Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/1-iX9ou94953ZPMaY4mXa25v6hxM.roa
File: 1-iX9ou94953ZPMaY4mXa25v6hxM.roa (raw, json)
Hash identifier: HxF7UMOYFq9Z4+AztedwA5INXT2cbnR+4bW+hX1sxwY=
Subject key identifier: FA:25:FD:A2:EF:78:F7:9D:D9:3C:C6:98:E2:65:DA:DB:9B:FA:87:13
Certificate issuer: /CN=335e725cacf83c97f457a56762cf846d643117cd
Certificate serial: 01857230ECAE104B0B7761304C623232E487
Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/1-iX9ou94953ZPMaY4mXa25v6hxM.roa
Signing time: Mon 02 Jan 2023 11:14:46 +0000
ROA not before: Mon 02 Jan 2023 11:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 82.98.128.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:ec:ae:10:4b:0b:77:61:30:4c:62:32:32:e4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd
Validity
Not Before: Jan 2 11:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa25fda2ef78f79dd93cc698e265dadb9bfa8713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:5c:1b:73:a2:9e:8a:b0:4a:e7:25:3e:8e:
a2:71:0e:bf:78:33:d4:ad:0b:1b:fe:a4:73:c0:8f:
94:01:19:e4:61:14:14:b8:3d:7d:79:72:84:48:44:
3e:fd:42:64:1e:30:fe:7a:3e:a7:a9:75:14:3e:fe:
23:c1:72:f4:a2:cd:78:04:a0:55:07:9d:80:36:e6:
a4:a0:3c:ca:72:02:69:61:ff:59:b5:49:7b:af:7b:
6c:00:cd:3a:35:54:f9:ae:23:e6:60:d0:10:54:61:
03:6f:c9:04:5e:1a:23:67:30:99:c7:6f:9b:6e:3c:
00:12:0f:ab:a4:b9:61:70:d8:1e:d2:2c:ed:aa:04:
e1:24:60:e4:ee:2d:c3:d0:c4:03:66:5e:79:f9:8d:
0e:20:a0:61:9d:65:4c:b3:6d:6c:fb:a8:25:74:11:
89:19:d0:14:d9:ae:7c:a0:f4:44:77:86:15:2c:3c:
ae:6d:b4:a6:26:98:88:f3:7b:32:37:7b:15:4a:cd:
75:65:68:cf:2c:a2:17:61:a4:72:bb:1e:14:09:2a:
c5:13:c5:29:85:0c:4e:3d:67:08:c1:1e:ad:c2:7c:
8c:2e:17:13:bb:f7:84:17:04:b2:f8:f9:95:74:20:
e7:5d:03:7e:4b:1f:b5:08:3f:ea:be:4b:d8:21:bf:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:25:FD:A2:EF:78:F7:9D:D9:3C:C6:98:E2:65:DA:DB:9B:FA:87:13
X509v3 Authority Key Identifier:
keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/1-iX9ou94953ZPMaY4mXa25v6hxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.128.0/18
Signature Algorithm: sha256WithRSAEncryption
62:a0:c7:80:21:24:d8:39:84:44:ad:c6:19:6f:08:98:99:43:
69:5f:e0:53:e1:ac:07:47:38:be:6c:94:71:a6:1d:78:4f:75:
6c:4a:d7:8f:39:56:33:b9:36:ca:f7:d4:8a:d6:b1:2f:ec:34:
79:af:78:0f:29:8e:02:5c:14:f3:39:0f:28:15:4b:60:84:32:
b3:77:b1:d5:3c:65:bd:6c:32:25:8b:b3:91:cd:b7:af:d2:69:
db:58:a6:c1:6c:34:9b:29:62:a8:62:35:d0:fd:11:c9:20:55:
10:ca:b5:76:81:8f:01:3e:e8:ff:11:77:b9:31:59:92:5e:25:
b2:85:80:ce:d3:fb:1a:4d:72:b4:4d:01:9c:51:f9:bd:c3:8f:
81:af:a6:3e:3c:b0:69:43:0a:98:12:99:db:ad:30:7e:04:8c:
4d:21:65:55:c9:be:00:39:5a:49:8d:e2:ab:dd:39:5d:63:84:
a4:2f:01:dc:5c:fc:85:82:bb:ec:73:00:2b:17:45:7b:02:4e:
d1:7d:10:14:10:32:ee:d4:36:6f:b3:a5:a0:dc:74:ef:84:be:
fd:39:d9:75:42:f5:5c:a5:a7:5b:4b:e3:83:e9:9c:b1:c4:a4:
aa:13:bd:eb:df:9b:52:9b:77:24:70:0d:fc:62:7c:9c:83:d2:
55:a6:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:03 2024 by rpki-client on console-fra.rpki-client.org