Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/C8B7OxTyOvX12bACkFjNvYmDQ2M.roa
File: C8B7OxTyOvX12bACkFjNvYmDQ2M.roa (raw, json)
Hash identifier: mWmfmsjE/uhmd2fufsem0mPOe8YiXZmHLlgFGjqxOkQ=
Subject key identifier: 0B:C0:7B:3B:14:F2:3A:F5:F5:D9:B0:02:90:58:CD:BD:89:83:43:63
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 01856BDC94733186CF9ECEAFFE6C42B85070
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/C8B7OxTyOvX12bACkFjNvYmDQ2M.roa
Signing time: Sun 01 Jan 2023 05:44:56 +0000
ROA not before: Sun 01 Jan 2023 05:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24634
IP address blocks: 91.245.248.0/22 maxlen: 24
82.146.160.0/19 maxlen: 24
2a0d:b3c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:94:73:31:86:cf:9e:ce:af:fe:6c:42:b8:50:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 05:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bc07b3b14f23af5f5d9b0029058cdbd89834363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:40:c4:41:3e:b6:60:ec:7c:aa:11:51:2d:
7d:49:b8:18:4e:0f:0e:e2:d6:4e:63:5a:3e:6b:04:
91:02:80:01:9b:57:69:3c:5e:37:46:2e:46:77:40:
55:89:fe:90:b4:ea:2b:31:a9:48:c5:78:c4:f8:8a:
8d:33:67:b8:6a:af:4f:2a:f9:b4:29:04:ab:b6:52:
8d:bb:0a:f9:b0:dd:5b:23:00:ac:25:e5:c5:12:9b:
20:6e:de:df:91:c7:71:dc:70:e3:08:e0:62:66:7b:
28:a4:4e:64:e7:d2:3a:69:40:2e:95:8f:d2:8d:ad:
98:e3:ba:c4:31:f0:91:aa:08:9c:bc:08:11:78:13:
56:7e:d8:5f:5c:3f:0c:a5:1a:dc:ac:ed:24:f0:5b:
9e:93:de:c1:c7:fb:97:ce:f0:d8:4e:93:75:5a:f2:
d1:08:50:e1:a0:1b:50:f4:53:08:1b:88:31:a5:a0:
74:d3:31:57:a8:71:bb:2e:5f:c4:37:b7:0b:07:e8:
b3:31:b9:a5:71:d8:61:a2:f4:c8:7c:9d:48:52:09:
82:b3:84:4a:a3:7d:eb:bd:6f:c2:dc:a1:8d:49:96:
fc:27:1e:79:c5:1d:3f:fa:7a:2d:73:88:df:30:52:
e6:e6:c1:23:ce:1c:5b:8f:47:d8:07:06:e8:93:f5:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C0:7B:3B:14:F2:3A:F5:F5:D9:B0:02:90:58:CD:BD:89:83:43:63
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/C8B7OxTyOvX12bACkFjNvYmDQ2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.160.0/19
91.245.248.0/22
IPv6:
2a0d:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:d3:af:82:8b:cc:f7:95:5a:c3:54:f2:fd:de:69:ac:e5:7e:
7b:4c:38:14:4e:33:76:7d:f7:2a:4f:fe:c0:15:71:0f:69:85:
17:ed:c4:03:ca:a9:41:7f:7c:32:98:e0:38:74:43:b4:03:42:
fa:4c:f6:9a:4f:86:ea:b3:ab:93:19:bb:f6:e8:6f:eb:96:5e:
14:8d:e2:58:8d:ed:3e:b2:bf:f4:ff:eb:d1:c4:79:5e:b0:ca:
83:a7:b3:f6:9d:4a:b0:74:b0:02:05:2b:71:bf:3f:ad:62:76:
b9:66:27:c4:d8:af:34:10:7b:ef:af:c5:de:5a:33:14:50:55:
52:33:7f:ac:d9:d7:3e:15:a7:41:90:d8:11:36:9a:2b:9e:da:
20:cb:64:09:bb:61:4d:e9:22:29:b1:1b:7b:3e:e5:66:31:69:
2a:25:24:b9:5e:fc:8c:c4:33:9c:fb:15:c7:e8:63:64:d7:5d:
95:53:de:f6:2b:09:53:6a:3b:f8:7e:00:d4:70:b5:3d:e6:93:
73:d9:4a:24:9e:6f:aa:e8:31:ec:60:fb:7e:89:41:1d:d5:fa:
6f:7b:ce:6e:3c:3c:6e:16:af:ad:53:10:6e:aa:54:c0:93:a5:
03:73:df:a1:09:80:f3:3d:60:27:02:22:9d:5b:58:58:ff:41:
de:bd:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:45 2024 by rpki-client on console.sobornost.net