Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/m23T_YQBKjvfjv2EX2cBm57VL4w.roa
File: m23T_YQBKjvfjv2EX2cBm57VL4w.roa (raw, json)
Hash identifier: ZhQWdBvQpvfbllOAS0EXJoN0lbxeIAbTx8xYS/qXPD4=
Subject key identifier: 9B:6D:D3:FD:84:01:2A:3B:DF:8E:FD:84:5F:67:01:9B:9E:D5:2F:8C
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 01857067665DC31A4D0B8708A7643CE3899C
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/m23T_YQBKjvfjv2EX2cBm57VL4w.roa
Signing time: Mon 02 Jan 2023 02:55:02 +0000
ROA not before: Mon 02 Jan 2023 02:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42605
IP address blocks: 83.136.72.0/21 maxlen: 24
185.111.192.0/22 maxlen: 24
2a02:b28::/32 maxlen: 32
2a02:b28::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:66:5d:c3:1a:4d:0b:87:08:a7:64:3c:e3:89:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Jan 2 02:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b6dd3fd84012a3bdf8efd845f67019b9ed52f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:64:3d:d7:99:2b:40:5d:1d:86:8f:9c:b7:
e6:79:67:72:58:aa:94:25:4f:c1:d5:98:38:23:45:
f2:b3:98:e6:3c:2c:58:46:c6:f4:bb:3d:b6:2c:f0:
f1:8d:5b:4e:b7:59:b0:a5:e6:e7:a0:e0:b6:78:f7:
f7:12:fa:0a:a3:18:24:57:f8:ba:92:f6:21:09:ef:
8e:fc:55:c4:ed:70:e0:00:c6:d6:cc:a5:98:72:e0:
3e:23:58:42:4f:ec:97:d4:11:9b:e9:36:9a:00:53:
30:8b:f1:56:2e:a3:3c:d9:0b:66:06:a2:44:3f:6f:
d3:a3:8b:cc:88:84:4b:c0:9a:cc:5b:bd:8c:f5:e3:
a9:e7:e1:ec:87:a9:43:96:44:b5:3f:d2:8d:de:fa:
13:7f:86:4c:c3:c1:96:54:57:d8:c6:84:55:fa:48:
27:95:1c:16:fc:56:14:56:a1:fa:f0:23:73:4e:63:
3b:13:de:3f:01:4c:72:f8:94:c0:4a:28:63:23:bb:
8a:cd:10:1b:1e:9e:d9:e8:fb:ac:60:7a:27:4e:53:
8c:99:4b:14:36:21:4a:b6:b3:de:c8:01:09:62:a0:
e4:28:01:94:db:14:74:2e:22:1d:52:2c:63:95:a7:
94:bd:02:b1:ea:19:30:88:51:0d:a9:de:4e:69:06:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:D3:FD:84:01:2A:3B:DF:8E:FD:84:5F:67:01:9B:9E:D5:2F:8C
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/m23T_YQBKjvfjv2EX2cBm57VL4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.72.0/21
185.111.192.0/22
IPv6:
2a02:b28::/29
Signature Algorithm: sha256WithRSAEncryption
01:c1:0d:af:70:c9:30:4a:e3:c5:74:55:14:ff:81:86:98:30:
49:f1:52:2f:cf:ba:a7:ab:27:c4:c8:bd:11:8a:24:bc:7e:0b:
e8:2f:2c:35:49:61:df:a6:f2:de:4a:03:49:14:15:ba:45:86:
76:3d:cd:6b:e0:a1:87:2d:45:6f:3a:11:ab:e7:4c:fd:39:e1:
d5:1c:05:9e:39:6c:4f:bd:4c:df:5a:48:bd:b3:16:46:75:bf:
8a:25:ad:9f:05:72:79:33:a7:aa:b5:b5:7c:1c:de:f9:d0:96:
98:a2:ec:c5:4b:84:08:af:43:e6:4b:d5:ea:54:19:bd:c9:f9:
b5:31:d8:dd:8f:ff:7e:2a:65:91:e4:0b:43:61:5a:6f:db:73:
51:25:d7:c8:82:cd:d1:ce:a7:d1:35:fa:db:eb:7e:0a:8e:92:
97:21:c6:54:54:1f:83:b1:cd:02:82:3e:46:ec:b2:91:2b:34:
dc:e2:03:6a:0f:14:8c:99:73:e6:17:16:c0:e6:63:12:ca:69:
c7:75:94:e0:90:49:ea:b4:45:dd:42:38:25:29:56:b0:f7:46:
d7:1b:34:06:63:3d:3e:6d:1a:09:86:0d:cb:72:c8:fe:23:1f:
7f:06:cc:e6:68:98:44:cf:fe:cd:ef:ac:6b:62:29:62:67:81:
e1:b8:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:01 2024 by rpki-client on console-ams.rpki-client.org