Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xWM31LZlYxT6kRAjpBD-Y2ntHQU.roa
File: xWM31LZlYxT6kRAjpBD-Y2ntHQU.roa (raw, json)
Hash identifier: QBFbDQFIgpkQIxqib4/03FZCAGtBywoRayILBYE2KK4=
Subject key identifier: C5:63:37:D4:B6:65:63:14:FA:91:10:23:A4:10:FE:63:69:ED:1D:05
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018596EE04CB4A60CA9E89A318CAA7D373E8
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xWM31LZlYxT6kRAjpBD-Y2ntHQU.roa
Signing time: Mon 09 Jan 2023 14:27:39 +0000
ROA not before: Mon 09 Jan 2023 14:27:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 82.163.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 06:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:ee:04:cb:4a:60:ca:9e:89:a3:18:ca:a7:d3:73:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 9 14:27:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56337d4b6656314fa911023a410fe6369ed1d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:20:99:2e:a5:d3:98:59:4f:23:87:4c:4a:
d7:5c:f5:aa:30:98:ab:e3:00:4c:3b:be:0f:a9:fc:
8d:66:5d:74:0a:c2:b2:00:a3:c1:7e:9f:60:c0:32:
ca:f5:2e:6c:8c:6d:ab:0f:76:64:20:a1:50:49:7a:
44:0a:fe:ba:52:b4:75:7e:7f:63:93:94:dc:4c:d6:
b1:11:83:b8:e5:04:99:ab:3c:11:37:d5:fe:98:d0:
fb:9f:02:78:80:84:8d:ab:7b:02:61:1f:33:28:6b:
a0:a3:c5:c5:70:00:5e:e4:0e:66:cb:55:fc:f2:a1:
c0:ce:de:45:5c:40:74:53:08:40:21:f5:ea:9e:bb:
7d:2d:be:d8:ef:a8:69:d4:20:23:2e:09:e1:50:07:
77:d1:0e:50:02:c9:54:d6:73:72:37:02:7f:45:f8:
8a:5f:ec:66:1e:da:9f:30:53:e9:33:e7:9e:46:88:
42:89:47:fa:34:3a:c0:bd:21:c8:f8:ff:2f:2f:11:
1d:64:b5:93:b2:62:81:62:82:e1:32:f3:10:f5:8b:
ad:92:7b:48:c6:3d:40:88:45:a7:85:a1:91:9a:5f:
29:92:e5:a2:40:fe:61:b1:6c:62:ba:73:14:2d:f3:
3d:d1:23:6b:3b:10:d8:9f:8d:ad:46:d0:47:95:4e:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:37:D4:B6:65:63:14:FA:91:10:23:A4:10:FE:63:69:ED:1D:05
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xWM31LZlYxT6kRAjpBD-Y2ntHQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.228.0/22
Signature Algorithm: sha256WithRSAEncryption
74:e1:57:9b:1a:f2:df:02:e6:fd:d3:f0:23:d7:18:1d:6b:8d:
98:20:1a:a4:d8:6b:47:a3:c0:ce:ad:92:93:dd:30:10:0b:23:
36:26:77:59:fb:4d:ac:56:e7:41:35:c5:7b:bf:f3:f9:f7:ac:
4b:26:70:c4:74:a6:3f:7f:38:95:b6:d1:e9:a5:5d:a6:6e:4c:
75:33:17:12:e2:14:73:5b:b2:4d:d3:6d:6f:43:6f:c5:40:66:
82:36:c9:6b:d4:c8:7a:b6:9a:1b:f8:f8:a9:af:7a:b6:0b:c6:
eb:d0:f8:3f:22:1f:b9:52:f5:94:54:89:e3:00:5c:ff:2c:a9:
43:8f:f6:c7:f7:9c:09:4b:f8:ed:be:75:61:dc:12:cd:63:56:
aa:9e:99:dc:90:7b:b7:14:86:74:8a:5e:dd:78:15:18:98:19:
31:6f:b6:3a:2b:2b:38:d8:a4:bf:10:35:2e:69:c1:81:6a:7c:
f4:9c:61:1f:bf:1c:29:43:b4:97:6d:2d:e3:d2:78:20:43:fc:
85:8b:ae:a0:8c:e3:91:9a:7e:db:b3:d3:9d:ac:88:84:a6:ff:
de:fb:08:43:d0:b3:fa:a0:09:f2:27:61:1f:21:fc:5d:81:d4:
2f:e3:cd:2c:ec:cd:21:e4:6d:85:a5:33:76:a0:31:2e:cc:8c:
60:d6:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org