Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/TBxntHjEOR7vcHQW0TdNS8ocvgA.roa
File: TBxntHjEOR7vcHQW0TdNS8ocvgA.roa (raw, json)
Hash identifier: /9yaCMAaMBGIrxl6TqdkRGukH7gos9i/fpC+n480zc0=
Subject key identifier: 4C:1C:67:B4:78:C4:39:1E:EF:70:74:16:D1:37:4D:4B:CA:1C:BE:00
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018B677E5B20E888BDB1411AF2C4CF9E7A4E
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/TBxntHjEOR7vcHQW0TdNS8ocvgA.roa
Signing time: Wed 25 Oct 2023 15:40:15 +0000
ROA not before: Wed 25 Oct 2023 15:40:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 82.206.32.0/21 maxlen: 24
82.206.40.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:7e:5b:20:e8:88:bd:b1:41:1a:f2:c4:cf:9e:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Oct 25 15:40:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c1c67b478c4391eef707416d1374d4bca1cbe00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:12:b7:49:1b:00:5e:2c:74:ec:b2:1f:dc:
23:85:0b:a8:8d:67:62:9f:bf:05:42:98:9d:b9:4f:
51:30:34:05:18:fb:f5:f3:04:fa:e5:ba:04:2b:69:
71:cd:e3:ba:3b:7a:a2:ff:91:f8:fd:c0:35:e8:31:
9c:e4:eb:ee:a2:c8:3e:44:0f:d8:e0:75:45:dd:73:
ef:96:4b:c0:0d:92:e7:81:4f:0a:9f:3d:bf:df:b8:
e4:07:e2:74:2c:49:c9:43:fd:a6:25:b7:fc:df:62:
62:80:07:83:30:13:73:a7:89:58:89:ef:ee:01:dc:
0e:f1:96:33:2e:c9:8c:f6:6a:c5:62:97:cf:0d:63:
07:30:e0:31:ec:71:66:1e:c6:29:6b:61:7b:a6:2f:
7a:42:de:27:40:0e:47:ae:84:81:87:65:60:df:b3:
f3:dc:b0:8a:8f:b9:4f:d4:a4:5e:07:10:8a:bf:71:
1a:4a:e8:25:fc:00:42:75:97:95:ac:89:23:0b:4c:
b7:60:33:60:6e:71:1e:3e:27:73:b2:83:a9:93:17:
dd:0b:a8:77:13:01:b0:e0:47:92:cf:6f:8a:e4:1f:
4b:99:6a:50:5c:3e:60:8d:31:b9:4f:55:e0:f3:83:
d2:3b:85:c9:ba:41:c3:35:c7:1a:65:20:72:39:f0:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:67:B4:78:C4:39:1E:EF:70:74:16:D1:37:4D:4B:CA:1C:BE:00
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/TBxntHjEOR7vcHQW0TdNS8ocvgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.32.0/20
Signature Algorithm: sha256WithRSAEncryption
13:ee:e2:4f:66:87:8c:42:d3:5c:ea:e0:37:36:67:dc:66:ec:
95:bd:48:06:d9:70:20:85:43:5d:58:a6:4f:7e:17:11:20:49:
a2:e9:37:90:17:e4:d8:37:30:96:88:20:e4:e1:2d:a5:bf:c1:
b0:81:04:6c:b9:4b:84:6a:d6:72:65:77:dd:6a:99:fd:c9:83:
be:d1:80:37:bd:0f:27:24:d0:16:78:e9:90:77:3b:ce:09:51:
bb:fd:86:b7:a4:5b:8e:21:17:e4:fe:c2:47:88:b3:b6:46:40:
d4:df:67:58:dd:ca:70:8b:d1:3c:3c:b8:dd:6b:56:81:0d:e3:
b3:c1:bc:6f:e0:db:bc:f8:22:7f:38:89:72:42:7c:17:82:14:
f7:41:a4:90:92:0d:8a:6c:d0:32:b4:59:d5:7a:6c:14:85:0e:
84:1b:6d:71:6d:4f:79:7e:dc:fc:8e:2c:b3:18:9f:6c:53:16:
56:18:57:8f:52:48:b3:68:17:db:c2:ca:65:5c:54:7f:28:f1:
cc:11:b9:a2:7c:bd:4a:c4:2f:cf:45:bb:4d:42:9a:75:9f:6e:
df:6d:86:15:c1:34:13:e8:c7:d6:f8:13:88:d0:b1:94:9a:cd:
ed:8a:e8:74:6e:cd:7e:bb:44:63:70:9d:80:db:3c:36:42:5a:
b8:c3:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:32 2023 by rpki-client on console.sobornost.net