Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/MVXcnpucK8Ep_7q3ha0deMAQa1Y.roa
File: MVXcnpucK8Ep_7q3ha0deMAQa1Y.roa (raw, json)
Hash identifier: k2t8nH/F/YoMG9Lh1Q47vouhrZ+WNd9dNWye1fUWd5M=
Subject key identifier: 31:55:DC:9E:9B:9C:2B:C1:29:FF:BA:B7:85:AD:1D:78:C0:10:6B:56
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018576A682FCCDA9937EE00590469AFE5930
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/MVXcnpucK8Ep_7q3ha0deMAQa1Y.roa
Signing time: Tue 03 Jan 2023 08:01:41 +0000
ROA not before: Tue 03 Jan 2023 08:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 82.163.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Apr 2023 07:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:a6:82:fc:cd:a9:93:7e:e0:05:90:46:9a:fe:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 3 08:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3155dc9e9b9c2bc129ffbab785ad1d78c0106b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:fe:25:7e:dd:dd:70:ec:00:ee:4f:eb:e1:
8d:e7:cd:7a:07:f2:81:8b:b3:8a:c6:5e:4d:53:c0:
fc:e3:b0:52:3c:72:de:63:47:7c:8f:10:f8:eb:7d:
6f:c7:a2:64:81:8e:77:42:b8:5f:eb:ff:13:33:80:
16:fc:83:0d:30:5e:63:82:db:75:e8:97:82:06:b8:
9b:9a:b5:f2:aa:a0:56:d0:f8:ab:09:07:ea:9e:e9:
5d:70:bf:4f:03:9b:99:e3:17:8a:89:c2:81:ee:30:
96:74:81:d4:7c:ec:f1:35:db:a6:51:b2:bd:8c:0d:
a1:f9:f6:c4:fc:d0:6d:4f:35:39:c4:fb:4e:99:2a:
6b:a3:f1:2e:02:8f:e0:95:54:eb:cb:a3:30:02:d0:
c9:1b:5f:19:07:a5:3f:3a:7a:8f:64:c2:14:de:5e:
b9:a4:2c:d9:2f:f8:ab:9a:85:a9:4e:18:9d:a4:28:
c4:f8:e4:60:f3:0b:fa:ef:7e:bb:29:ce:6a:d0:45:
59:c9:ed:4e:e0:e9:1a:ca:14:d0:db:24:04:9e:98:
43:44:90:fd:4e:15:55:0c:92:92:c9:34:54:43:3a:
e0:b6:69:52:2b:e6:d8:94:3d:8f:58:74:98:c3:b3:
a5:c9:6a:a2:71:0e:63:44:fc:50:35:1d:cc:0d:9e:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:55:DC:9E:9B:9C:2B:C1:29:FF:BA:B7:85:AD:1D:78:C0:10:6B:56
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/MVXcnpucK8Ep_7q3ha0deMAQa1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:3e:e2:1c:f9:17:c0:42:9e:fb:b2:76:e8:83:09:b8:14:f1:
b1:12:6d:2c:15:19:52:14:b1:35:90:fb:71:d7:04:ef:08:5d:
45:00:7a:02:5e:20:7d:04:5b:01:3a:c9:89:c8:ef:75:06:e5:
eb:f3:84:83:2f:a4:cf:7e:c2:86:b3:6f:82:87:27:f1:26:19:
89:88:e0:3c:a1:88:f3:b3:ec:a2:e7:97:e8:35:d0:01:2e:da:
4b:43:bc:32:ac:b0:4f:a1:fd:65:94:e6:24:96:c8:ea:44:a6:
e4:e5:f4:e7:95:53:77:4d:4a:a3:ef:d9:d0:0e:74:8a:1e:32:
fa:e7:df:be:8a:ab:9c:ed:f2:56:fe:1f:11:2c:85:f6:6f:02:
bf:56:9a:e4:cd:2e:93:96:41:75:d8:56:15:6c:f7:ec:57:44:
4b:99:98:c7:17:74:e3:5a:7a:2b:d7:6f:d2:f0:dd:90:61:c4:
ae:e3:25:f2:58:9b:37:44:d7:31:86:9b:19:af:62:61:c3:79:
c7:af:7a:e7:ad:dd:b9:6c:9e:7a:a7:27:ce:b6:8e:c3:fc:e0:
53:4c:76:ec:45:bd:5f:b5:55:be:c8:e4:f2:fe:56:05:b6:d2:
a6:64:b2:cc:7b:bd:37:92:45:d1:b3:07:19:5b:91:a2:6d:59:
84:77:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org