Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/76vspdBn-kHnxqsLhW6MS0zHqec.roa
File: 76vspdBn-kHnxqsLhW6MS0zHqec.roa (raw, json)
Hash identifier: EmhDYZo1uEAnKOgkje5szlUOcmX4nnEhh/2ysSpQQSo=
Subject key identifier: EF:AB:EC:A5:D0:67:FA:41:E7:C6:AB:0B:85:6E:8C:4B:4C:C7:A9:E7
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0185DE7DB00BF47E4A639CF27A047D2A8905
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/76vspdBn-kHnxqsLhW6MS0zHqec.roa
Signing time: Mon 23 Jan 2023 11:57:37 +0000
ROA not before: Mon 23 Jan 2023 11:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Mar 2023 12:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:7d:b0:0b:f4:7e:4a:63:9c:f2:7a:04:7d:2a:89:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 23 11:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efabeca5d067fa41e7c6ab0b856e8c4b4cc7a9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:14:e2:6a:32:8e:b1:ab:5d:b4:84:aa:dd:
58:e0:35:d2:22:d1:da:eb:a4:92:29:65:64:31:b3:
44:6e:92:00:44:62:68:62:4f:db:70:32:35:b8:ee:
ee:9b:e6:6d:66:b9:d6:b7:9d:b7:1c:c8:bd:29:8a:
6d:4d:ed:cb:a0:c4:d3:1d:86:10:52:99:f3:58:57:
8c:9e:e5:b8:32:da:08:12:8d:97:f0:44:47:e4:5f:
40:ad:1a:71:65:45:c1:9a:1a:b6:f1:1b:d0:cf:eb:
58:5c:85:8c:57:0a:1d:eb:2a:0b:5b:e0:1b:6c:17:
a6:42:ac:96:d3:99:30:b1:7e:1c:b7:18:58:d5:ca:
ae:98:33:37:1f:2c:25:94:94:16:66:88:3c:64:e5:
bd:b2:57:d6:a6:16:0c:99:25:5b:2e:a7:ad:1e:31:
67:bf:00:56:f0:8e:8f:69:01:a8:1d:a3:51:cf:d8:
ca:27:d5:0c:ce:34:32:d5:8c:00:43:4f:0a:27:07:
ca:bf:51:89:af:87:e9:d5:1e:ab:bf:52:0a:64:0d:
1f:66:ea:c0:9a:07:bb:10:49:4f:32:75:ec:33:d9:
17:97:6e:62:c0:60:83:d2:03:58:de:d1:1a:5d:a8:
f8:b4:3c:7b:6f:68:c8:a4:ee:51:8c:ab:35:a2:e6:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:EC:A5:D0:67:FA:41:E7:C6:AB:0B:85:6E:8C:4B:4C:C7:A9:E7
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/76vspdBn-kHnxqsLhW6MS0zHqec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:aa:5b:a1:72:58:36:fb:23:41:f3:eb:8a:b3:20:8d:7b:a1:
cb:5a:23:fb:0a:a2:ec:9a:a5:4d:37:cb:31:0d:db:e5:7a:0c:
9e:24:87:75:5b:c0:fa:60:d8:b7:00:22:53:52:64:6b:4d:ea:
ec:be:3a:bf:49:45:7c:49:fd:a3:25:cf:f5:c9:97:35:50:55:
4a:14:a4:99:56:85:06:3c:e5:fe:76:3b:8f:2e:e6:52:e6:c9:
19:b7:21:b0:bc:b3:9b:40:89:a2:33:1f:d1:18:d3:ca:43:7d:
99:bf:04:a7:1d:37:d7:3f:81:2c:51:de:cd:ff:ba:dc:45:9b:
31:58:5c:71:67:0f:ca:db:e0:33:56:74:4b:b7:fc:01:5a:38:
b4:14:f9:57:f2:9a:4f:8a:e9:b7:58:01:80:15:92:c6:65:6d:
02:2f:53:00:9e:61:b2:c4:56:d3:21:f2:5d:d7:ad:fc:33:67:
04:a3:2a:a6:c9:dd:26:f4:c2:f0:3d:78:47:b7:78:c5:9e:95:
fa:20:d3:2a:80:fb:d6:b8:61:c3:22:f8:36:6a:3a:b7:ed:84:
b2:b5:d1:28:2c:a3:16:10:7a:27:9d:ea:4f:74:53:03:20:99:
87:b9:d1:f9:6e:55:ca:f3:a1:f1:be:fc:59:ad:98:db:b6:47:
7f:05:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org