Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/X81xniSChiev2uY8w-d7NE2gTjI.roa
File: X81xniSChiev2uY8w-d7NE2gTjI.roa (raw, json)
Hash identifier: pjj/XzK3TsD3Mn9qYAWBz1ska02+afY1VZ4s3PuacPE=
Subject key identifier: 5F:CD:71:9E:24:82:86:27:AF:DA:E6:3C:C3:E7:7B:34:4D:A0:4E:32
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 01880440B5B0D3A2B8E5A6A6299A3AC5EC07
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/X81xniSChiev2uY8w-d7NE2gTjI.roa
Signing time: Wed 10 May 2023 06:02:09 +0000
ROA not before: Wed 10 May 2023 06:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43766
IP address blocks: 82.167.0.0/20 maxlen: 20
82.167.16.0/20 maxlen: 20
82.167.32.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:40:b5:b0:d3:a2:b8:e5:a6:a6:29:9a:3a:c5:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: May 10 06:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fcd719e24828627afdae63cc3e77b344da04e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:48:aa:16:cb:fb:e0:2e:46:ba:40:03:8c:96:
a2:b8:02:d4:dc:fd:35:4c:8d:3a:70:d0:db:28:54:
65:24:66:6d:44:d0:3e:99:2f:ee:e3:d4:eb:d2:27:
96:25:dc:01:4d:f0:7f:f5:2a:8b:80:a6:7d:e3:4c:
5e:f9:a3:78:96:a3:02:d0:8f:1e:4a:0f:28:f3:d5:
dc:9a:ac:1a:ca:a9:93:e8:c4:43:c0:d2:65:20:3f:
cd:af:db:b6:d5:d5:d5:62:b8:75:42:90:44:36:4c:
0d:04:15:14:cd:9f:4b:77:d7:52:00:b3:af:da:ae:
8a:2e:03:ab:7e:19:22:5b:d8:9e:ab:ec:28:b0:45:
d4:d0:56:6d:c8:f3:bc:d1:20:73:d4:9a:c2:4b:7f:
54:04:4c:3d:33:d7:e8:53:9d:59:27:a9:e1:ea:22:
49:28:49:53:f7:43:90:37:ea:38:d1:8f:bd:6a:8b:
f5:f7:e2:b5:5b:f3:fd:30:90:2e:a5:22:79:57:17:
4c:4e:96:c1:32:2b:4c:47:76:f2:96:e3:e5:79:4d:
16:da:69:c2:20:42:04:3e:9c:41:d3:04:75:71:b9:
64:7e:de:4a:c1:86:5f:67:dd:f9:b6:2d:ba:e6:46:
04:0e:cd:54:2a:2e:13:b8:ae:ee:f8:61:88:0b:8a:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:71:9E:24:82:86:27:AF:DA:E6:3C:C3:E7:7B:34:4D:A0:4E:32
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/X81xniSChiev2uY8w-d7NE2gTjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.167.0.0-82.167.47.255
Signature Algorithm: sha256WithRSAEncryption
8d:5f:0a:a9:2b:9e:fe:14:9f:5d:9d:52:89:8f:04:74:8d:76:
02:f7:83:85:5b:eb:89:0e:f9:2b:fc:93:7f:db:52:b0:3f:8e:
5b:79:b6:7f:08:24:2c:55:9b:0f:b6:be:0e:63:6c:17:cd:43:
7c:56:33:5b:7c:02:fd:97:92:7c:27:25:5e:41:1f:bb:f6:e6:
3d:8f:04:a1:51:e0:9b:e6:b2:23:36:ac:1a:c2:94:d6:ba:56:
c5:8f:92:7c:57:86:61:7c:1c:ab:48:95:8a:10:29:e0:2a:53:
97:28:8d:94:cd:75:8c:c0:2f:18:ab:9c:3a:aa:9a:da:27:63:
23:4c:a9:ff:d3:10:d9:2f:30:cc:8e:3e:0c:81:0d:8e:fe:e6:
9c:21:e1:8b:33:02:35:c1:79:93:23:be:9d:86:ad:37:a8:18:
b5:9c:e4:a0:6f:60:21:b8:d5:f5:2b:ca:a9:fe:af:18:f4:8f:
83:6d:2a:0d:1d:4b:49:35:43:94:66:e6:09:ad:3c:de:a2:9f:
f2:b3:84:c5:ee:37:f4:a1:53:ed:a7:dc:67:57:d1:5d:74:11:
f2:c2:5b:df:cd:81:07:68:ff:bb:f3:7f:87:b1:57:ea:d9:8c:
bd:dc:69:30:7c:b3:ba:bb:35:74:b5:42:00:da:0a:55:c1:fc:
06:93:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:59 2024 by rpki-client on console-ams.rpki-client.org