Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/7jL2P_O7fy03mybC_IlPvg_3rPg.roa
File: 7jL2P_O7fy03mybC_IlPvg_3rPg.roa (raw, json)
Hash identifier: anylyiIJ6LQr2kjDBOM5ILe4JeCu4oFeVVaXjwHcA/w=
Subject key identifier: EE:32:F6:3F:F3:BB:7F:2D:37:9B:26:C2:FC:89:4F:BE:0F:F7:AC:F8
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 018F2F9163492D4B6C90C103F307E031BE09
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/7jL2P_O7fy03mybC_IlPvg_3rPg.roa
Signing time: Tue 30 Apr 2024 15:13:28 +0000
ROA not before: Tue 30 Apr 2024 15:13:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272809
IP address blocks: 82.86.64.0/22 maxlen: 22
82.86.68.0/22 maxlen: 22
82.86.72.0/22 maxlen: 22
82.86.76.0/22 maxlen: 22
82.86.80.0/22 maxlen: 22
82.86.84.0/22 maxlen: 22
82.86.88.0/22 maxlen: 22
82.86.92.0/22 maxlen: 22
82.86.96.0/22 maxlen: 22
82.86.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 08 May 2024 08:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:91:63:49:2d:4b:6c:90:c1:03:f3:07:e0:31:be:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Apr 30 15:13:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee32f63ff3bb7f2d379b26c2fc894fbe0ff7acf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:51:2f:5a:c0:28:6a:54:40:8d:dd:23:e5:
95:81:76:9c:4d:d1:30:cf:08:01:b0:0c:7b:20:f1:
0a:d3:8b:fa:67:bf:a2:6a:86:3e:ee:2c:60:9a:77:
ac:87:5f:fb:c5:df:e7:d9:2d:24:0d:70:2c:e8:34:
fb:3a:e2:a5:73:38:4a:cc:4c:af:5a:bd:29:81:25:
0f:a7:0d:62:09:89:ef:0d:42:a8:71:8b:cf:69:34:
ab:5f:8b:55:5a:3c:3d:ff:22:e6:90:ff:5a:f1:92:
c8:27:43:70:d1:72:5c:14:74:64:ae:09:59:51:ca:
d3:e1:d6:18:d5:87:b3:b0:9c:6e:01:99:02:5c:96:
13:2b:4a:fd:d9:66:2b:ed:c2:88:92:66:dd:d5:98:
fb:90:e4:68:e0:9b:4e:0f:ea:6f:7f:25:d2:47:92:
03:28:7f:46:21:45:e8:bd:0f:64:ad:c8:37:5c:a5:
e2:4c:9c:bc:36:e4:9c:51:c7:2d:c4:b2:ee:8f:22:
50:aa:a6:0d:ea:4f:6f:aa:81:7e:05:2a:73:02:79:
c8:ae:10:68:4d:25:79:7e:a7:e7:b9:2c:0a:b0:ed:
4f:7c:6b:e3:6e:e4:ef:04:f1:d4:0c:9e:49:c8:1a:
0a:c8:ab:28:0a:0e:ea:bc:e7:77:cd:d6:a5:94:dc:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:F6:3F:F3:BB:7F:2D:37:9B:26:C2:FC:89:4F:BE:0F:F7:AC:F8
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/7jL2P_O7fy03mybC_IlPvg_3rPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.64.0-82.86.103.255
Signature Algorithm: sha256WithRSAEncryption
2f:df:b4:77:97:3b:22:6e:94:d6:0c:6c:7b:e3:72:84:7c:cd:
db:a9:f3:03:ce:66:31:45:73:71:d3:b3:4c:ec:98:86:49:5d:
77:75:71:d9:d3:1c:9e:99:75:b6:95:d2:38:ce:2b:cb:92:8e:
9b:c8:0d:c0:d5:87:5b:a0:8e:85:58:7e:f0:d4:ad:ba:16:72:
04:54:41:33:2a:58:7d:92:0e:6e:fe:64:f0:de:99:f6:c4:6b:
87:5b:3b:a4:0f:39:04:1b:2f:a0:d3:b7:84:51:34:d7:ff:9f:
76:cb:be:b2:d0:0f:f6:e8:8b:fc:25:63:d4:5a:15:d4:57:1b:
2d:cb:38:51:aa:ad:8e:23:c2:f7:50:cc:af:cf:28:ca:54:f8:
7e:1c:5a:c3:fb:29:34:4b:f9:d4:82:14:ca:d2:84:39:0f:3d:
94:52:12:9c:9f:b9:49:c1:53:6e:5a:b0:9a:95:1a:d0:3a:75:
1c:07:5f:75:fc:ca:81:22:1a:fd:8a:27:a8:70:48:64:b3:11:
4b:ec:04:4e:41:7c:cb:fa:9d:3f:27:12:6b:4d:cf:3d:10:db:
d4:3c:e2:06:cc:18:81:92:26:2e:57:c2:98:5e:b6:46:06:ed:
34:c1:9f:3f:68:1a:71:5d:db:08:8c:99:27:d9:d6:e9:1e:b5:
9f:ac:d5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org