Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/4MerH8PZKoGGGkRZ8I05bhW0__c.roa
File: 4MerH8PZKoGGGkRZ8I05bhW0__c.roa (raw, json)
Hash identifier: rPakB7TKuk8kqJ8BO9eAOULminiu2pJyM73wOsI+icU=
Subject key identifier: E0:C7:AB:1F:C3:D9:2A:81:86:1A:44:59:F0:8D:39:6E:15:B4:FF:F7
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 018C58048738F9E4C364CF78230D7C4A218B
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/4MerH8PZKoGGGkRZ8I05bhW0__c.roa
Signing time: Mon 11 Dec 2023 08:35:40 +0000
ROA not before: Mon 11 Dec 2023 08:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39830
IP address blocks: 83.173.125.0/24 maxlen: 24
83.173.124.0/23 maxlen: 24
83.173.124.0/24 maxlen: 24
83.173.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:04:87:38:f9:e4:c3:64:cf:78:23:0d:7c:4a:21:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Dec 11 08:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0c7ab1fc3d92a81861a4459f08d396e15b4fff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:08:07:79:0f:4a:81:05:9e:9c:e8:19:b1:
a1:ac:1c:59:68:4e:66:23:89:03:22:f8:d1:2f:c2:
77:8c:24:22:77:04:d7:b7:33:ae:86:d4:39:89:67:
5a:e5:04:90:da:4f:97:e3:4f:e3:d0:e4:5b:1a:6a:
53:7d:31:b5:62:ab:dd:87:f0:b4:83:26:a8:40:c3:
00:f4:1d:84:a9:9f:70:10:0f:39:9a:d2:a8:8e:72:
9a:32:7b:4f:31:2d:e3:5a:89:45:92:d0:0c:ca:f8:
f4:ca:d5:80:e2:ac:1d:5b:e2:cc:28:55:fb:16:33:
58:6e:17:04:1e:0b:93:2d:ce:00:9d:59:5f:8f:cb:
60:16:d2:0d:62:7b:57:6b:f8:39:ca:ca:cd:04:47:
36:a5:71:e3:6c:22:32:92:d4:10:3d:32:f2:12:8b:
f3:f0:2d:cd:08:54:02:d5:23:0c:8e:e5:2a:28:43:
7c:8e:30:aa:c2:01:4a:41:7b:7b:58:57:eb:f8:b9:
bb:d7:e3:10:b9:64:e6:54:9a:7a:59:ca:7e:9e:b5:
3b:79:c4:65:35:8e:52:d8:cb:dc:5e:2d:c3:6b:b3:
02:a5:e9:0e:87:64:4c:93:fd:3e:02:c4:ac:cb:d3:
4a:7b:f3:ab:1a:77:6a:c8:d2:1c:68:07:b4:79:61:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:AB:1F:C3:D9:2A:81:86:1A:44:59:F0:8D:39:6E:15:B4:FF:F7
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/4MerH8PZKoGGGkRZ8I05bhW0__c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.124.0-83.173.126.255
Signature Algorithm: sha256WithRSAEncryption
04:4c:59:7d:16:e1:6d:78:d2:87:2b:8d:93:d4:06:d4:39:e2:
1c:2d:b1:b2:bd:20:5f:3a:36:ad:c1:c5:5c:be:76:22:3c:31:
8f:04:41:e6:69:fa:34:28:a7:e5:d7:ec:ea:5b:f7:65:02:e5:
95:04:08:52:4f:01:e9:91:80:28:17:54:a2:b2:77:e8:cd:8a:
cf:09:9b:34:86:ad:6c:74:44:a1:3d:4e:97:b4:a6:4c:ba:fa:
23:e1:a5:18:1c:9a:f3:17:d8:86:c5:ac:c2:81:af:de:3e:b7:
49:d0:05:68:20:49:3a:ca:06:30:02:2e:90:bc:6c:00:f6:b9:
c9:1b:d1:74:66:d6:08:cc:4b:be:f7:78:97:4f:07:f4:3f:9d:
3c:dd:1b:4a:50:82:e3:b6:9a:78:87:fa:53:9b:f0:27:f1:5b:
5b:70:c6:e6:96:1c:05:da:f5:9c:68:e5:72:55:88:de:ed:68:
93:85:f2:a9:0a:f7:1f:6f:f3:2a:c2:9d:8e:d7:27:b7:c0:a5:
fa:92:44:a1:b4:43:90:5a:28:96:43:f3:91:fe:2d:a4:d2:70:
a6:32:e5:33:3d:62:cf:af:a9:dc:78:04:c6:f7:08:4b:f4:6c:
48:24:63:50:29:75:e3:30:ef:1a:76:3c:15:dc:25:1a:d9:af:
26:a6:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:52 2024 by rpki-client on console-fra.rpki-client.org