Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/L21XeG9bvxJLhGBW_eenkP-xPOc.roa
File: L21XeG9bvxJLhGBW_eenkP-xPOc.roa (raw, json)
Hash identifier: zaDIPBBr/9wvAnUNB4oFKyiNr6ATyCLcX1hUrl8PpcQ=
Subject key identifier: 2F:6D:57:78:6F:5B:BF:12:4B:84:60:56:FD:E7:A7:90:FF:B1:3C:E7
Certificate issuer: /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial: 01856F700BA07704EDB1D8294C30F15A207F
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/L21XeG9bvxJLhGBW_eenkP-xPOc.roa
Signing time: Sun 01 Jan 2023 22:24:52 +0000
ROA not before: Sun 01 Jan 2023 22:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3268
IP address blocks: 82.116.192.0/19 maxlen: 19
82.116.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:0b:a0:77:04:ed:b1:d8:29:4c:30:f1:5a:20:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Validity
Not Before: Jan 1 22:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f6d57786f5bbf124b846056fde7a790ffb13ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:21:c1:14:ed:f0:ee:18:be:d7:0a:f4:18:
34:bd:ad:81:f6:75:ea:f9:70:6f:0d:35:f8:f6:e2:
e1:27:f0:2c:1e:80:c3:5e:89:d5:11:d2:8c:8c:cc:
3b:30:7d:a6:20:11:05:9d:fb:35:d9:47:58:70:cc:
b2:f0:e4:c9:fd:db:66:44:69:43:b9:60:ab:61:8c:
59:11:08:a8:3a:18:46:58:d3:ad:9c:26:43:a6:0f:
a7:36:79:24:5d:f9:14:66:bb:61:3c:6c:f3:df:14:
ef:ab:1c:b4:41:d7:34:dd:3b:13:95:36:d2:30:f3:
76:51:66:b7:4a:48:e3:2f:e7:37:61:2e:61:44:0f:
22:08:2c:bf:c3:28:8b:64:5f:1f:a4:6e:1b:a6:d8:
06:e7:ff:a2:85:12:54:c7:fb:4b:c3:59:7f:ec:9e:
8d:15:67:41:98:7f:0a:90:f0:14:47:01:0d:7d:73:
20:6b:5f:3d:a6:0a:89:38:8e:2a:89:ae:ce:d2:44:
fe:b7:87:e7:a2:34:e6:99:74:63:fc:65:25:3d:cd:
1f:74:3b:38:0c:32:c9:11:aa:fd:6d:ed:f0:75:eb:
c2:c0:41:f2:d0:97:af:68:62:44:6e:1c:ec:55:43:
54:5d:8d:98:ab:9f:f3:3d:ea:45:dc:bc:22:54:6a:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6D:57:78:6F:5B:BF:12:4B:84:60:56:FD:E7:A7:90:FF:B1:3C:E7
X509v3 Authority Key Identifier:
keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/L21XeG9bvxJLhGBW_eenkP-xPOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.192.0/19
Signature Algorithm: sha256WithRSAEncryption
66:2b:07:41:7a:cf:4a:93:d1:f9:c0:19:df:d2:9d:35:35:f3:
b1:aa:8e:ce:72:d1:f2:42:ff:db:95:55:2a:ba:b5:c9:a5:a8:
ac:fe:a6:aa:12:67:29:0d:c6:15:19:80:39:7f:21:b7:88:7b:
b0:88:3f:50:3d:fd:a1:1c:6c:e9:d3:57:7e:91:5a:5a:b2:b1:
78:d9:2a:e4:cd:1f:3c:9b:6a:25:b2:47:7f:85:a2:b9:11:d9:
22:5e:4c:4c:e0:02:80:13:db:5f:7a:c2:3e:ba:7e:d6:80:4e:
f9:2b:3a:00:fe:65:1a:78:e4:b8:61:f4:0b:9f:d6:98:c5:cf:
fd:44:30:51:88:67:23:fe:23:ac:ac:13:57:0e:a6:2d:8e:06:
7e:7f:99:6c:d2:05:15:d0:9b:b7:85:f1:b5:9f:24:4c:fa:bf:
32:b9:7a:2a:b0:20:f3:e4:e3:66:27:0e:c5:22:25:d4:04:e3:
46:8c:12:91:ef:ac:e7:3e:1d:b8:97:d4:94:3f:b0:b7:08:6b:
ba:80:20:a5:47:7b:32:30:1d:ed:b6:1d:d6:6b:04:a4:78:58:
00:69:c4:09:41:4c:43:98:0f:b6:fc:67:93:16:2a:b4:b2:39:
00:6e:04:65:a0:66:dd:65:f4:cc:ee:8f:c8:d3:75:4e:e3:a3:
1b:df:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:43 2024 by rpki-client on console.sobornost.net