Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/r9WZgXHJYMzi3L89S-sUF1FVd-I.roa
File: r9WZgXHJYMzi3L89S-sUF1FVd-I.roa (raw, json)
Hash identifier: oP6XeZsJXd68E7Xltxhlnj2sTQbgqCO7Zzq91kjxN+w=
Subject key identifier: AF:D5:99:81:71:C9:60:CC:E2:DC:BF:3D:4B:EB:14:17:51:55:77:E2
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 01856ED4BB28130ECCA2B1AEBA95F17E2A65
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/r9WZgXHJYMzi3L89S-sUF1FVd-I.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212282
IP address blocks: 185.220.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bb:28:13:0e:cc:a2:b1:ae:ba:95:f1:7e:2a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afd5998171c960cce2dcbf3d4beb1417515577e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:0d:85:83:bc:f8:c5:30:91:bb:5b:97:74:
42:d1:21:db:f0:95:2b:46:bf:f4:d1:89:8f:e0:4e:
0d:7e:0b:f1:c7:58:1c:3d:db:b7:ed:f7:ac:65:78:
10:40:7c:ac:d5:6b:1a:c3:4e:cb:cd:aa:91:a3:a1:
e9:1e:9a:a8:70:80:2b:0f:63:b3:5c:3b:4e:7c:4e:
50:6e:9c:4b:44:14:7a:a3:d9:eb:dd:ad:d3:d6:19:
90:e6:95:21:98:e9:d3:89:cd:b3:0e:c9:b0:75:c8:
86:f7:ea:05:d6:b4:df:c2:25:37:bf:87:b4:8f:34:
ee:62:51:d1:d9:e3:78:e2:92:9c:37:f4:b8:b9:86:
88:46:3f:1d:df:0a:44:b4:08:eb:0f:47:2e:bc:5f:
af:45:40:08:17:0d:f1:25:e1:a3:ed:8c:cc:1d:4f:
f3:9d:4d:b2:95:8e:ef:db:e4:1c:97:da:d3:7c:45:
df:bc:50:b4:38:2a:7f:1d:67:eb:7f:63:31:07:6e:
42:58:e2:a9:bc:31:54:6d:a4:d9:3f:9d:1c:71:42:
30:c8:96:a3:2c:d0:b0:69:62:a7:e4:54:3b:63:29:
d5:c7:a4:a8:06:9f:75:64:a2:e2:43:c4:1f:37:08:
0d:1f:95:03:97:db:8c:a0:80:5a:ad:03:24:a9:cd:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:99:81:71:C9:60:CC:E2:DC:BF:3D:4B:EB:14:17:51:55:77:E2
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/r9WZgXHJYMzi3L89S-sUF1FVd-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3e:cd:ef:e9:e5:83:41:f6:10:6a:71:3e:93:2d:6d:21:ee:
eb:8b:a7:bf:5a:e9:66:61:16:a0:54:78:7f:1d:5e:c7:36:4d:
ec:ee:20:c6:aa:35:37:8b:aa:1b:0f:17:1f:5a:d9:8f:7b:8a:
4b:9c:fc:30:24:8b:9b:ab:f2:72:b5:13:0d:88:5c:03:9c:ba:
36:dc:f8:f1:d8:05:a2:b3:e1:53:08:0c:2c:1e:03:f1:f0:4b:
85:95:3d:c8:d6:50:bf:69:6d:1e:cf:26:d4:ca:32:11:fe:1e:
ec:df:02:4d:46:9c:9c:62:1d:86:fd:21:e1:26:ee:d3:cb:c5:
25:90:9e:a3:64:18:13:bd:bf:69:d4:0a:cb:82:95:76:c9:08:
4c:23:f0:e5:94:43:0c:83:29:8c:3b:60:b6:94:41:a5:61:42:
43:97:b9:1f:01:ee:e7:d4:fd:1f:10:97:78:10:7b:f0:0f:2a:
72:c3:59:20:31:d7:70:b4:39:af:34:42:01:ff:d9:92:64:16:
c5:eb:26:51:f6:d8:7c:4f:71:a9:8d:70:ab:ae:5a:5e:52:b4:
20:31:28:5b:81:79:d5:8c:15:f2:aa:4b:34:c2:91:89:78:71:
07:1a:dd:5e:39:c5:02:6a:bb:f1:39:7d:c9:42:53:d7:03:b0:
7a:65:5a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:13 2024 by rpki-client on console.sobornost.net