Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/eyrvbhS43f9rPNq8lseWYvsDIuw.roa
File: eyrvbhS43f9rPNq8lseWYvsDIuw.roa (raw, json)
Hash identifier: rUOAraR+CnI72tUceWnCH/uQ0zt3m83hsLqiiBlfFFs=
Subject key identifier: 7B:2A:EF:6E:14:B8:DD:FF:6B:3C:DA:BC:96:C7:96:62:FB:03:22:EC
Certificate issuer: /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial: 01856CB86AE5BBE7741B60E4527726C729C9
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/eyrvbhS43f9rPNq8lseWYvsDIuw.roa
Signing time: Sun 01 Jan 2023 09:45:03 +0000
ROA not before: Sun 01 Jan 2023 09:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 82.115.160.0/19 maxlen: 19
82.115.176.0/24 maxlen: 24
82.115.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:6a:e5:bb:e7:74:1b:60:e4:52:77:26:c7:29:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Validity
Not Before: Jan 1 09:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b2aef6e14b8ddff6b3cdabc96c79662fb0322ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:01:07:ed:66:c1:f4:88:e9:37:76:65:cd:
c4:be:4b:bb:e8:d6:27:74:ca:ab:f3:08:d4:dd:ee:
6d:f0:79:e5:a8:13:ad:b6:6e:c2:77:db:ac:20:e3:
60:bc:2a:98:c7:7c:6f:f8:b9:9a:4a:d5:99:1d:70:
c4:68:a2:d0:a5:1d:92:e9:db:a7:e6:a7:24:84:55:
ae:f8:4f:38:e0:fb:fe:59:6f:e2:8d:98:17:29:94:
ea:f5:3c:86:5a:eb:96:57:d4:7d:43:e0:a6:69:8a:
9b:1b:9d:10:0b:17:2b:0a:5c:d4:25:e2:c5:b1:30:
c8:bb:61:94:27:0c:2f:8d:a0:30:0a:34:7b:5a:9d:
7d:55:c4:36:8c:3c:27:81:48:69:79:cf:12:66:85:
4f:6a:fa:bd:75:8d:5d:e0:67:fe:5d:b8:ae:0c:6b:
27:87:c3:05:2c:ab:9c:7b:f5:9b:ee:83:da:b5:f0:
20:ee:35:70:3e:c0:76:8c:4c:c8:8b:12:2d:5f:83:
94:ec:57:fd:e5:a9:23:6d:fe:7e:0b:7b:56:8e:73:
0d:00:44:b1:85:35:47:e8:9c:54:b1:f1:37:03:79:
2e:5e:60:f8:3c:00:ba:9d:86:b2:9a:4a:0c:6e:d8:
e8:28:50:0f:f0:de:5f:eb:3a:20:90:7a:66:62:7b:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2A:EF:6E:14:B8:DD:FF:6B:3C:DA:BC:96:C7:96:62:FB:03:22:EC
X509v3 Authority Key Identifier:
keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/eyrvbhS43f9rPNq8lseWYvsDIuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.160.0/19
Signature Algorithm: sha256WithRSAEncryption
39:6d:97:11:f5:00:ef:01:ef:12:ac:ce:91:97:a7:7d:53:07:
d0:70:33:00:88:25:06:f9:dc:e5:58:36:9a:4a:3f:e0:73:f0:
88:73:14:1a:1f:0a:9c:0d:44:86:51:e3:d6:7c:b7:93:20:0e:
7d:d1:1b:b4:c2:db:f8:56:40:fa:fb:4b:60:e7:5e:a1:93:6f:
79:4f:8d:d3:cb:94:ea:30:5a:fa:0b:a1:b8:03:19:55:39:ef:
35:db:cc:51:ca:db:68:7d:08:a5:6f:19:b4:b8:18:67:f7:cd:
b3:75:03:2c:6c:04:3b:99:b1:ea:7a:0c:07:96:0f:ac:80:e3:
75:ec:e8:b9:dd:a2:f7:c1:1f:3a:72:d3:fe:c8:92:2e:6e:da:
c5:56:07:76:15:c9:5f:97:23:10:39:e7:bb:e8:20:7f:a8:4b:
80:f7:d7:2b:48:6a:29:05:a3:0a:af:78:0f:14:1d:e5:19:d3:
28:db:a2:bd:72:2e:ae:fb:56:45:81:43:b3:d7:2d:31:ac:40:
d6:73:8e:a9:22:fa:3c:63:fa:06:0d:d6:18:18:a4:31:a5:26:
da:77:47:0c:44:59:c1:0b:ca:71:9e:d4:1d:df:24:6d:6f:6e:
93:34:8b:40:71:2e:b4:17:08:6f:34:94:d3:ea:5e:d4:5e:1c:
3a:8c:15:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 12:47:04 2023 by rpki-client on console-fra.rpki-client.org