Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6-wE7r0OwX4d24FtPQyBnKfg_Ds.roa
File: 6-wE7r0OwX4d24FtPQyBnKfg_Ds.roa (raw, json)
Hash identifier: Wh9IzGbKWpsmWYOpC5pR1LQFcAB055QWk4/FU+mQO2M=
Subject key identifier: EB:EC:04:EE:BD:0E:C1:7E:1D:DB:81:6D:3D:0C:81:9C:A7:E0:FC:3B
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018A0508E896BD65ADFA5DAE8EBF77FA1999
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6-wE7r0OwX4d24FtPQyBnKfg_Ds.roa
Signing time: Thu 17 Aug 2023 19:46:24 +0000
ROA not before: Thu 17 Aug 2023 19:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.163.60.0/22 maxlen: 24
82.163.168.0/22 maxlen: 24
188.215.120.0/22 maxlen: 24
5.102.96.0/19 maxlen: 24
5.102.96.0/20 maxlen: 24
82.163.224.0/22 maxlen: 24
5.102.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 09:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:05:08:e8:96:bd:65:ad:fa:5d:ae:8e:bf:77:fa:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 17 19:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebec04eebd0ec17e1ddb816d3d0c819ca7e0fc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:85:d2:0d:ce:29:92:b0:1e:87:01:09:b5:
23:90:fa:f2:1d:fc:55:9f:55:25:2b:02:85:70:d2:
72:7c:ba:1c:0d:a7:fa:01:de:90:ea:ab:28:bf:f5:
ec:4b:61:8e:b5:18:9f:c7:d4:fb:9a:33:83:32:c0:
6f:f8:57:70:0a:4e:d8:81:a6:af:83:36:19:f7:df:
0f:81:42:85:54:38:75:6d:59:08:82:bf:80:8a:df:
22:42:2b:ca:60:02:42:71:63:cb:0c:1f:7c:18:03:
cc:f8:a7:8f:45:4a:5e:00:d2:37:4d:27:f8:62:08:
ef:f0:ad:46:44:df:3d:89:01:70:89:31:74:9a:de:
73:11:74:77:7d:66:d2:2a:36:d3:7f:2d:ee:4a:c1:
49:f5:f8:b1:d3:5f:13:47:11:1e:04:67:f4:a3:12:
f0:c8:8f:2a:98:5e:a8:11:ca:4d:94:dc:ef:45:b5:
d6:1c:db:0d:1f:fe:1e:5a:4e:33:1c:1a:cf:e3:0a:
5e:db:d1:74:19:3d:64:ab:56:f2:f2:2e:3a:81:9d:
0a:f5:7b:5e:18:a4:78:e9:4d:76:d5:aa:ec:93:a8:
80:95:16:c3:0e:7f:6d:0b:c5:06:02:57:50:35:2b:
f4:3e:86:35:6c:63:86:0f:01:25:07:00:f9:13:2d:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EC:04:EE:BD:0E:C1:7E:1D:DB:81:6D:3D:0C:81:9C:A7:E0:FC:3B
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6-wE7r0OwX4d24FtPQyBnKfg_Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/19
82.163.60.0/22
82.163.168.0/22
82.163.224.0/22
188.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
96:95:39:c8:95:2f:52:00:b5:3f:a7:f5:4f:17:e4:d6:62:4b:
f1:95:70:46:c9:03:2f:ba:c4:d8:e6:04:7a:76:3a:6a:e5:ea:
de:d0:e8:fd:1a:18:ea:a9:e5:ec:0b:40:e5:09:bb:ba:80:05:
9f:00:e9:9c:15:15:e1:b0:bb:f6:7f:ec:b7:9d:d2:8f:c9:e3:
08:1f:53:e0:f5:e3:53:a3:0f:b8:c8:db:5f:fe:72:db:81:b1:
8f:cb:6c:4e:eb:4a:2d:1a:db:4a:af:97:33:1f:d0:31:bc:fd:
97:d9:b7:2f:50:db:30:91:d6:da:dd:aa:a1:d4:97:1a:15:09:
de:8d:3d:91:36:2d:68:de:4e:92:33:8f:19:67:39:47:a2:4e:
8a:88:5f:62:13:17:9e:0d:10:63:04:af:cb:dd:bf:57:65:31:
e7:d6:b0:e5:c9:a1:8c:49:a8:ae:eb:a4:98:cb:8e:98:23:7f:
81:6a:76:1a:ba:ec:e5:34:e1:ef:47:a3:a8:fa:ac:f8:67:6f:
c0:cf:85:21:6b:0c:8b:e4:61:78:8d:77:0b:87:dc:1a:fa:49:
ed:85:91:1b:8d:61:8e:e6:c8:ca:08:42:b2:d2:5f:62:56:86:
6e:ef:71:a9:09:aa:4c:f3:58:c1:ed:f7:05:d9:90:de:79:27:
fa:c8:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:46 2024 by rpki-client on console-ams.rpki-client.org