Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/myZVM1ruOoCMt6Og5YXTemSLSx0.roa
File: myZVM1ruOoCMt6Og5YXTemSLSx0.roa (raw, json)
Hash identifier: CkamnSLNWN0QdDgaYcMOHf5Ms8HBkWUsKWxlvaG1FEU=
Subject key identifier: 9B:26:55:33:5A:EE:3A:80:8C:B7:A3:A0:E5:85:D3:7A:64:8B:4B:1D
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01930634C3FB38645EA58F122A0B7D699C24
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/myZVM1ruOoCMt6Og5YXTemSLSx0.roa
Signing time: Thu 07 Nov 2024 10:39:01 +0000
ROA not before: Thu 07 Nov 2024 10:39:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.163.52.0/23 maxlen: 24
82.163.96.0/21 maxlen: 24
92.114.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:34:c3:fb:38:64:5e:a5:8f:12:2a:0b:7d:69:9c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 7 10:39:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b2655335aee3a808cb7a3a0e585d37a648b4b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:85:46:01:67:a6:9a:c2:9d:c1:0b:ae:8b:
79:dc:cc:79:6a:4f:25:a3:70:7f:e5:ec:17:6d:c5:
fb:43:74:ec:d9:60:0c:23:85:52:de:40:15:e5:2a:
4b:b9:48:45:44:5c:d2:5c:c5:d5:4a:6b:23:52:35:
ec:99:24:4e:e1:6a:e9:6f:15:fb:2a:8e:dc:1f:09:
9a:32:97:49:8a:52:dc:f9:f0:e9:65:23:93:43:c5:
33:15:55:bc:c8:ea:58:b9:74:86:45:af:f8:82:0e:
e6:a0:53:35:02:ff:29:f8:b2:6d:5e:f5:9b:06:02:
aa:c6:c8:39:14:b7:dd:06:31:c0:5d:7b:35:ce:d7:
2c:bc:ad:d9:36:d7:29:c6:ce:f5:73:dd:d1:44:43:
0b:11:8a:61:f1:20:c6:61:9e:af:da:5f:b7:8a:cc:
0c:c6:c5:41:7a:40:aa:de:7b:b4:b6:9b:47:79:cf:
91:fe:48:9d:49:83:8f:4a:8e:7e:8d:5b:36:85:e0:
17:39:26:f0:dc:30:2f:9a:8f:41:3a:2c:97:10:b0:
ab:13:3d:93:bf:67:7d:d3:f9:48:09:aa:a3:07:01:
4c:e7:17:2b:64:7d:7d:60:a7:60:bc:c5:d9:d1:c2:
66:5b:bf:3f:46:88:cd:ae:c6:5f:2d:02:f6:11:43:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:26:55:33:5A:EE:3A:80:8C:B7:A3:A0:E5:85:D3:7A:64:8B:4B:1D
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/myZVM1ruOoCMt6Og5YXTemSLSx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/23
82.163.96.0/21
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:f3:99:c6:2b:c0:74:b9:95:ae:e4:66:e5:0e:94:c7:a0:e0:
92:8a:18:44:8c:87:61:95:66:cb:15:77:ef:99:04:56:d5:a9:
a6:72:58:18:31:e8:fd:91:32:3c:0a:06:1c:3b:69:36:94:ce:
10:7d:19:20:94:ac:d3:71:80:ef:18:04:9f:6f:20:3f:aa:e3:
1e:06:88:26:83:b8:2c:dd:72:e9:21:a7:48:0f:e6:57:f3:fa:
da:2d:60:7b:a9:41:fc:97:41:2b:3c:90:18:3f:28:28:67:46:
da:6c:24:76:c0:c7:bc:66:05:0a:8e:1e:e3:4b:34:07:32:03:
8f:7c:f5:2a:9f:79:55:4b:b4:08:a7:ec:50:27:c3:e8:ed:12:
f1:c6:39:44:61:e2:a3:cc:87:8b:74:79:eb:c4:07:8e:12:4c:
22:3a:d2:ca:fe:89:d0:25:92:1d:2f:76:3b:ed:4d:35:84:18:
a3:6f:56:94:db:3d:e2:88:f2:70:aa:47:6c:90:6b:6c:99:e9:
fc:62:72:fc:77:5e:5b:54:0c:85:59:46:ee:e5:6e:9c:67:94:
69:94:a5:1e:53:59:51:e9:ed:cc:6e:dd:d8:bf:dd:9a:46:78:
56:2b:a2:b5:e6:61:b4:00:b3:4b:32:e4:eb:82:5e:dc:63:4b:
8d:82:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 13:01:07 2024 by rpki-client on console-fra.rpki-client.org