Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/_k0JaYwp2AguroJ9LB-phSKVEus.roa
File: _k0JaYwp2AguroJ9LB-phSKVEus.roa (raw, json)
Hash identifier: MgWQOeTV7Y6z/bPK0HgbjggP+Ko87Yqecc8uoXH19KA=
Subject key identifier: FE:4D:09:69:8C:29:D8:08:2E:AE:82:7D:2C:1F:A9:85:22:95:12:EB
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 018570F0BB3F00A454A18D20C70E4F806A7F
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/_k0JaYwp2AguroJ9LB-phSKVEus.roa
Signing time: Mon 02 Jan 2023 05:25:02 +0000
ROA not before: Mon 02 Jan 2023 05:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8554
IP address blocks: 82.97.32.0/22 maxlen: 22
82.97.36.0/22 maxlen: 22
185.52.32.0/22 maxlen: 22
193.41.72.0/22 maxlen: 22
195.234.46.0/24 maxlen: 24
82.97.0.0/19 maxlen: 19
82.97.0.0/18 maxlen: 18
2001:1b38::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:bb:3f:00:a4:54:a1:8d:20:c7:0e:4f:80:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Jan 2 05:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe4d09698c29d8082eae827d2c1fa985229512eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:69:bb:a5:c4:6d:b0:66:3a:da:c1:14:7c:
22:cd:66:88:ea:1d:5d:c3:c1:8f:b4:81:2d:34:95:
cf:cc:d5:7b:2b:50:ca:9f:1c:d4:c6:41:68:1c:d8:
6d:38:63:8b:33:d1:bf:42:12:ed:26:f5:0d:54:8e:
4f:c3:90:ef:21:4a:3a:b3:e9:9d:e4:eb:36:8a:88:
2a:28:b0:80:c7:24:cd:c3:9b:4c:b8:27:13:57:25:
c8:11:39:b9:f3:55:b3:dc:aa:b5:af:63:d8:4a:66:
d4:dc:de:2a:e1:82:b4:cf:28:3d:6d:60:db:f4:0a:
ec:4d:05:7b:c0:86:c8:53:db:66:5b:25:18:28:03:
aa:72:87:e6:3d:92:53:05:16:2b:25:e5:25:b0:dd:
46:21:6c:74:f4:7d:70:ba:bd:f9:b3:09:71:0d:14:
78:c3:e5:de:ca:c3:37:ec:9f:63:86:24:15:63:6f:
6c:27:7e:55:dc:88:1f:2d:7f:c9:de:26:a0:1f:3a:
c4:da:29:40:97:45:49:67:eb:cf:6f:a9:6e:67:40:
90:47:c7:1f:aa:59:75:08:b1:eb:79:71:6b:e9:b9:
88:dc:8f:f3:88:1f:84:03:d8:8f:a1:7d:8c:dd:33:
e0:c2:35:22:98:d4:84:07:cd:10:33:f7:54:eb:cf:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:09:69:8C:29:D8:08:2E:AE:82:7D:2C:1F:A9:85:22:95:12:EB
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/_k0JaYwp2AguroJ9LB-phSKVEus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.0.0/18
185.52.32.0/22
193.41.72.0/22
195.234.46.0/24
IPv6:
2001:1b38::/32
Signature Algorithm: sha256WithRSAEncryption
33:b4:95:b2:97:62:72:92:ca:ce:8e:f5:da:db:8c:3b:6d:04:
d3:84:09:de:6b:e8:3f:8e:1b:a1:59:1a:3e:82:e0:e3:b0:6f:
fc:df:13:c9:10:6a:b1:37:ae:f1:f6:61:75:5b:cb:cd:a9:bb:
c4:96:c4:24:65:86:1c:f3:c6:6e:34:d2:a2:05:58:ab:73:eb:
bb:b2:b4:40:f5:89:d2:5b:aa:fa:a2:ca:3b:bf:07:1b:b0:49:
02:77:27:4b:47:08:11:e5:6b:e5:fb:55:4e:76:88:b8:da:9a:
43:4a:f0:a3:c0:df:43:72:28:55:fb:41:4c:45:7e:54:11:97:
91:c2:ab:ad:83:68:f4:05:c3:49:47:32:b3:f7:76:cf:c5:d7:
ee:ed:d9:7f:bf:ea:6f:da:52:1c:0f:1d:6d:d6:e0:2f:8a:42:
9c:0c:0b:da:57:5a:50:ec:33:48:e3:f7:87:30:f5:5d:76:a2:
b9:fd:db:e9:ab:ed:10:3e:13:2d:31:35:78:05:9e:e9:1d:d1:
a7:b0:fd:c2:86:46:bb:65:2d:1d:ba:fd:b3:61:4e:9d:00:bc:
71:87:94:cc:24:1d:5d:9e:93:42:6c:70:e3:1e:18:7f:42:86:
1b:55:df:1d:04:2e:da:06:1e:c4:14:fb:c4:86:4f:25:88:08:
1b:f8:0d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:21 2024 by rpki-client on console-ams.rpki-client.org