Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Q82asMDrV4n0rzphe1lNxVZOGk8.roa
File: Q82asMDrV4n0rzphe1lNxVZOGk8.roa (raw, json)
Hash identifier: Py2niJSmpf9Kr46XPOOmfBlS/SrQZC3MAb9Qqh0ADp0=
Subject key identifier: 43:CD:9A:B0:C0:EB:57:89:F4:AF:3A:61:7B:59:4D:C5:56:4E:1A:4F
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01882AE114D85C20EA7EFBBB7FA09EFF07F6
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Q82asMDrV4n0rzphe1lNxVZOGk8.roa
Signing time: Wed 17 May 2023 18:02:53 +0000
ROA not before: Wed 17 May 2023 18:02:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 87.246.28.0/22 maxlen: 22
87.246.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:e1:14:d8:5c:20:ea:7e:fb:bb:7f:a0:9e:ff:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: May 17 18:02:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43cd9ab0c0eb5789f4af3a617b594dc5564e1a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e5:77:d0:73:d9:17:7b:eb:fb:ee:8a:55:9f:
f7:77:82:66:09:c7:f5:09:f9:1c:0a:54:62:37:77:
57:fa:58:4d:5f:19:76:b8:e0:35:28:92:94:e6:9a:
23:90:4b:d3:c7:ae:c7:34:2a:7e:0f:ec:8f:88:fd:
47:8d:0f:0b:b0:76:b8:c6:71:53:8e:2c:c5:19:84:
79:b1:11:4c:0b:e2:6d:69:a8:93:78:ac:e0:97:d4:
14:71:9a:c0:70:65:57:49:0c:9b:9a:14:d6:a1:9c:
7a:6a:3b:3c:4e:a9:bd:73:5e:e6:fc:09:4a:c0:98:
54:97:35:5b:7e:5f:1b:2a:49:a3:f2:c0:c4:11:48:
7d:79:2f:52:ac:f8:a3:08:71:8f:62:10:9a:ce:0e:
be:6d:8f:6e:e6:95:c1:09:42:72:b2:9d:9d:d5:6c:
67:74:3d:3d:52:6a:da:02:dd:89:f8:40:99:92:32:
ce:53:d6:91:d9:ea:5f:70:25:26:e7:7e:56:7b:55:
4f:b0:63:93:dd:6a:b1:6b:a6:02:99:8d:ca:6d:86:
1d:10:d1:c7:be:8b:ec:f1:9c:19:8d:1a:84:e1:f8:
90:e6:da:9e:6b:2f:be:2a:ac:01:55:92:2d:ca:8d:
2c:3a:c8:a9:d1:09:39:6b:33:2d:da:78:99:be:b7:
fc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:9A:B0:C0:EB:57:89:F4:AF:3A:61:7B:59:4D:C5:56:4E:1A:4F
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Q82asMDrV4n0rzphe1lNxVZOGk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.8.0/22
87.246.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:eb:33:ff:7d:95:7b:de:44:0c:3d:29:da:50:35:20:ab:ff:
51:6f:b4:4c:95:98:6c:84:ff:bd:10:a0:5c:d7:66:b9:e4:4c:
d3:02:0e:cc:bb:ab:9e:d9:89:98:da:c2:aa:c4:db:33:c7:d6:
b0:aa:59:09:fc:17:6b:91:c1:35:c3:d6:3a:9b:68:2f:b9:be:
0a:c3:1e:e9:97:6a:cc:d0:d5:3f:43:a3:cb:30:da:18:4b:4d:
66:91:d8:71:20:6e:e6:16:1d:8b:fc:5d:7b:d4:94:73:51:5a:
c1:ab:1d:2c:fa:24:be:d8:dd:d6:42:1f:63:69:78:df:21:da:
6c:e9:e8:ae:f9:f2:09:79:b2:fc:be:62:93:43:24:73:91:28:
70:6d:b4:26:d0:6d:4b:69:ae:2b:86:1b:27:0c:91:3c:f5:70:
03:28:dd:69:67:07:ea:02:cd:83:0a:a7:fc:1f:51:5d:ab:b4:
b8:ce:51:c0:d7:10:bd:99:d0:32:71:ea:82:ca:bf:77:45:04:
ce:23:df:1d:17:54:94:ec:c3:f2:f8:69:e7:23:b0:c1:35:d3:
60:97:79:79:81:40:0a:23:9e:86:f7:6d:7d:b0:d7:1b:80:4b:
19:80:17:d5:4e:d9:28:ee:2b:7d:23:6f:f6:92:dd:91:24:12:
29:7e:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org