Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/AoUTMxsGPegjVj1AvBZ2EzPBNa8.roa
File: AoUTMxsGPegjVj1AvBZ2EzPBNa8.roa (raw, json)
Hash identifier: yhQSmyN0HcZ3EXzGQFpbGak5sucTSv7t5ipQZJDhiGs=
Subject key identifier: 02:85:13:33:1B:06:3D:E8:23:56:3D:40:BC:16:76:13:33:C1:35:AF
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 0188BB37E8C9885873D874076FD2AC6FE66A
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/AoUTMxsGPegjVj1AvBZ2EzPBNa8.roa
Signing time: Wed 14 Jun 2023 18:43:03 +0000
ROA not before: Wed 14 Jun 2023 18:43:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212630
IP address blocks: 82.117.241.0/24 maxlen: 24
2a0b:53c0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:37:e8:c9:88:58:73:d8:74:07:6f:d2:ac:6f:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Jun 14 18:43:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=028513331b063de823563d40bc16761333c135af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:f9:84:ab:2c:03:2a:16:04:88:83:67:ca:
09:f6:e0:6a:be:70:e0:08:85:1d:f0:c0:9d:33:c6:
59:5e:72:42:e2:c1:3c:1d:a5:e7:a4:f6:2d:6e:5f:
02:56:1b:5f:8f:af:c9:0f:91:7b:3d:d9:f9:4e:13:
05:bf:1c:54:92:fa:97:b1:8c:64:8e:ee:2f:9c:44:
b4:81:77:b9:e8:74:60:5a:5e:49:b5:93:dd:de:ec:
5b:67:d5:70:96:22:37:9e:a9:05:7f:ae:70:bd:b5:
af:98:4f:e9:90:1c:20:ac:53:8e:6b:20:ed:6c:62:
82:b1:32:c5:b9:18:38:9f:48:15:d1:28:41:58:0d:
de:c3:af:13:2d:1f:4c:80:a1:82:1e:98:5c:a8:61:
1f:14:c0:bb:a9:a4:f1:50:01:81:81:35:85:c1:2c:
ff:f6:20:98:fb:32:5f:8c:69:5f:46:75:e6:b9:21:
bc:e9:87:26:fb:0e:c4:49:d4:59:55:a5:24:ff:c6:
ec:99:19:09:d9:7f:cc:0e:8c:10:90:c9:c5:3f:33:
15:56:a0:38:d8:06:e9:56:8e:46:16:77:0f:df:00:
61:0a:e2:f0:6b:9a:69:02:6a:bf:58:a3:93:c5:6e:
87:10:26:21:e6:e7:75:d4:c2:d7:ad:5c:cd:95:96:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:85:13:33:1B:06:3D:E8:23:56:3D:40:BC:16:76:13:33:C1:35:AF
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/AoUTMxsGPegjVj1AvBZ2EzPBNa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.241.0/24
IPv6:
2a0b:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
63:23:77:53:0c:85:3a:8d:1b:15:e3:5c:2e:2e:c4:fc:b1:38:
99:a5:43:fd:a2:a9:dd:02:5c:68:05:e2:3c:9f:22:cd:c2:07:
00:26:c0:35:0c:49:5c:58:58:1d:c6:e5:bc:a5:31:d3:08:1f:
ce:01:2f:dd:49:55:36:ef:14:34:35:e6:c3:0a:cb:49:1d:f4:
31:53:89:ae:8d:ee:2d:88:af:dd:09:71:ba:e0:a8:9c:43:5d:
ec:e5:cf:a1:30:68:27:d9:a0:63:b1:b0:54:7c:59:52:0c:b7:
41:11:bf:60:b3:76:05:4b:fd:49:06:b2:86:02:7c:d7:d1:89:
57:4f:e3:62:4b:be:42:24:d1:6d:54:39:35:a2:c8:1c:78:43:
64:ea:7a:63:53:87:b5:7f:8d:90:ee:7e:8a:96:b8:66:f5:6b:
38:a6:3e:82:62:68:08:0c:91:51:73:9e:ee:d4:98:6f:91:b8:
ef:32:b7:0b:21:3e:72:29:59:db:bb:75:de:a0:c9:fa:d2:c6:
24:a8:97:12:94:8f:28:03:1f:9d:e4:09:6b:85:a6:16:2a:4c:
4a:c1:15:e3:45:93:d5:84:4f:71:b0:4f:70:53:16:67:26:33:
cc:a1:d7:fa:db:62:04:a6:11:7b:23:6a:90:d4:c0:39:02:a2:
01:a9:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:39 2024 by rpki-client on console.sobornost.net