Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/l0Kje2ITE6HKGsBymVs8ZBNsCMg.roa
File: l0Kje2ITE6HKGsBymVs8ZBNsCMg.roa (raw, json)
Hash identifier: HFH2KDWqadzKDHuDYiNwoxvsycZoQx16ldV9J4vWDAc=
Subject key identifier: 97:42:A3:7B:62:13:13:A1:CA:1A:C0:72:99:5B:3C:64:13:6C:08:C8
Certificate issuer: /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial: 01856CB86A334D75E8DBE71EDE16DC3F067A
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/l0Kje2ITE6HKGsBymVs8ZBNsCMg.roa
Signing time: Sun 01 Jan 2023 09:45:03 +0000
ROA not before: Sun 01 Jan 2023 09:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12445
IP address blocks: 82.115.160.0/19 maxlen: 19
82.115.176.0/23 maxlen: 23
82.115.176.0/24 maxlen: 24
82.115.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:6a:33:4d:75:e8:db:e7:1e:de:16:dc:3f:06:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Validity
Not Before: Jan 1 09:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9742a37b621313a1ca1ac072995b3c64136c08c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:41:d5:be:93:52:64:29:a0:fa:58:b0:57:
53:a8:0d:c8:bc:3a:4c:0c:6e:3c:db:15:c4:74:18:
da:97:44:a1:a7:3f:c5:cb:02:32:3b:f9:33:21:2b:
2c:ee:4e:2a:f6:54:77:08:f7:69:df:a3:75:98:8b:
d7:ba:d7:60:0f:49:1a:90:fa:12:b7:59:e2:44:98:
c7:46:3c:d8:8b:97:6a:d5:2e:a8:4c:c4:e7:15:53:
a4:b4:e8:61:f2:02:68:bc:11:e2:f5:ba:99:18:1c:
62:10:86:5a:5d:60:99:7a:b5:de:3d:11:4a:56:33:
18:70:11:a2:e8:d4:95:83:ab:12:50:6b:cb:07:2f:
1f:32:f7:c0:78:7c:c1:19:f9:41:7f:9c:23:48:1a:
c9:a4:70:1e:45:5b:cf:63:2a:21:46:d5:13:c3:20:
57:79:e2:74:e4:2a:59:48:e0:0e:04:32:17:73:72:
74:8c:5b:73:f5:3b:79:52:ae:a9:db:4b:ed:c4:52:
ae:e3:0d:c3:d4:4b:53:57:0d:30:00:85:ed:ff:43:
20:6a:60:03:9c:7d:5a:57:b0:66:e1:d6:f2:45:fc:
5f:d2:50:a6:8d:dd:08:b5:7f:10:cd:91:1a:6a:b5:
26:78:55:10:2f:3d:7b:9a:6d:60:98:3b:9d:3f:96:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:A3:7B:62:13:13:A1:CA:1A:C0:72:99:5B:3C:64:13:6C:08:C8
X509v3 Authority Key Identifier:
keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/l0Kje2ITE6HKGsBymVs8ZBNsCMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.160.0/19
Signature Algorithm: sha256WithRSAEncryption
31:9d:eb:20:ef:5a:b3:4e:87:ec:4d:d5:60:65:86:39:cd:c1:
de:45:fb:be:28:11:fc:7d:ce:6c:d0:6a:da:8b:bc:eb:c7:b6:
11:13:d0:04:d8:b5:ff:d8:4c:de:c2:2e:96:0b:05:2f:16:74:
e0:cf:89:a5:ea:5b:0c:af:69:8b:1d:98:c9:65:c5:91:e1:ef:
d4:b9:b7:52:28:82:d2:c9:e2:99:a7:da:b7:52:74:c1:2c:47:
ce:5b:04:33:6f:a2:26:14:e5:1c:38:4a:03:a4:7d:0d:a9:bf:
21:4a:03:f9:0c:09:3e:7a:83:77:a6:5c:f1:a0:09:b2:4a:95:
5a:18:6e:ad:22:70:c7:e4:bb:a7:d2:5d:94:d7:50:3d:72:c3:
d3:92:d8:b7:58:6e:ef:fa:b2:bb:9c:d5:c7:1c:94:6a:65:77:
b0:ed:c6:ea:2f:79:f0:3a:e1:b6:7f:ae:93:78:a7:15:e5:98:
de:2e:80:74:e8:e8:25:ee:b5:2b:f6:57:4e:a2:81:28:7f:02:
72:c0:8c:1a:6e:16:d4:61:15:99:1c:ff:8e:3e:1e:13:0a:a8:
c1:f9:52:ad:07:69:61:c7:cd:24:5c:66:54:7d:a0:bf:8a:9e:
db:01:9d:72:64:57:43:62:a1:61:13:ba:98:e6:59:15:4a:89:
8a:02:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:47 2024 by rpki-client on console-fra.rpki-client.org