Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1m8p5314ffKzQyapRCHxjrpliEo.roa
File: 1m8p5314ffKzQyapRCHxjrpliEo.roa (raw, json)
Hash identifier: 0kBTcpF0hO8Ng7sG2o5qqg58NJ+5MPBWAwwOtVbRmew=
Subject key identifier: D6:6F:29:E7:7D:78:7D:F2:B3:43:26:A9:44:21:F1:8E:BA:65:88:4A
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB84DE64DCED0BBE31C412EA10E177D
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1m8p5314ffKzQyapRCHxjrpliEo.roa
Signing time: Sun 01 Jan 2023 09:44:55 +0000
ROA not before: Sun 01 Jan 2023 09:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39694
IP address blocks: 83.206.141.0/24 maxlen: 24
83.206.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4d:e6:4d:ce:d0:bb:e3:1c:41:2e:a1:0e:17:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d66f29e77d787df2b34326a94421f18eba65884a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:8f:33:7a:0e:8a:46:31:65:b6:9c:48:88:
96:a1:d6:02:84:0f:64:b1:fb:17:fd:76:f2:ed:8e:
a7:e6:4d:43:71:83:f9:26:c3:16:96:8f:75:71:ff:
44:9c:ee:93:e6:d5:8b:42:75:31:18:93:b4:16:a8:
e9:65:5a:31:b4:21:9d:d5:e6:ca:b3:36:75:57:c7:
b0:d1:c7:8c:4c:2b:1f:b1:13:85:6f:13:16:62:a2:
db:b3:b3:83:e5:5e:69:fc:18:0b:2f:95:50:69:59:
d8:4b:3b:6d:92:1d:ff:5f:eb:a5:10:3f:ca:50:e5:
43:fa:f1:83:6c:77:6e:f2:f4:47:b2:f8:84:07:3b:
f0:d6:f0:19:2c:45:c6:50:af:5b:63:2e:c8:11:91:
d9:1b:03:6c:7d:47:b1:31:7c:fd:69:64:31:95:92:
fa:6b:aa:06:4a:ca:23:b3:3a:00:60:5f:4a:d0:75:
36:82:54:29:77:a7:54:1f:51:9a:28:26:ae:21:0f:
6b:ed:35:26:98:7b:48:af:b9:86:8d:9b:cb:2f:9d:
2a:1a:85:33:f5:e1:f9:14:c8:14:01:e8:0b:04:ec:
0c:ab:2e:0d:c8:b5:38:d0:cd:e6:35:ab:27:9a:6a:
48:cc:98:1e:8d:bd:ba:ff:b7:02:f2:e2:d0:91:24:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6F:29:E7:7D:78:7D:F2:B3:43:26:A9:44:21:F1:8E:BA:65:88:4A
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1m8p5314ffKzQyapRCHxjrpliEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.206.141.0/24
83.206.240.0/24
Signature Algorithm: sha256WithRSAEncryption
63:34:6b:ed:99:df:11:87:81:0c:7c:6b:97:19:b8:f9:dd:19:
e4:31:04:56:3a:00:1c:08:9a:22:a1:0b:f7:53:0c:0f:59:74:
9d:40:93:8d:44:09:f8:bd:ef:dd:51:49:3c:53:f2:30:98:0f:
67:17:61:b7:bb:df:ce:5b:f3:bb:c0:c7:a5:fc:5c:9f:62:ec:
d7:df:c5:9f:6c:02:97:70:07:db:b4:79:72:77:51:b1:21:23:
a3:2b:2d:5d:9e:8b:c9:e6:ca:ac:d4:50:f6:21:a8:e9:4e:c5:
a5:38:8b:7a:ed:b4:33:3b:7c:ae:25:4d:b9:1a:85:2d:8e:2c:
37:6c:30:d7:80:93:8a:ad:cc:cd:1b:19:81:a8:ce:2d:ec:18:
d0:be:8e:e2:5c:98:70:c3:28:6d:63:16:29:91:cd:2b:ce:85:
b1:8a:c7:38:57:1e:33:7a:0b:79:b5:90:5a:e7:3b:2e:cd:5a:
f4:fa:2c:db:c9:d4:ec:23:57:b1:16:d6:2d:d4:ab:1a:96:52:
63:de:52:ee:fc:6a:c1:93:a1:20:d4:b0:af:be:5f:5e:04:02:
de:30:d1:ab:20:f7:c2:44:9f:ed:2c:6b:a5:05:a1:d3:67:7e:
ae:08:0f:f6:c3:ff:08:42:a3:6c:b4:9f:d5:05:77:f0:b4:ca:
35:a2:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org