Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/7IPh6bSNdtzm55-cPIqFFnNNZbQ.roa
File: 7IPh6bSNdtzm55-cPIqFFnNNZbQ.roa (raw, json)
Hash identifier: bXEDfxPzwNMBg2E5y6J8NSfGcAFXQ7pOk7J5O6mE7gw=
Subject key identifier: EC:83:E1:E9:B4:8D:76:DC:E6:E7:9F:9C:3C:8A:85:16:73:4D:65:B4
Certificate issuer: /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Certificate serial: 018CC42480400C5C59B36A06C765D5BFCBA8
Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/7IPh6bSNdtzm55-cPIqFFnNNZbQ.roa
Signing time: Mon 01 Jan 2024 08:29:35 +0000
ROA not before: Mon 01 Jan 2024 08:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8943
IP address blocks: 83.138.62.0/24 maxlen: 24
2a05:5a42::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 03 Jan 2024 09:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:80:40:0c:5c:59:b3:6a:06:c7:65:d5:bf:cb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Validity
Not Before: Jan 1 08:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec83e1e9b48d76dce6e79f9c3c8a8516734d65b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:10:0a:36:0a:d1:43:30:5a:e7:41:77:93:
a1:54:4f:e0:7e:a0:c8:ad:7d:72:c3:6d:c6:5a:70:
07:cd:b5:b5:ca:9a:cf:5b:5a:de:2d:ff:bb:99:03:
24:74:04:d4:f0:8d:2c:c9:e5:62:85:13:61:ae:24:
6d:2f:9a:e5:f0:ee:22:c6:b2:d1:db:ca:d4:c1:6d:
41:63:5f:92:d1:89:2f:76:b1:67:78:15:8e:53:52:
96:7c:a2:04:28:e1:e2:2a:3f:b1:ca:1b:82:bd:85:
89:a2:66:d8:15:c6:4d:87:98:76:98:fa:94:f5:5f:
b2:cb:a2:a1:2c:c3:87:d3:b5:e0:e1:a8:75:05:ab:
f8:6b:55:6d:8e:b0:cd:94:1f:8d:93:be:26:d8:7a:
d0:c4:1e:1e:8c:ca:1d:b7:81:af:8e:35:89:18:e4:
df:6e:a2:91:49:57:b3:51:62:3d:d3:0a:7a:39:02:
14:1a:f8:95:e5:b4:03:4d:e4:29:2d:ea:be:11:4c:
47:a2:68:6e:94:c1:65:dd:3c:4b:1f:c8:ad:e5:78:
b0:cd:88:9e:27:9c:46:08:7f:7b:c0:d8:94:ac:28:
7a:c6:d1:2d:ed:dc:d0:19:ae:89:e8:de:94:eb:42:
a5:61:6f:c8:90:6d:16:8a:cf:d0:e0:04:6a:b8:d9:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:83:E1:E9:B4:8D:76:DC:E6:E7:9F:9C:3C:8A:85:16:73:4D:65:B4
X509v3 Authority Key Identifier:
keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/7IPh6bSNdtzm55-cPIqFFnNNZbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.62.0/24
IPv6:
2a05:5a42::/32
Signature Algorithm: sha256WithRSAEncryption
8e:69:3a:78:3c:cd:1f:ba:33:6c:79:17:ce:92:ae:a9:20:cf:
35:29:12:21:1b:89:59:e0:27:4b:e0:6b:f1:45:10:46:a8:7a:
87:c1:c1:10:38:b3:aa:a9:eb:f0:73:fe:9d:dc:92:2c:d6:82:
a2:bf:1d:0c:04:d7:70:1b:64:aa:9e:a0:02:b5:e2:63:6e:be:
e1:6e:44:fe:2e:dc:6e:ab:c6:a6:98:b3:0f:1f:d4:4f:b3:39:
7b:82:6d:94:18:f6:f5:3b:cf:a9:e6:cb:fb:ac:46:36:ac:c1:
d9:f8:93:9c:d9:ef:89:03:cd:dc:30:de:a6:3f:15:9a:5b:d7:
99:15:48:6a:83:33:e1:58:a2:74:5c:86:77:52:6f:96:f8:d9:
e6:1e:24:b3:b8:e0:f9:b5:89:22:03:57:46:0e:69:5e:10:88:
f7:ec:ea:75:8d:31:10:f9:82:47:cd:ee:c3:25:ea:83:37:68:
eb:7d:03:44:29:43:8a:d5:6b:9f:a9:fe:cb:17:c0:25:9a:c5:
a3:4e:f4:39:82:d9:b3:2f:d5:5f:82:22:b4:07:42:3b:dc:a3:
c6:b6:fb:67:6a:0f:2d:aa:d2:d0:8d:57:cc:10:f6:70:ec:5d:
a6:9e:46:fb:cf:f5:9b:41:8f:14:08:15:8a:eb:99:8e:78:c9:
b8:d4:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:35 2024 by rpki-client on console-fra.rpki-client.org