Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/i16tqDyGPildBLKyDFyndlevQRE.roa
File: i16tqDyGPildBLKyDFyndlevQRE.roa (raw, json)
Hash identifier: jQKDs9yUtcsDgdgeO1Gjbfc0nJaLeYCI3ARkl1aYK1k=
Subject key identifier: 8B:5E:AD:A8:3C:86:3E:29:5D:04:B2:B2:0C:5C:A7:76:57:AF:41:11
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 0189B0358C541BC2CA4B109B52FDAF2D6217
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/i16tqDyGPildBLKyDFyndlevQRE.roa
Signing time: Tue 01 Aug 2023 08:27:26 +0000
ROA not before: Tue 01 Aug 2023 08:27:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207503
IP address blocks: 82.193.248.0/24 maxlen: 24
82.193.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:35:8c:54:1b:c2:ca:4b:10:9b:52:fd:af:2d:62:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Aug 1 08:27:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b5eada83c863e295d04b2b20c5ca77657af4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b5:57:02:d1:e2:06:81:9d:0c:82:26:3d:1b:
34:7c:e8:ae:46:80:af:f8:7f:2a:89:62:4c:86:e7:
02:24:1a:95:04:e2:5c:46:a2:51:2f:85:f1:93:25:
39:3a:a2:bc:6f:59:6b:15:83:92:a3:44:ce:a9:3d:
3d:22:7a:0e:1d:fd:e0:7b:f9:2a:7b:9f:aa:fa:5f:
d0:a0:b2:7c:93:57:94:67:b9:0c:30:a1:a2:21:9e:
63:0f:90:98:1b:06:3c:39:4a:9c:61:bf:bf:2f:ed:
87:62:79:ba:d1:64:4b:61:da:71:ba:64:a9:6e:cb:
41:69:b3:0a:b6:9f:f2:06:cc:48:34:42:d3:cf:72:
8a:1b:e9:72:67:15:27:82:6f:af:ef:56:7a:b5:f1:
62:ca:8f:94:29:75:d2:d1:e5:85:19:d9:11:6b:0c:
a0:c6:f0:31:5b:1e:45:8c:26:4c:dc:22:e5:a7:01:
4a:86:9e:e8:0c:c7:a7:0d:37:ef:cb:70:4b:4a:23:
c1:df:81:d3:e0:6a:98:bf:35:55:27:00:8a:8f:84:
49:3f:91:e8:a8:bf:96:74:aa:14:87:e2:7e:0c:2d:
c1:20:27:20:b0:9e:67:6c:54:4e:9a:30:01:f8:88:
22:79:45:02:01:e6:80:5b:fa:de:5f:50:f8:43:a2:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5E:AD:A8:3C:86:3E:29:5D:04:B2:B2:0C:5C:A7:76:57:AF:41:11
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/i16tqDyGPildBLKyDFyndlevQRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.248.0/24
82.193.254.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f7:fe:11:de:84:a1:7b:c2:f3:9e:28:0f:59:72:93:a5:9c:
dd:e8:03:4b:0e:f8:ab:dc:ba:52:d3:d8:d7:ed:74:ca:34:c1:
b6:3d:54:e9:65:16:08:67:37:09:a6:39:d9:1c:60:66:51:c1:
21:04:8c:9b:75:44:dc:0b:01:ed:88:b1:50:55:d7:24:8c:53:
09:7f:8f:21:6c:18:b4:9c:df:5a:7c:c3:88:cb:f0:53:64:3b:
17:ca:25:76:a2:82:23:17:99:5d:90:cc:36:63:c2:dd:1e:44:
c8:0e:92:e8:b5:98:99:2a:3b:ff:f1:e4:c1:38:4c:22:99:44:
02:37:82:e4:e2:36:ec:1d:f2:a1:04:cc:02:c6:07:27:44:60:
da:be:ee:b8:f4:82:20:d9:f8:93:eb:72:fe:b9:c4:79:ce:46:
74:17:09:49:88:77:aa:07:5f:8f:30:6b:c1:36:92:af:46:40:
9b:c6:a6:ad:9a:46:f5:22:4f:73:74:d1:7a:8c:01:ac:79:fd:
30:51:97:83:eb:fc:93:de:60:67:2b:cc:77:31:c0:79:09:63:
8a:d3:99:57:5b:a2:0a:07:3f:ef:bf:5c:5a:93:d7:b7:60:a3:
37:6f:39:24:ec:4e:b6:75:4d:1d:81:6c:15:12:6a:f6:d9:5f:
43:84:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 07:48:56 2023 by rpki-client on console-fra.rpki-client.org