Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/F7LRp-RWnPhdpt5p30e91kNLAeA.roa
File: F7LRp-RWnPhdpt5p30e91kNLAeA.roa (raw, json)
Hash identifier: DJes+xQ05PnH4SpTRUg9IBx1OGR5mJkV8lS6xpqvXxE=
Subject key identifier: 17:B2:D1:A7:E4:56:9C:F8:5D:A6:DE:69:DF:47:BD:D6:43:4B:01:E0
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01856CAF1307626FE9B90200FC9587D59047
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/F7LRp-RWnPhdpt5p30e91kNLAeA.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142617
IP address blocks: 83.136.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 07:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:13:07:62:6f:e9:b9:02:00:fc:95:87:d5:90:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17b2d1a7e4569cf85da6de69df47bdd6434b01e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:53:ff:a6:08:a5:40:ba:fc:2f:0a:7f:bc:
7c:f2:11:b9:97:38:3a:f5:6e:45:e1:f9:a4:c8:e4:
c0:be:f1:4b:61:99:99:1c:10:11:94:6c:fc:a2:d9:
31:53:5b:0e:ee:f3:66:cd:28:c0:93:06:42:2f:88:
01:c9:1f:5e:23:ea:fa:36:81:6f:8b:91:3b:fa:d2:
46:97:6d:e2:e8:d5:8e:9b:e1:4c:77:1d:9d:dc:29:
a3:c0:38:b8:e8:07:7a:41:1b:fe:e9:b3:c2:30:56:
46:53:69:2a:68:54:95:71:82:2e:23:28:3a:17:5e:
b1:48:1c:d5:41:e3:44:c4:d5:cf:cc:a5:b1:31:9d:
81:41:0c:7b:63:5c:60:ba:ea:9e:d7:fa:ee:b0:cc:
a2:76:8f:75:51:b5:8c:74:cd:de:11:24:fa:d6:83:
4d:00:8d:e7:0d:c1:5a:10:34:7b:f0:d3:43:a9:d5:
4d:3f:9b:0f:28:53:6f:ad:5e:87:09:c9:2f:eb:7b:
16:8d:46:b8:3b:e3:ad:9e:a3:b4:77:53:2f:81:5b:
cb:eb:20:93:d3:55:83:78:4c:35:f3:35:df:1e:b2:
f5:35:6c:df:ff:5f:93:9a:80:de:58:17:55:4f:32:
a4:e7:26:54:0b:4c:06:5a:22:0c:44:ac:77:b1:04:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:D1:A7:E4:56:9C:F8:5D:A6:DE:69:DF:47:BD:D6:43:4B:01:E0
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/F7LRp-RWnPhdpt5p30e91kNLAeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/22
Signature Algorithm: sha256WithRSAEncryption
07:9f:e1:b0:df:d6:03:35:7a:ce:3c:01:b9:cb:3a:1c:70:af:
1e:e6:e3:0b:3c:6f:87:13:20:f6:da:ac:bb:00:fc:cc:65:04:
60:3b:df:48:cb:2c:ce:79:7d:62:51:d4:cf:a2:b2:48:a3:6b:
56:0d:06:ad:93:db:fe:bc:52:3c:47:ba:b9:fb:74:16:4b:36:
4a:b7:92:d7:39:a3:39:58:0b:67:13:49:0b:4b:35:40:90:9f:
11:f2:00:3d:a0:ee:51:76:9f:96:6f:fa:a3:a1:08:0b:8b:81:
f9:59:b9:f7:22:23:cb:eb:e0:33:2f:62:72:f8:31:ec:db:c8:
eb:49:67:d0:f5:3d:80:24:47:36:0a:e5:d3:0b:fd:e4:d4:ed:
08:2f:5e:17:26:ce:bc:0c:a4:84:24:6d:61:1f:60:a3:f7:4c:
11:5c:ef:28:87:05:5e:aa:7c:f8:ea:a0:ec:85:34:1e:1b:7d:
d5:58:7d:05:23:4d:5d:f7:ce:7b:eb:ae:09:8a:2d:69:c9:25:
ac:aa:56:a0:91:8b:4c:e0:b2:bf:b3:01:76:b3:85:7e:c3:a5:
ac:1e:bb:97:34:bc:c7:94:25:37:e6:36:15:66:f2:43:05:f0:
7b:76:83:aa:7a:32:7d:31:75:72:5a:82:fd:e9:23:1a:39:88:
1d:94:98:b5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVsrxMHYm/puQIA/JWH1ZBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjMwMTAxMDkzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2IyZDFhN2U0NTY5Y2Y4NWRhNmRlNjlkZjQ3YmRkNjQzNGIwMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriJT/6YIpUC6/C8Kf7x88hG5lzg6
9W5F4fmkyOTAvvFLYZmZHBARlGz8otkxU1sO7vNmzSjAkwZCL4gByR9eI+r6NoFv
i5E7+tJGl23i6NWOm+FMdx2d3CmjwDi46Ad6QRv+6bPCMFZGU2kqaFSVcYIuIyg6
F16xSBzVQeNExNXPzKWxMZ2BQQx7Y1xguuqe1/rusMyido91UbWMdM3eEST61oNN
AI3nDcFaEDR78NNDqdVNP5sPKFNvrV6HCckv63sWjUa4O+OtnqO0d1MvgVvL6yCT
01WDeEw18zXfHrL1NWzf/1+TmoDeWBdVTzKk5yZUC0wGWiIMRKx3sQSTUQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBey0afkVpz4Xabead9HvdZDSwHgMB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xL0Y3TFJwLVJXblBoZHB0NXAzMGU5MWtOTEFlQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJTiNAw
DQYJKoZIhvcNAQELBQADggEBAAef4bDf1gM1es48AbnLOhxwrx7m4ws8b4cTIPba
rLsA/MxlBGA730jLLM55fWJR1M+iskija1YNBq2T2/68UjxHurn7dBZLNkq3ktc5
ozlYC2cTSQtLNUCQnxHyAD2g7lF2n5Zv+qOhCAuLgflZufciI8vr4DMvYnL4Mezb
yOtJZ9D1PYAkRzYK5dML/eTU7QgvXhcmzrwMpIQkbWEfYKP3TBFc7yiHBV6qfPjq
oOyFNB4bfdVYfQUjTV33znvrrgmKLWnJJayqVqCRi0zgsr+zAXazhX7Dpaweu5c0
vMeUJTfmNhVm8kMF8Ht2g6p6Mn0xdXJagv3pIxo5iB2UmLU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org