Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/QmX4fdilQaRbjSrcOasmbuJ4DHg.roa
File: QmX4fdilQaRbjSrcOasmbuJ4DHg.roa (raw, json)
Hash identifier: dUFViNcF+suOPiqHYuAOA3b5/62DTyD5HzwaZZuhBxY=
Subject key identifier: 42:65:F8:7D:D8:A5:41:A4:5B:8D:2A:DC:39:AB:26:6E:E2:78:0C:78
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0188D89811522279A07B46F44F2F6F060341
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/QmX4fdilQaRbjSrcOasmbuJ4DHg.roa
Signing time: Tue 20 Jun 2023 11:37:04 +0000
ROA not before: Tue 20 Jun 2023 11:37:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 82.163.56.0/22 maxlen: 24
82.163.64.0/22 maxlen: 24
82.163.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 08:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:98:11:52:22:79:a0:7b:46:f4:4f:2f:6f:06:03:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jun 20 11:37:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4265f87dd8a541a45b8d2adc39ab266ee2780c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:86:18:cf:53:b3:e2:a8:10:1b:72:07:52:
84:c5:1a:78:19:98:e2:01:ae:13:29:a7:1b:ae:e4:
cf:5a:5f:82:63:e3:09:38:33:e8:49:b5:a5:5e:32:
ec:bd:6c:60:5d:09:b9:08:90:3a:28:a2:db:48:85:
19:f5:0e:ee:4f:5b:d8:8a:74:ab:fb:df:f9:29:f9:
e0:5c:e2:d3:c7:f8:78:00:15:b9:ca:3e:4a:4a:8f:
11:43:65:cb:1d:ab:2d:e7:37:8b:dc:aa:fe:46:09:
44:94:f4:1b:c6:1f:61:86:a4:f6:3f:f5:93:61:1c:
36:2a:17:c2:cc:6a:65:a5:f3:65:5f:3d:b7:2a:61:
12:a7:33:e0:03:95:6b:bf:ac:1c:ce:ea:16:ec:ef:
32:45:ea:14:11:5f:33:51:8b:e7:3e:c3:a6:4d:36:
f4:39:98:f2:ac:6d:39:1f:2a:53:09:2b:f0:97:d7:
4d:79:7d:37:04:b2:f5:47:c7:a4:b4:76:5f:1c:1f:
b7:db:42:99:ef:51:1a:a6:94:ef:6b:cf:7e:68:ee:
08:9c:07:1f:f3:e7:71:cf:70:b3:6b:4c:fe:70:24:
d8:97:1c:90:f9:e2:e6:6a:99:1e:45:37:75:f0:91:
ed:95:36:07:31:18:94:f4:32:7d:d9:f7:17:01:ce:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:F8:7D:D8:A5:41:A4:5B:8D:2A:DC:39:AB:26:6E:E2:78:0C:78
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/QmX4fdilQaRbjSrcOasmbuJ4DHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.56.0/22
82.163.64.0/22
82.163.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ba:13:5a:f2:0d:38:dc:a6:ed:85:2f:de:cc:26:92:99:a0:
0c:2c:f2:5b:89:43:65:7f:60:19:be:f4:c8:9e:4e:ae:f3:6b:
20:42:82:31:9d:eb:78:3e:15:9b:22:14:1e:bc:2a:ea:cb:95:
60:4e:de:3a:ff:fe:0f:99:0f:ef:7b:79:2a:1b:82:50:c1:84:
b8:c4:85:c7:22:21:d7:07:7f:be:ff:3d:4b:80:7b:ce:be:6b:
2c:75:4a:f0:ab:c0:04:03:41:73:66:67:b6:48:4d:e7:11:44:
a2:a3:3c:d6:0e:93:42:ab:7d:bb:4c:94:b9:b5:f9:18:49:43:
71:fa:be:9e:37:0a:52:8b:0f:4f:d3:62:2a:cd:98:cd:6c:b1:
32:85:ef:a5:69:f2:fb:89:9e:88:ec:df:40:b0:8c:10:f9:46:
c6:ed:93:b5:39:60:5d:47:83:31:f3:76:82:54:9e:6e:c7:30:
05:a4:b7:2f:89:38:5c:6b:6d:b0:41:e7:de:9a:d3:8a:bd:e0:
99:e3:96:05:af:25:09:83:ae:f2:e0:60:76:82:b2:d4:3e:aa:
33:3e:08:8e:f9:bc:71:81:85:1e:93:8c:a2:33:55:f9:70:60:
d3:6b:76:ab:71:69:33:50:13:29:0f:bb:ef:e4:6d:49:b1:46:
82:67:7b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org