Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/3ZCHCXScv2RGEnanbTXpT7vhjTQ.roa
File: 3ZCHCXScv2RGEnanbTXpT7vhjTQ.roa (raw, json)
Hash identifier: rKoaiL08Pud+GYoCLlDfRzRRjktKjhhlfMazuFdWR40=
Subject key identifier: DD:90:87:09:74:9C:BF:64:46:12:76:A7:6D:35:E9:4F:BB:E1:8D:34
Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial: 01856C53AD7052085CC86058C1010E8599C5
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/3ZCHCXScv2RGEnanbTXpT7vhjTQ.roa
Signing time: Sun 01 Jan 2023 07:55:01 +0000
ROA not before: Sun 01 Jan 2023 07:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201058
IP address blocks: 82.213.70.0/24 maxlen: 24
82.213.70.0/23 maxlen: 23
82.213.71.0/24 maxlen: 24
82.213.80.0/22 maxlen: 22
82.213.80.0/24 maxlen: 24
82.213.81.0/24 maxlen: 24
82.213.82.0/24 maxlen: 24
82.213.83.0/24 maxlen: 24
82.213.97.0/24 maxlen: 24
82.213.96.0/22 maxlen: 22
82.213.98.0/24 maxlen: 24
82.213.96.0/24 maxlen: 24
82.213.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ad:70:52:08:5c:c8:60:58:c1:01:0e:85:99:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Validity
Not Before: Jan 1 07:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd908709749cbf64461276a76d35e94fbbe18d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:7f:9b:60:db:ac:70:64:f9:f5:56:49:21:
a2:91:98:c9:bc:35:7c:60:ef:70:60:fb:59:ed:f7:
b7:ec:79:00:8d:ad:21:02:0a:20:24:d2:ad:d2:1c:
52:37:85:d7:cc:d3:ff:a4:c7:96:90:7d:59:19:cf:
fe:43:29:24:26:bf:04:8d:2e:6f:f4:51:7a:5a:33:
5a:6b:56:1c:98:ee:d6:3b:88:93:7d:6e:df:33:ae:
25:15:10:a4:94:bf:9a:30:87:0a:04:24:91:d3:31:
34:ac:32:5f:f1:64:8b:65:77:71:76:fb:cf:9c:9a:
29:90:5b:50:8a:a7:1d:32:c3:16:48:d5:86:01:88:
7c:aa:5b:c1:70:ff:59:e5:85:fe:14:18:b3:b1:42:
e0:b6:c6:ce:a3:94:54:74:d8:8f:e7:f0:e7:e6:eb:
1d:02:26:04:1d:88:c2:91:cb:b0:af:75:de:34:f1:
8c:0d:f9:16:d9:61:6a:be:9b:9b:5e:20:01:2c:7f:
1c:0b:37:01:72:0d:6a:15:f3:1c:a4:21:ef:6b:cc:
1e:31:2e:05:7c:52:24:12:b1:80:48:7f:92:34:83:
a7:da:7e:2a:c8:fe:d9:8c:82:9f:e4:dc:cf:44:87:
ec:9d:a9:7a:62:b3:46:aa:35:cb:36:97:b2:92:5d:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:90:87:09:74:9C:BF:64:46:12:76:A7:6D:35:E9:4F:BB:E1:8D:34
X509v3 Authority Key Identifier:
keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/3ZCHCXScv2RGEnanbTXpT7vhjTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.213.70.0/23
82.213.80.0/22
82.213.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:57:12:ea:27:08:42:b0:ae:85:00:4a:02:d4:de:8a:31:5e:
1d:90:36:dc:fa:89:bf:b3:56:54:83:5a:d6:a4:00:ed:48:44:
d6:52:94:8c:bb:90:b7:e1:00:ae:a2:c3:07:21:63:58:ee:be:
1e:f5:8f:ba:f3:dd:2e:08:0a:07:65:ba:54:2b:56:23:ce:2f:
2c:d6:be:7e:16:c1:3a:b2:c4:61:1a:5a:3b:3b:d6:93:89:82:
f2:d3:97:12:10:61:bc:55:e5:e8:2b:5d:98:92:92:46:19:d1:
1f:c5:0d:6f:f6:45:75:f7:7c:7e:4d:ba:44:42:7c:dd:94:2e:
22:b6:00:40:ef:62:cb:03:36:63:59:b7:29:14:27:e8:bc:51:
52:d5:60:a2:e5:1e:1d:22:37:b0:6d:00:7c:b4:70:48:fa:f2:
8b:06:19:d2:91:68:63:de:f0:20:49:85:cc:3b:77:ec:13:02:
8c:05:56:2f:69:b6:88:02:51:1f:58:8a:6e:2e:17:9c:55:45:
89:4e:6e:66:03:f3:94:db:1b:8f:b9:bc:86:f5:f1:f1:11:07:
b3:d9:c3:69:eb:3c:70:52:36:c6:be:01:c1:66:2d:53:7e:8a:
e2:14:53:44:d7:86:b9:f3:99:84:06:48:ff:ea:a0:cd:50:b9:
fe:14:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:49 2024 by rpki-client on console-ams.rpki-client.org