Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/82zaXheYbteCwjZ0OyjEQ5uzUzk.roa
File: 82zaXheYbteCwjZ0OyjEQ5uzUzk.roa (raw, json)
Hash identifier: 124WJNyL159tdlrrYi8BYZ4k3Ah2y055cBWHnRBIWYk=
Subject key identifier: F3:6C:DA:5E:17:98:6E:D7:82:C2:36:74:3B:28:C4:43:9B:B3:53:39
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 018570D543168E6800BE649D79028CA17DC7
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/82zaXheYbteCwjZ0OyjEQ5uzUzk.roa
Signing time: Mon 02 Jan 2023 04:55:02 +0000
ROA not before: Mon 02 Jan 2023 04:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.200.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:43:16:8e:68:00:be:64:9d:79:02:8c:a1:7d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Jan 2 04:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f36cda5e17986ed782c236743b28c4439bb35339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:67:98:74:05:41:06:79:14:f7:e7:97:02:
04:b4:f8:be:16:42:e8:d0:f1:35:c5:30:91:dc:c3:
69:fb:01:ad:0a:40:24:ea:4b:3c:5c:56:e2:29:e7:
cb:a7:1f:4a:f3:8b:0c:10:ec:85:a8:4d:f0:6d:09:
4a:b0:84:82:10:32:26:a3:1c:b5:56:6e:ad:86:bd:
cd:21:7b:2c:25:21:34:ee:37:f0:7c:26:47:38:53:
b5:ba:f6:31:bb:01:1e:e5:08:05:69:4a:2e:1f:f7:
dd:fe:18:28:85:46:69:32:61:d3:bf:42:6c:60:33:
72:92:74:46:12:05:91:30:32:b9:7a:05:00:d9:72:
48:ce:ae:84:6f:32:cd:fb:b9:8b:c0:15:a7:89:24:
bc:10:c0:d8:49:ca:f6:4c:0f:02:ad:a6:f1:12:82:
61:3e:1e:cb:ef:69:56:ce:83:53:37:23:14:ea:f1:
e9:b6:8a:69:50:91:93:1b:10:7d:a1:d1:bc:68:28:
88:54:64:10:ab:a3:0e:88:74:ae:06:05:ab:17:89:
74:be:e1:bb:5b:14:9c:43:e1:f0:d5:61:db:77:65:
d9:9c:f1:76:96:57:2c:12:22:4b:4f:29:ff:2c:ba:
44:44:54:ca:8d:ac:dc:4a:7d:e6:60:78:1b:2d:a2:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6C:DA:5E:17:98:6E:D7:82:C2:36:74:3B:28:C4:43:9B:B3:53:39
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/82zaXheYbteCwjZ0OyjEQ5uzUzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b0:e1:f6:4a:6c:fb:ab:e2:d3:0d:e7:93:3e:96:15:bd:9c:
bb:77:d1:81:2d:5b:22:d5:9e:25:f2:14:a0:26:25:a7:35:d0:
ac:73:95:3a:a7:84:fe:72:40:27:b7:e1:fd:2b:eb:57:d6:d3:
0c:b8:42:17:79:13:8d:49:31:7a:fd:9c:6b:b8:79:26:a7:d2:
30:b0:cc:38:d1:6e:86:93:cc:f7:65:a4:66:33:fc:d6:bb:ff:
c8:0f:55:66:a6:ca:05:a0:ea:bc:dc:a8:b2:50:e5:3e:f0:75:
75:2d:9e:a9:f2:47:a5:bd:45:a5:bb:9a:83:7c:33:8b:cb:88:
25:23:f9:4d:f2:0f:90:39:06:7a:ad:48:89:94:3d:49:d9:a5:
63:99:a4:19:43:85:95:a6:ae:5c:ea:1d:2b:46:bd:24:a6:e7:
10:0d:6d:9d:09:d6:24:6d:be:ec:1d:af:d5:7c:15:33:6c:59:
66:a9:65:8b:37:36:69:1e:94:d6:33:72:84:5b:e7:0b:21:47:
ad:5e:37:88:fe:03:e0:94:2f:1c:cb:d5:75:49:05:2c:aa:32:
87:5a:c9:ec:d6:87:15:f9:b8:22:a1:c8:e8:55:f6:51:ed:ab:
ea:52:99:c5:60:e1:40:9f:22:75:f9:a8:2b:7e:60:04:94:0d:
1a:97:01:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:31 2024 by rpki-client on console-fra.rpki-client.org