Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/nRIKx_5BzgWN-7wRGObWyKNTRJc.roa
File: nRIKx_5BzgWN-7wRGObWyKNTRJc.roa (raw, json)
Hash identifier: cCk3T4tldVml8opbclOobskmcHdswS9UfZsMlQC3Pw0=
Subject key identifier: 9D:12:0A:C7:FE:41:CE:05:8D:FB:BC:11:18:E6:D6:C8:A3:53:44:97
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018C1B02F66D845471702A9EF964021F2771
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/nRIKx_5BzgWN-7wRGObWyKNTRJc.roa
Signing time: Wed 29 Nov 2023 12:17:08 +0000
ROA not before: Wed 29 Nov 2023 12:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 82.163.54.0/23 maxlen: 24
82.163.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:02:f6:6d:84:54:71:70:2a:9e:f9:64:02:1f:27:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 29 12:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d120ac7fe41ce058dfbbc1118e6d6c8a3534497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:ea:db:26:22:cc:dd:60:d9:04:36:6a:5a:
c4:f4:6b:8e:67:04:4a:61:10:9b:c8:69:07:ab:6f:
6f:31:db:3f:6f:7f:7e:6a:07:b4:64:d4:fd:19:db:
0c:31:45:46:32:d1:32:6c:12:0c:d3:33:3d:82:11:
47:c5:70:15:1d:43:ae:43:81:c4:33:15:9c:b7:df:
12:8c:c4:d9:e8:c0:57:49:c2:99:39:9a:e9:ab:57:
2d:85:77:c4:60:72:a4:ef:24:dc:53:ce:fb:89:0b:
70:53:12:17:33:74:3f:ae:1f:21:5a:22:32:3f:74:
16:83:52:14:f5:1b:64:6a:4e:ee:99:2a:60:c4:da:
4d:4f:76:8f:ed:32:e7:af:0b:fe:6c:bd:4a:79:44:
f4:d3:3e:c0:cd:57:98:78:41:d7:a6:7b:8f:e0:77:
24:80:63:8b:af:a0:a7:c4:5a:78:4c:66:55:32:58:
c9:ac:2e:01:39:f4:36:e4:cb:94:3f:be:8e:bf:2f:
7a:d4:a1:7a:7e:67:41:f4:b1:49:bb:88:bd:e6:1a:
19:fb:2b:c8:c1:c4:13:17:7c:1a:25:75:52:b1:96:
23:9f:75:12:d4:be:10:1a:24:43:18:7a:01:cb:5a:
38:f0:37:06:26:21:39:c5:66:5b:f3:1f:07:6a:a8:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:0A:C7:FE:41:CE:05:8D:FB:BC:11:18:E6:D6:C8:A3:53:44:97
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/nRIKx_5BzgWN-7wRGObWyKNTRJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/22
Signature Algorithm: sha256WithRSAEncryption
48:92:11:9d:da:69:5a:72:78:e7:05:fc:c9:0a:b1:46:88:b2:
a3:0e:1d:07:b4:21:94:f0:df:3c:a7:46:e8:1d:16:41:61:77:
bc:73:0c:38:b3:1b:8e:b4:c8:0a:68:27:5a:ff:29:84:d2:9a:
16:9a:68:67:a7:ab:c0:a1:4f:5d:5c:5b:ae:22:cb:57:77:31:
cb:8f:f9:01:3b:42:7b:17:ee:af:6a:47:d5:17:3f:d0:b8:05:
12:12:fa:98:bf:fd:69:44:37:c9:3e:68:68:e1:4d:e0:b4:79:
67:c9:1d:1c:32:cb:99:85:5c:96:39:06:28:82:9e:38:50:45:
05:a3:bb:31:97:57:1e:98:cf:2c:24:be:f3:12:00:c8:18:18:
da:c8:a9:6e:12:f5:95:eb:a0:3c:e4:f4:47:e0:d6:b1:7b:e9:
9d:c0:32:3f:61:6e:a5:5d:3b:51:85:d0:95:e7:51:7a:6a:73:
89:c1:f1:ff:12:d7:0d:fa:a0:4e:db:3f:39:70:ad:e6:ec:8c:
ab:04:c3:75:b3:33:e1:8d:24:47:8a:cb:d0:82:7e:5b:c3:f4:
8a:75:cc:94:50:66:38:0b:54:6d:d9:29:e2:f1:8e:e9:b0:f3:
c5:3f:68:e8:9d:f7:8b:93:0c:79:52:6e:8d:b3:53:77:cd:48:
7a:21:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org