Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/82iP_eJCbTsRbbWChwWZ11y7JWU.roa
File: 82iP_eJCbTsRbbWChwWZ11y7JWU.roa (raw, json)
Hash identifier: 3Bbpaxri2Go0M+ou7EgDNAzVRtp1o7jPwkBtizlPS7M=
Subject key identifier: F3:68:8F:FD:E2:42:6D:3B:11:6D:B5:82:87:05:99:D7:5C:BB:25:65
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 0185708CD054D6CFB2A75B94E3BAF02D4C7D
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/82iP_eJCbTsRbbWChwWZ11y7JWU.roa
Signing time: Mon 02 Jan 2023 03:35:54 +0000
ROA not before: Mon 02 Jan 2023 03:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 94.126.248.0/21 maxlen: 21
87.237.168.0/21 maxlen: 21
87.237.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d0:54:d6:cf:b2:a7:5b:94:e3:ba:f0:2d:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Jan 2 03:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3688ffde2426d3b116db582870599d75cbb2565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:b1:02:e6:26:23:4a:4e:e1:74:53:66:b3:
d7:32:45:6f:8a:5b:dc:85:a7:56:66:d9:24:ab:bb:
04:77:bf:de:22:57:48:77:f6:96:59:18:b0:dc:75:
2e:c6:24:99:a6:5b:47:d3:81:8e:75:19:1d:41:63:
52:3e:db:c7:39:9c:60:88:c4:15:ce:c5:71:5d:4c:
b4:61:01:58:f5:ef:09:f1:6b:80:f1:b0:27:40:23:
9c:f4:2b:cd:8f:d8:e5:91:da:92:67:59:b3:83:3b:
2e:78:01:e0:a7:18:de:45:94:39:01:da:54:10:2b:
03:33:92:ce:45:47:14:af:03:e8:0e:50:bd:59:0b:
47:1a:b5:20:20:5e:aa:57:8d:81:d8:86:27:a0:d5:
f0:e3:6a:6d:46:6d:78:9c:5d:f5:b6:90:9c:ca:44:
e6:0c:90:a4:1f:66:50:f4:e9:42:82:9b:6f:db:f3:
52:99:27:c5:4b:d1:5a:f5:7e:3f:48:f1:13:ba:b4:
93:6c:82:90:58:ca:c3:5c:2c:ad:f8:4c:13:6d:54:
84:d8:a5:80:10:ab:67:4c:e4:ba:8d:2d:b5:d4:66:
1f:55:d8:98:3d:d9:d8:b4:ad:9b:fa:9a:0d:6a:04:
d3:80:e9:46:34:d1:d2:44:89:75:87:ed:47:dc:b9:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:8F:FD:E2:42:6D:3B:11:6D:B5:82:87:05:99:D7:5C:BB:25:65
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/82iP_eJCbTsRbbWChwWZ11y7JWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.168.0/21
94.126.248.0/21
Signature Algorithm: sha256WithRSAEncryption
cd:63:1a:6e:3d:00:5a:b6:31:29:eb:93:56:4c:6a:87:f4:8e:
99:10:e9:4c:57:58:9d:41:cb:81:01:c6:0a:8a:ec:0f:2d:69:
a7:b8:57:79:ab:d6:0e:79:63:b7:7f:0e:90:82:18:17:6c:c0:
93:bf:1d:ba:99:d2:04:74:4a:e0:5e:c0:52:69:8b:f2:3b:e9:
ff:df:53:49:a3:54:ab:52:fc:eb:5a:44:30:93:d5:6a:7d:13:
24:4a:a6:73:f2:cc:8f:92:41:de:10:04:c5:d9:5e:03:c2:3f:
75:5d:eb:a1:35:b3:a6:b0:14:09:25:88:de:0d:30:26:d6:ab:
7e:c3:ba:3e:77:54:d3:9d:48:71:4a:71:18:bf:9b:c2:0b:b7:
c2:a0:66:7a:2c:85:30:35:29:11:7b:ca:f3:fc:d0:b4:4a:19:
0c:d9:49:df:91:e4:89:b8:f6:31:7e:c1:1d:a4:ca:a8:f7:68:
d7:c1:7c:60:23:8c:15:3a:1e:c8:58:d6:5f:5d:14:93:b6:0c:
2a:c5:7d:cd:f3:c8:10:34:48:5a:a0:3e:ed:fe:f8:dd:f1:66:
f0:99:88:98:ff:58:37:64:ec:29:f0:2d:c7:c3:6b:2c:cf:eb:
bc:43:24:67:e8:68:09:94:7c:df:3c:8a:bb:95:e4:71:2f:f2:
ff:17:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:12 2024 by rpki-client on console-fra.rpki-client.org