Rfev8Lmn4wBEayURA.roa (raw, json)
Hash identifier: MbI66pApqjHk/wP9e5LKgkLCjovrVfgexhlV4dHjgTw=
Subject key identifier: 7F:FB:3E:5A:E0:92:8F:B4:5F:7A:FF:0B:9A:7E:30:04:46:B2:51:10
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01885CC43DCD97BFA6F4B322F276C2D2FB0B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/f_s-WuCSj7Rfev8Lmn4wBEayURA.roa
Signing time: Sat 27 May 2023 10:32:24 +0000
ROA not before: Sat 27 May 2023 10:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52209
IP address blocks: 82.97.244.0/22 maxlen: 24
82.97.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:c4:3d:cd:97:bf:a6:f4:b3:22:f2:76:c2:d2:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 27 10:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ffb3e5ae0928fb45f7aff0b9a7e300446b25110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:d9:38:6f:09:d3:e3:81:8e:21:ee:05:b8:
eb:db:f5:f0:8e:29:ba:55:5d:27:13:90:65:ba:37:
b0:43:b9:b2:fb:ed:94:be:d7:c5:a3:3f:1e:27:2f:
88:36:ec:29:61:e7:06:b4:e6:46:1f:54:66:fe:f0:
2b:69:c6:7c:78:e4:72:6a:60:75:63:ba:bd:56:52:
82:b5:ae:0c:41:45:c9:de:9a:30:27:79:9a:9a:d3:
b5:66:45:66:d5:4e:dc:60:01:61:0d:6a:1b:26:b6:
58:92:37:26:bc:78:39:e0:1a:98:cb:8e:38:17:3a:
5c:ff:a1:ee:bf:4c:55:17:d7:f5:c2:ae:70:28:44:
f7:f2:34:6c:7e:62:45:ff:d5:69:5b:69:f7:3f:a3:
ba:2e:f6:dc:ba:52:23:bc:ad:58:cb:0a:78:a9:d2:
10:26:81:91:07:99:09:fe:bc:21:70:59:65:e6:4f:
8a:69:06:38:38:0c:2e:d9:cd:5e:76:6d:f7:95:e4:
6a:82:41:c9:fc:50:e3:c4:99:a3:7c:7b:07:d1:6d:
d9:10:fe:bf:93:52:ea:d6:57:3c:34:63:8c:51:91:
a1:6e:74:7e:16:d3:dd:89:4a:e3:0a:06:35:ef:b1:
76:56:b5:46:55:de:17:77:0b:28:42:6e:64:76:bb:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FB:3E:5A:E0:92:8F:B4:5F:7A:FF:0B:9A:7E:30:04:46:B2:51:10
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/f_s-WuCSj7Rfev8Lmn4wBEayURA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.240.0/20
Signature Algorithm: sha256WithRSAEncryption
42:40:ff:30:4b:a4:6c:02:30:f8:41:d6:ae:60:27:5c:a1:92:
fc:25:64:f7:bc:d4:0f:b5:ab:1e:38:4e:95:0b:c9:34:35:52:
e1:82:dc:c2:dc:bd:31:5c:36:a2:db:b2:62:84:af:d0:b3:87:
1e:5c:70:d3:0c:ed:46:46:0a:a1:a7:d9:0a:b6:93:ed:6c:3d:
98:1c:82:7b:fe:44:e9:b5:7b:0c:cd:47:c9:cc:64:fc:a1:08:
16:6e:cb:55:fc:a6:8b:f1:e1:5b:d1:52:b1:3f:c6:ea:61:56:
0b:f5:f7:4f:b8:b7:62:15:b2:d7:1b:6e:03:1a:2a:24:bb:d3:
93:9f:1a:fa:18:87:15:39:24:7a:b1:33:4b:0b:1c:ce:d1:87:
33:06:7b:04:84:31:3d:18:ce:4f:06:76:08:97:03:99:bc:5e:
b8:c2:09:d7:19:cd:eb:b6:a0:df:3d:c7:4d:76:6c:bf:ae:e2:
0b:18:b7:df:be:b7:4d:8f:cd:23:6b:7f:03:ef:70:11:07:43:
ed:35:2d:79:2e:66:c6:7b:46:0e:01:d2:7a:99:64:9e:6d:63:
98:4d:ad:3e:b4:60:09:29:b9:14:05:c6:9c:b2:74:1d:3d:0c:
1a:52:c1:f3:cc:f7:a2:ed:ae:16:0c:41:59:1a:a2:be:33:4e:
0b:9e:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org