Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/o939JrjL3q5RTYh6YSA5Hp0wxiA.roa
File: o939JrjL3q5RTYh6YSA5Hp0wxiA.roa (raw, json)
Hash identifier: 5BVDk0LQL25AZI7eU9wSWv6z6IEDQxXzv1e3NPmXUh4=
Subject key identifier: A3:DD:FD:26:B8:CB:DE:AE:51:4D:88:7A:61:20:39:1E:9D:30:C6:20
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019261D08835028BB31A56734D85274F00F8
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/o939JrjL3q5RTYh6YSA5Hp0wxiA.roa
Signing time: Sun 06 Oct 2024 12:31:49 +0000
ROA not before: Sun 06 Oct 2024 12:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 82.163.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 05:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:61:d0:88:35:02:8b:b3:1a:56:73:4d:85:27:4f:00:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 6 12:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3ddfd26b8cbdeae514d887a6120391e9d30c620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:0c:9c:3f:c2:42:92:ec:fa:b2:53:03:76:
5f:68:f2:db:4c:1f:7e:d5:6f:85:54:13:80:5f:b3:
9a:cf:a0:b1:e4:a5:8b:9e:80:c4:04:73:3d:27:c3:
98:fe:d9:ea:9d:2b:57:1a:ba:ad:73:47:e7:fd:fa:
12:d3:dd:55:0a:b7:c1:bb:c6:98:4f:58:e1:67:e6:
13:b1:9f:e8:9b:19:63:c6:33:6b:76:72:dc:d4:a0:
97:90:b9:90:db:90:ff:53:e8:60:fd:c6:82:ce:d7:
41:4b:0b:cb:1e:50:1d:c9:49:96:27:33:cb:d3:63:
3c:6e:44:af:a1:d8:52:71:9f:1e:b7:b8:36:06:a8:
77:d1:e1:99:79:65:89:88:57:52:c0:47:bc:56:4e:
b4:34:34:4e:61:97:52:ef:3d:8c:55:14:27:5e:51:
d7:a0:a0:94:45:b2:39:1e:8a:32:11:84:d8:93:1b:
e0:ad:8a:61:9a:46:63:7a:15:dc:3b:c2:32:8e:29:
54:83:fd:b2:aa:ed:8c:71:18:14:fa:cc:68:1b:50:
1c:77:0f:a3:c4:d3:c2:9e:26:99:27:fa:80:cb:ce:
a2:72:48:b9:ee:a4:36:d3:bd:27:b8:5b:95:f5:1a:
cf:1b:b2:94:f6:9b:ae:49:3e:f7:ab:36:cb:ee:4e:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DD:FD:26:B8:CB:DE:AE:51:4D:88:7A:61:20:39:1E:9D:30:C6:20
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/o939JrjL3q5RTYh6YSA5Hp0wxiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:a3:d8:6f:20:af:75:9e:08:95:35:69:78:68:b1:f9:3c:ca:
63:48:16:a0:99:ee:46:43:b3:1d:32:17:36:77:56:57:a0:2b:
58:01:89:a5:97:5e:a9:58:cc:c5:c3:20:32:3d:79:e4:62:06:
e5:cf:5a:e3:56:c1:1f:6a:d2:c3:74:32:7c:ad:67:02:63:cc:
01:6c:5d:ae:57:b6:f2:e1:60:d9:ef:5e:a1:89:22:2b:20:03:
f1:97:8b:a1:6d:87:0b:b1:65:03:22:ee:f5:05:0b:99:1e:df:
1c:7e:fa:e1:6a:73:db:6a:53:64:75:e0:e1:ef:ae:a7:f3:04:
f0:75:a4:f4:5b:b2:ac:ef:7f:c7:fe:65:2a:5e:af:5e:72:cd:
37:fe:4b:cb:22:cc:3b:e2:3b:59:88:2e:e4:35:0a:62:ac:e7:
ea:e8:b9:7b:d7:e5:25:a5:7d:24:d8:e0:15:58:d2:bf:92:b1:
6c:43:61:46:fa:a4:b3:1d:d6:c4:56:0d:ae:b2:53:86:c1:52:
b3:0b:71:c7:4f:24:15:5d:8b:9f:0e:7f:ba:19:36:55:5f:89:
79:d8:aa:17:a9:8c:74:b6:e0:97:37:c1:79:a1:16:9c:31:14:
87:a4:31:3a:a1:d9:eb:15:a3:56:36:9f:f6:23:43:53:1d:6d:
cd:a3:bf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 08:19:23 2024 by rpki-client on console-fra.rpki-client.org