Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/qEFnb9N6CbDqSuLWU1Fr1kkiF5o.roa
File: qEFnb9N6CbDqSuLWU1Fr1kkiF5o.roa (raw, json)
Hash identifier: eDk9LkVLsPRuKNnGCXbRqE8BSSkNBofRq1ZB8xyKvH4=
Subject key identifier: A8:41:67:6F:D3:7A:09:B0:EA:4A:E2:D6:53:51:6B:D6:49:22:17:9A
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01856CAF1177AE28AFACF3E6B96CD81EB112
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/qEFnb9N6CbDqSuLWU1Fr1kkiF5o.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 08:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:11:77:ae:28:af:ac:f3:e6:b9:6c:d8:1e:b1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a841676fd37a09b0ea4ae2d653516bd64922179a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:3d:48:db:44:60:1f:69:75:6f:da:7b:2c:
d6:32:fa:d7:28:d4:5f:28:76:41:92:b6:00:9a:d7:
02:13:ea:03:80:8f:f9:e4:2b:c3:d1:95:f4:e9:7c:
02:4a:58:48:9d:10:b7:5e:a0:34:53:a3:ab:a7:1e:
22:44:f7:8e:a6:e3:5e:9a:10:bb:9c:31:35:c7:87:
a5:7b:44:de:29:90:32:8a:57:59:3d:72:34:7c:60:
4f:07:38:f1:f6:f7:b8:e4:30:5d:8c:1d:dc:88:c5:
08:84:41:f3:ec:4f:06:10:c4:f3:78:d2:6d:85:79:
2a:38:e7:45:9d:e3:38:5a:a8:be:54:e4:ea:22:13:
4e:0c:50:3a:9c:55:82:21:69:90:90:5a:48:aa:e3:
38:df:db:b7:ab:8c:1e:d1:73:81:76:b3:43:c0:c6:
fc:95:0e:47:4e:61:d9:5d:9c:13:19:29:e7:b4:99:
b0:49:7f:fb:00:82:30:25:c0:b0:e6:28:39:7e:5d:
28:dc:b1:0b:b5:04:78:40:ca:a1:8d:98:6b:c9:05:
4b:7c:42:bb:9f:4e:59:0e:69:58:e7:e5:c5:2e:53:
ba:55:6c:eb:7c:78:b6:53:ab:0f:2e:5c:09:d6:18:
8f:b6:4c:7a:fb:49:36:a5:c3:87:ad:aa:5e:e2:cd:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:67:6F:D3:7A:09:B0:EA:4A:E2:D6:53:51:6B:D6:49:22:17:9A
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/qEFnb9N6CbDqSuLWU1Fr1kkiF5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b0:74:17:7c:82:3c:0b:d7:83:ae:11:20:01:04:e5:ac:7c:
97:ad:b2:44:d7:29:28:c0:6c:c3:91:f5:7c:a0:e7:e9:65:70:
16:a8:fa:20:1b:08:5b:b5:cc:55:1b:b6:0b:33:f6:0c:eb:f8:
20:33:2a:2d:18:39:4d:c7:80:cf:0b:4a:67:45:87:b7:b6:11:
44:dd:1b:e8:14:80:17:bf:f7:57:63:52:a8:20:3b:29:c2:a5:
b1:bb:bf:34:b4:1a:16:76:d5:f8:48:a5:0c:5b:cb:41:6b:a2:
e5:7b:e4:c1:d6:d4:b6:23:f9:ac:69:cf:5d:43:8d:81:ac:e5:
aa:61:5a:4c:7a:80:9a:a2:71:ea:81:2e:59:21:e4:a4:38:6b:
9d:f4:79:7b:5c:f7:a7:bf:d9:13:e0:44:84:3d:02:c0:c9:49:
bd:fe:0f:ce:bd:ef:6b:a8:a6:20:4f:b7:c2:f4:23:15:e7:a8:
0e:00:a4:23:60:d8:c5:f3:e1:0c:5e:ac:04:9f:4c:0c:31:71:
4c:ca:09:9a:cf:3a:07:a3:0f:34:90:84:56:45:8d:00:05:c2:
e5:f5:8a:81:eb:8f:9c:0b:af:a2:a6:6f:6f:a9:49:8f:17:b9:
78:b7:5b:cb:7a:c3:90:e1:ff:36:51:12:69:98:90:94:a0:73:
b0:97:58:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org