Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/19_n5KuVHdvdjCTAk8F9d1QZfEo.roa
File: 19_n5KuVHdvdjCTAk8F9d1QZfEo.roa (raw, json)
Hash identifier: /YcScqq5ebd1upgHWKaYb/rLs1RS5IDSzLz6SM876QY=
Subject key identifier: D7:DF:E7:E4:AB:95:1D:DB:DD:8C:24:C0:93:C1:7D:77:54:19:7C:4A
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018C823BCC571E1C92870AFC85A8707C87A7
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/19_n5KuVHdvdjCTAk8F9d1QZfEo.roa
Signing time: Tue 19 Dec 2023 13:20:06 +0000
ROA not before: Tue 19 Dec 2023 13:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400909
IP address blocks: 82.163.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:3b:cc:57:1e:1c:92:87:0a:fc:85:a8:70:7c:87:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 19 13:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7dfe7e4ab951ddbdd8c24c093c17d7754197c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:54:7a:e8:04:73:4c:06:f3:91:00:31:96:
60:8c:b9:2a:3b:47:4b:e3:24:71:f1:45:d0:6d:55:
56:ca:34:90:ff:e7:8a:54:af:41:3b:7a:4a:ac:a2:
c4:34:c4:c2:d7:70:d9:40:64:66:2e:18:f5:af:e1:
79:24:4b:e8:33:32:88:38:9c:b3:c0:d6:24:05:35:
ce:2d:a6:bc:9a:4a:97:a9:09:7e:03:22:0c:fb:d5:
a8:5c:62:d4:5d:8d:13:82:a4:7e:14:24:c5:ce:46:
a7:80:15:b8:fa:b4:60:c3:07:8c:da:16:b9:f5:ce:
ad:57:fb:45:5a:21:f6:9d:0f:e6:29:0a:dc:da:09:
ee:62:ed:04:1b:d6:56:17:9a:28:11:11:9c:73:88:
ae:a9:40:9d:45:f1:66:0e:bf:01:1c:bb:51:dd:6d:
71:33:2c:c5:58:22:3e:ae:d0:cd:af:5a:3b:98:8d:
67:a4:34:d8:00:bf:53:12:de:ec:58:c2:ee:70:36:
7b:b1:84:fe:6c:eb:23:ef:c2:a5:27:6a:0b:b2:66:
a6:58:8c:14:c4:93:ba:14:bf:65:fa:8e:ee:5a:73:
9d:c3:52:6c:69:8b:5e:2d:fb:5a:1f:ea:53:58:92:
87:e5:75:c1:10:95:b4:c7:6d:c0:e0:fa:30:19:d3:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:E7:E4:AB:95:1D:DB:DD:8C:24:C0:93:C1:7D:77:54:19:7C:4A
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/19_n5KuVHdvdjCTAk8F9d1QZfEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.228.0/22
Signature Algorithm: sha256WithRSAEncryption
70:21:28:eb:30:18:8d:b3:be:ed:96:94:c2:61:76:82:bf:e3:
1d:cb:e9:dc:5a:26:fd:16:62:78:ef:9f:9d:c9:a6:f3:f3:b4:
07:c1:c4:b9:18:65:b5:ef:d9:10:3f:ae:cc:f3:39:f9:d1:b4:
f0:71:aa:1f:4e:65:29:01:14:e8:91:69:af:8c:a9:94:4c:1e:
6f:99:73:3e:f6:b5:d9:88:b0:99:81:2e:ec:6c:c7:ec:9e:43:
ba:2f:4a:a7:11:82:2b:34:13:92:9b:73:95:8a:2e:12:79:40:
24:86:a2:09:5c:f5:84:3f:5f:f8:9b:19:da:dc:b6:02:d2:1b:
a6:9a:eb:49:a4:c4:42:7a:21:9a:19:3f:52:db:ef:63:64:33:
81:96:e1:58:4f:b6:4f:eb:d6:90:08:62:87:af:69:6c:26:df:
ec:e8:e2:fe:45:a0:bb:28:2c:74:fe:8b:e2:59:a0:53:18:b1:
e8:b4:ac:ec:fd:b0:d8:17:9c:42:e5:21:96:d5:96:e4:35:5b:
4d:d5:7f:bc:13:ab:0e:fd:bb:68:23:13:1c:f8:fd:0b:52:04:
bf:5f:e4:18:dd:8c:fa:ce:32:9a:b9:63:a3:7b:1d:43:5c:f7:
cf:e8:54:70:4d:3f:3c:ce:7e:26:1a:6f:bd:cc:5c:91:9d:96:
c4:90:8a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:46 2024 by rpki-client on console-ams.rpki-client.org