Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wOObfISa9W6n-JZqXwQV69ZbQgk.roa
File: wOObfISa9W6n-JZqXwQV69ZbQgk.roa (raw, json)
Hash identifier: nUNTA0LpKT4ul2nfX7mE5Yr3pu5J4xkbobjlGuXBXZ4=
Subject key identifier: C0:E3:9B:7C:84:9A:F5:6E:A7:F8:96:6A:5F:04:15:EB:D6:5B:42:09
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018673033CF8BC919F0FF7A45F8207859FD0
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wOObfISa9W6n-JZqXwQV69ZbQgk.roa
Signing time: Tue 21 Feb 2023 08:07:17 +0000
ROA not before: Tue 21 Feb 2023 08:07:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 82.163.68.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 08:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:03:3c:f8:bc:91:9f:0f:f7:a4:5f:82:07:85:9f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Feb 21 08:07:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0e39b7c849af56ea7f8966a5f0415ebd65b4209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:22:01:24:d3:04:d8:ce:a2:84:2a:a5:d2:
b6:be:06:9e:18:35:ff:1f:9a:26:c5:31:3f:80:11:
0d:28:4a:80:ac:01:a0:4f:ad:b9:7d:05:41:0a:02:
d6:59:6c:cc:8d:0f:cb:c5:ba:ca:93:b9:60:a3:b4:
20:59:76:fb:ba:09:7d:2d:18:7b:85:85:57:a7:bb:
ee:0f:b3:e7:07:73:7b:ed:70:57:b5:f7:cf:65:8e:
8e:6a:0d:26:86:f4:df:8b:54:49:d4:db:0a:55:e0:
f7:b0:cf:d1:bf:e3:bf:8e:6b:b9:94:88:09:6c:86:
7e:d7:c1:34:81:89:52:ca:9a:4f:47:1e:c6:fa:1d:
fe:57:f7:e9:06:a7:fa:5a:55:e6:f0:64:75:37:28:
b8:83:18:bd:8c:fd:29:ee:09:cf:a1:39:81:b4:a4:
eb:3c:a3:99:83:f7:6d:00:bf:01:5a:b0:25:4b:b3:
85:c3:cc:48:ab:05:a9:f9:ea:75:eb:26:44:02:e8:
6f:62:2e:7d:13:38:d6:55:bd:7d:2b:00:51:07:84:
d4:5b:47:cb:54:d7:26:92:21:0a:45:cd:4c:5b:74:
7d:b4:a5:ae:03:d8:8b:18:5f:13:89:97:6d:58:03:
18:a3:1b:bb:5d:36:5c:51:b3:c8:5b:8f:94:0a:68:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:9B:7C:84:9A:F5:6E:A7:F8:96:6A:5F:04:15:EB:D6:5B:42:09
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wOObfISa9W6n-JZqXwQV69ZbQgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.68.0/22
Signature Algorithm: sha256WithRSAEncryption
43:c6:b7:f1:39:f6:23:18:07:3a:13:f3:da:8c:f6:7e:de:49:
b5:8d:1d:f9:b0:81:d9:d3:66:e7:6f:ee:6a:3e:c9:bd:a8:d7:
99:9c:25:b9:a7:31:62:db:d5:cb:0d:d2:30:15:de:f8:30:d2:
52:77:96:a8:f3:20:77:bf:97:b8:cd:15:2d:c5:f6:31:58:80:
fd:42:f6:53:2d:15:a2:4f:c9:e7:63:f0:70:74:f9:fd:51:05:
31:7e:0c:41:d0:1a:4c:80:f1:65:dc:de:13:5e:9e:ca:85:9f:
57:3f:eb:b5:87:29:af:2f:bb:96:41:f1:5a:b0:07:af:45:6c:
f9:55:9c:81:50:e2:9a:d3:a6:cd:56:fe:66:04:83:15:d4:03:
49:53:03:5c:a0:bb:ed:58:73:9f:19:3d:72:7b:9f:0f:44:4c:
d1:13:6d:f6:e8:65:ed:55:a4:71:ea:97:f0:e6:f7:88:c3:82:
62:39:6e:c7:4d:47:3f:4b:ec:82:50:d1:78:17:16:d0:9b:ac:
8b:4a:3d:cc:57:53:8f:2f:ac:74:ba:5a:0a:5f:79:a0:09:8a:
09:88:e9:29:03:93:bd:45:f6:43:97:7f:91:9e:09:a0:60:12:
66:e9:09:2c:d5:7c:a4:ed:d8:dc:35:2b:c7:45:6b:f7:e1:cb:
bb:b6:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org