Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6kLnhXvLnWmV1PjP0fGXeh4IYnQ.roa
File: 6kLnhXvLnWmV1PjP0fGXeh4IYnQ.roa (raw, json)
Hash identifier: gcyab7i2WzVsPO/8fWltaNterp55Am2VfUC0sSpzLH0=
Subject key identifier: EA:42:E7:85:7B:CB:9D:69:95:D4:F8:CF:D1:F1:97:7A:1E:08:62:74
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0186F39A17BD2494FBF60C7FD45E6F6F9DBA
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6kLnhXvLnWmV1PjP0fGXeh4IYnQ.roa
Signing time: Sat 18 Mar 2023 07:23:27 +0000
ROA not before: Sat 18 Mar 2023 07:23:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 82.163.54.0/23 maxlen: 24
82.163.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 06:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:9a:17:bd:24:94:fb:f6:0c:7f:d4:5e:6f:6f:9d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Mar 18 07:23:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea42e7857bcb9d6995d4f8cfd1f1977a1e086274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:dd:e8:0a:35:b2:5d:2b:19:2d:2c:0c:9a:
2e:22:00:91:02:c6:65:3a:b8:45:af:77:f1:98:d3:
fa:38:a7:04:27:37:0f:6e:8c:fe:ff:f7:ae:d9:f8:
ef:f3:13:0b:3a:0d:24:6b:65:51:f8:50:53:c7:6e:
1f:e1:fd:4a:5d:e3:d8:4a:dc:c2:25:bd:3e:67:5d:
56:e1:2e:77:b3:e2:43:b0:42:bd:44:e7:62:1d:67:
f9:73:b6:26:57:30:be:9b:7f:ee:0a:1e:43:e3:9b:
4c:e1:1a:98:24:d2:41:dd:10:4e:f8:8d:17:12:c9:
38:85:75:bb:b9:6e:e5:d6:d3:1f:b4:f9:e4:75:54:
1c:24:de:68:32:ae:29:7b:45:22:79:41:82:32:92:
dc:a8:4f:e6:4f:5a:68:91:fa:f1:b3:1f:ac:84:b4:
35:7e:41:19:9c:e3:3f:1a:4a:4b:79:c7:ce:c1:68:
f9:44:e5:f0:ce:e4:f7:3f:46:9f:1c:b4:6a:b6:24:
78:44:05:a6:07:97:4a:19:9e:b1:23:d8:52:7f:1b:
85:9f:c2:64:95:53:63:f2:04:4a:c3:24:73:3b:85:
2f:23:33:e9:2c:d6:18:b5:78:da:c8:f3:1d:79:f3:
3c:92:1d:5e:24:16:4a:25:ce:a9:03:41:6d:b1:36:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:42:E7:85:7B:CB:9D:69:95:D4:F8:CF:D1:F1:97:7A:1E:08:62:74
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6kLnhXvLnWmV1PjP0fGXeh4IYnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:92:bd:98:13:e5:2e:f9:ed:3c:bc:7b:28:70:b6:f8:c5:c2:
7f:50:1e:aa:b5:f0:fb:f6:0d:26:82:70:e9:87:42:40:b9:40:
d8:fd:6c:32:75:76:85:43:63:d1:df:9e:6a:4d:f1:78:77:a9:
8d:63:58:83:0c:d7:28:ad:55:ba:31:9e:0a:6c:7c:7f:31:53:
24:ea:b1:80:01:df:46:8a:a8:42:6b:2d:39:a3:95:54:8c:4a:
ee:7f:74:ab:14:a6:75:29:6d:88:0c:1a:39:36:0a:36:1e:86:
ec:be:59:27:90:0b:5d:59:b0:df:b4:1c:2a:50:c1:7a:69:6b:
44:0b:10:92:1c:aa:6b:39:cd:cd:41:d8:7e:59:a1:50:30:85:
f3:99:84:fd:b3:00:6f:84:fa:32:b1:89:10:a9:56:b6:f8:6b:
2c:52:70:27:f8:b2:04:da:e2:b1:86:f0:ef:bd:3c:86:69:ed:
08:63:e1:c6:e7:b4:aa:a1:1e:0c:50:3a:55:ec:4a:59:b0:f6:
6d:b1:c9:c8:9b:46:f0:cf:31:41:71:08:a1:6f:18:3a:ed:11:
af:c5:2d:8b:56:9b:1e:21:eb:82:24:43:2f:2b:08:23:8b:1a:
57:e4:47:36:52:36:0b:af:5b:52:8a:c1:77:3f:27:7b:22:4c:
5c:48:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:46 2024 by rpki-client on console-ams.rpki-client.org