Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/eev5ET2GaScgAsuJGFjGxvf_4OE.roa
File: eev5ET2GaScgAsuJGFjGxvf_4OE.roa (raw, json)
Hash identifier: BRf3l+HpqXoFp1wp6aGBWFwuHfBko2kF9fSNz/0F0/s=
Subject key identifier: 79:EB:F9:11:3D:86:69:27:20:02:CB:89:18:58:C6:C6:F7:FF:E0:E1
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 0189A64638D125F17BD0AFF5AD1341C7DE01
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/eev5ET2GaScgAsuJGFjGxvf_4OE.roa
Signing time: Sun 30 Jul 2023 10:09:27 +0000
ROA not before: Sun 30 Jul 2023 10:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 83.168.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:46:38:d1:25:f1:7b:d0:af:f5:ad:13:41:c7:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jul 30 10:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79ebf9113d8669272002cb891858c6c6f7ffe0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:28:2b:e1:66:09:1f:29:08:f3:8c:46:fc:51:
8c:f9:c3:5e:e7:9b:39:37:4f:a6:82:bf:79:57:ef:
28:3d:57:b1:d2:69:5a:d1:50:cf:87:6b:dd:09:a0:
1d:f0:c7:cd:4c:54:14:a2:e4:69:41:2a:cd:c9:e2:
7f:ba:dd:1b:e7:7e:b4:02:fc:b5:de:cf:fc:2d:65:
74:88:9d:9f:49:ca:99:23:85:e2:2a:71:dd:2f:26:
91:b9:e4:31:87:b1:e9:ae:76:dc:cd:5c:b4:c4:da:
db:ef:94:83:f7:6b:d0:5c:2f:7b:44:20:00:ba:9b:
2e:ce:7d:9e:3d:34:e3:11:df:b3:7b:c4:21:7b:cb:
16:52:25:19:f9:60:ca:dd:23:e5:47:ac:ec:00:57:
2f:c7:88:13:93:ca:40:08:55:70:c4:54:a3:42:aa:
2f:6a:de:d6:44:07:0a:92:04:6c:98:eb:50:d3:96:
f0:a3:c5:ed:02:fe:04:d2:52:c6:69:de:22:b9:7e:
78:27:bf:9e:e8:70:86:2e:6d:8b:9e:03:d4:e5:23:
50:1f:2a:b3:9d:c4:e0:36:12:1c:aa:2e:e9:71:f1:
e5:3b:34:83:6e:bc:59:25:ae:64:fd:89:6d:6e:22:
a2:bb:b6:69:fc:c7:a6:6a:d2:53:f3:07:87:50:98:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EB:F9:11:3D:86:69:27:20:02:CB:89:18:58:C6:C6:F7:FF:E0:E1
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/eev5ET2GaScgAsuJGFjGxvf_4OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.122.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4b:9f:5b:7e:4e:3b:89:91:4f:f7:b4:b3:47:a6:cb:15:a3:
de:84:a9:af:66:d4:64:e8:80:69:d2:a6:ad:3b:4c:80:9f:1c:
fc:8b:ef:25:1b:a3:21:a8:7b:9d:06:e3:a8:56:1d:0c:be:fb:
40:1c:3b:50:76:20:e4:61:71:0a:be:db:3c:b3:29:b4:f0:d1:
c2:ab:92:94:86:25:9c:dd:1e:bd:f9:36:af:e2:e7:2a:44:f4:
dc:c9:25:df:24:02:94:81:d1:72:33:bf:6e:e2:45:61:d1:2b:
98:e9:40:3e:8b:df:19:bc:9f:21:cc:29:9f:c1:db:76:8d:fb:
3d:43:40:43:6c:90:73:65:83:79:82:02:d0:28:8e:46:09:50:
5c:47:87:52:fd:ab:65:5e:bd:ae:ff:e8:7d:ed:18:e3:56:53:
53:ea:28:e6:e6:8a:b7:68:27:3b:cd:de:91:9f:1a:d6:30:8a:
22:61:e1:91:15:1e:7a:cc:40:e7:83:88:9d:cb:a7:c0:63:3d:
41:3d:ab:c9:00:96:99:c9:9e:f9:52:e4:f6:da:bc:c1:05:f4:
c6:11:0e:ce:5e:37:34:1c:9e:44:3b:cd:e6:2d:9f:99:d3:66:
26:cb:67:20:03:6c:59:fc:32:c0:bd:d1:5c:9f:31:13:d9:c1:
e6:9a:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-fra.rpki-client.org