Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/bM9X7mRDbtfajrNFzJOaMOFHpvs.roa
File: bM9X7mRDbtfajrNFzJOaMOFHpvs.roa (raw, json)
Hash identifier: cytAyjlz5UtJGVgSET55YN2wCkCW6UPszQDWNjXplIk=
Subject key identifier: 6C:CF:57:EE:64:43:6E:D7:DA:8E:B3:45:CC:93:9A:30:E1:47:A6:FB
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0190BF9E3349355493ADC903DDADCF42343C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/bM9X7mRDbtfajrNFzJOaMOFHpvs.roa
Signing time: Wed 17 Jul 2024 07:35:34 +0000
ROA not before: Wed 17 Jul 2024 07:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138997
IP address blocks: 82.163.52.0/23 maxlen: 24
149.126.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 09:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:9e:33:49:35:54:93:ad:c9:03:dd:ad:cf:42:34:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 17 07:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ccf57ee64436ed7da8eb345cc939a30e147a6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:23:af:db:87:1d:7c:8c:d0:77:e7:28:de:
59:6a:07:33:04:87:75:b4:eb:d1:b8:aa:24:53:db:
8b:1e:52:e8:bd:5f:ba:b6:e1:bf:41:df:18:bf:50:
4f:91:98:b1:af:82:4f:39:58:0e:86:de:42:ae:5b:
88:ae:19:a9:29:5c:c7:50:f1:cb:50:4e:34:50:7b:
31:60:4f:5d:6b:c8:8e:ad:8a:09:0c:5c:9a:db:a5:
bb:7b:3c:28:74:45:5a:f6:f6:0f:9a:94:87:6c:b3:
6c:32:0a:26:1c:e5:56:0d:b6:56:c8:a2:59:fc:70:
cd:3a:9b:85:fb:9b:4e:d2:56:9b:04:dc:6d:c3:93:
d6:20:26:77:9c:e1:e3:d5:61:14:6b:27:9e:71:6f:
fc:3b:90:e7:53:c9:87:bc:0f:86:ae:b6:13:f7:d0:
77:b2:95:81:a4:a4:9c:2a:6d:db:97:62:8d:a9:73:
6e:8b:71:0f:52:be:47:0b:dd:df:8d:38:92:f7:ce:
09:84:cc:c0:65:fa:3c:ad:62:05:69:c9:f8:e1:85:
96:40:2c:33:5e:02:dc:25:53:c6:c9:eb:41:06:0f:
b9:db:5d:64:0e:59:69:09:7a:eb:b4:93:07:c6:52:
9b:3f:b6:54:48:5f:fa:01:45:70:b2:a0:75:e3:90:
77:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:57:EE:64:43:6E:D7:DA:8E:B3:45:CC:93:9A:30:E1:47:A6:FB
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/bM9X7mRDbtfajrNFzJOaMOFHpvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/23
149.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:63:5d:bf:59:95:b9:5d:0b:f7:5f:73:38:b7:d4:ba:cc:c1:
f0:c1:ea:d1:71:fb:70:89:0a:60:d2:83:b6:e5:9c:94:dd:be:
25:4d:21:1f:dd:8f:87:c6:49:e8:84:3e:f5:55:fc:50:03:30:
3e:41:97:77:91:f3:88:a5:dc:ad:bd:40:fa:bd:e0:33:84:ca:
85:31:4c:a8:7b:3e:aa:00:c8:0f:e1:e1:79:6a:8c:05:a8:29:
00:61:a6:3d:87:b2:33:ed:45:6b:3c:61:58:0f:37:29:ed:04:
91:fe:4e:c9:f2:98:10:50:8b:04:84:ef:d3:31:c5:1e:82:00:
cf:0b:1b:02:83:31:62:3c:dd:6e:3f:47:26:b1:32:a6:0f:7d:
07:00:11:e4:c4:95:3e:f1:06:d9:7e:77:1b:90:19:d7:00:88:
fc:50:a9:8e:1d:f5:43:84:75:9f:ef:1e:f4:8e:32:10:88:02:
ee:f9:d8:77:43:0c:d8:d6:88:3a:36:59:80:22:8b:e6:3f:fd:
e8:d1:c4:fb:1c:d2:3b:62:47:ff:6c:2a:1f:88:f0:5b:77:e3:
98:61:88:f5:ce:13:a7:de:54:70:94:fe:e5:15:5b:e6:ce:7a:
5c:c0:ef:bd:63:5c:e1:29:ba:95:98:67:91:81:6e:66:0d:4d:
8b:e3:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 11:19:27 2024 by rpki-client on console-ams.rpki-client.org