Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/IJPu3SwHEkP8eAIbmLyh2yEHcX4.roa
File: IJPu3SwHEkP8eAIbmLyh2yEHcX4.roa (raw, json)
Hash identifier: novsR/uJhBQWoSfDB7T5EEpB2a5xccDXdlVOkNpvNpk=
Subject key identifier: 20:93:EE:DD:2C:07:12:43:FC:78:02:1B:98:BC:A1:DB:21:07:71:7E
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01856CAF123484F69BA1E0BC13112C79E641
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/IJPu3SwHEkP8eAIbmLyh2yEHcX4.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.136.208.0/21 maxlen: 24
83.136.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 07:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:12:34:84:f6:9b:a1:e0:bc:13:11:2c:79:e6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2093eedd2c071243fc78021b98bca1db2107717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:0a:42:f9:10:75:9b:f0:83:a9:c8:a6:89:
6a:b5:b1:e6:86:17:af:63:b0:3a:4c:8d:26:c1:f5:
37:a2:66:92:91:e7:1c:0f:c9:51:ab:c0:87:9d:e4:
bb:4b:33:ef:a7:9b:4b:45:22:b5:e2:86:78:64:bf:
b2:31:61:b2:c2:e2:05:2a:e2:26:c1:96:ad:f8:bd:
ac:f7:4c:fa:5c:6e:cf:f8:42:58:49:5f:0e:cd:8d:
3e:60:a6:ad:03:b9:af:6c:8a:3b:df:e5:15:2a:30:
88:d1:d2:60:9e:63:f8:0c:2f:4e:21:dc:61:70:c0:
2e:49:50:b8:c5:f9:0a:91:57:7f:d4:c5:fd:c3:c1:
9f:08:7f:a1:60:98:f9:51:be:5b:6c:27:eb:0b:46:
23:52:3b:4f:3a:3d:df:a7:c9:5a:f2:fa:2b:ee:eb:
4d:90:e5:94:a5:b4:a6:9d:3c:94:62:5a:9b:22:cc:
9b:a6:d4:8f:75:4b:52:45:30:11:7e:db:e6:ed:0c:
a7:f2:ea:62:a6:a8:1a:86:41:73:25:65:93:57:b9:
5c:18:5c:84:f5:39:d8:69:f7:2a:23:51:38:55:a3:
95:7c:00:0a:cc:b9:6a:3e:29:8e:46:43:b7:96:67:
40:03:9b:b5:c4:1e:71:d8:5c:89:cb:81:e7:93:da:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:EE:DD:2C:07:12:43:FC:78:02:1B:98:BC:A1:DB:21:07:71:7E
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/IJPu3SwHEkP8eAIbmLyh2yEHcX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/21
Signature Algorithm: sha256WithRSAEncryption
97:35:f6:b2:99:9d:92:5f:ed:97:e5:e3:32:44:f4:d9:8e:90:
de:57:78:47:d7:db:84:9c:6e:03:a2:a1:ad:9f:fc:62:b2:14:
54:5a:ea:be:a3:9a:12:01:d1:2b:f8:ee:16:c4:dc:81:e9:a6:
bf:4a:60:68:fb:92:99:83:52:be:1b:5b:90:94:d8:0e:45:ca:
15:21:bc:dd:98:b3:a0:0c:13:60:3b:00:fd:27:d6:64:c0:af:
7f:27:81:9a:77:3f:c7:d0:0f:f5:78:3a:a2:40:4c:7f:51:f5:
d2:bb:3a:34:db:83:49:3b:38:f9:73:e1:11:d7:c8:26:34:8c:
c9:09:3f:92:31:36:45:1e:b1:a9:f7:39:f9:cc:ea:3c:fe:f0:
7f:60:4b:f3:a4:88:63:18:8b:47:50:51:45:a6:b6:e6:8c:45:
8c:92:96:96:ab:ca:53:78:ca:a3:f0:49:04:a5:34:ca:26:82:
c2:82:91:4d:a9:5c:09:be:16:11:10:5b:03:55:7a:e9:d7:bb:
df:a4:00:d1:42:0f:f4:8d:4e:d7:d6:97:74:fd:c8:c4:a0:10:
ae:ce:b0:60:58:a1:7f:4c:de:5b:d6:7e:59:42:0a:c4:59:31:
20:0f:e1:1b:35:62:1d:89:91:17:c5:2c:32:db:48:a1:30:35:
69:2f:2c:a4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVsrxI0hPaboeC8ExEseeZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjMwMTAxMDkzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDkzZWVkZDJjMDcxMjQzZmM3ODAyMWI5OGJjYTFkYjIxMDc3MTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxgKQvkQdZvwg6nIpolqtbHmhhev
Y7A6TI0mwfU3omaSkeccD8lRq8CHneS7SzPvp5tLRSK14oZ4ZL+yMWGywuIFKuIm
wZat+L2s90z6XG7P+EJYSV8OzY0+YKatA7mvbIo73+UVKjCI0dJgnmP4DC9OIdxh
cMAuSVC4xfkKkVd/1MX9w8GfCH+hYJj5Ub5bbCfrC0YjUjtPOj3fp8la8vor7utN
kOWUpbSmnTyUYlqbIsybptSPdUtSRTARftvm7Qyn8upipqgahkFzJWWTV7lcGFyE
9TnYafcqI1E4VaOVfAAKzLlqPimORkO3lmdAA5u1xB5x2FyJy4Hnk9ooiQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCCT7t0sBxJD/HgCG5i8odshB3F+MB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xL0lKUHUzU3dIRWtQOGVBSWJtTHloMnlFSGNYNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANTiNAw
DQYJKoZIhvcNAQELBQADggEBAJc19rKZnZJf7Zfl4zJE9NmOkN5XeEfX24ScbgOi
oa2f/GKyFFRa6r6jmhIB0Sv47hbE3IHppr9KYGj7kpmDUr4bW5CU2A5FyhUhvN2Y
s6AME2A7AP0n1mTAr38ngZp3P8fQD/V4OqJATH9R9dK7OjTbg0k7OPlz4RHXyCY0
jMkJP5IxNkUesan3OfnM6jz+8H9gS/OkiGMYi0dQUUWmtuaMRYySlparylN4yqPw
SQSlNMomgsKCkU2pXAm+FhEQWwNVeunXu9+kANFCD/SNTtfWl3T9yMSgEK7OsGBY
oX9M3lvWfllCCsRZMSAP4Rs1Yh2JkRfFLDLbSKEwNWkvLKQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org