Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/VWtw5Yqp1F5IJqL0PYivWyXVMJA.roa
File: VWtw5Yqp1F5IJqL0PYivWyXVMJA.roa (raw, json)
Hash identifier: xZmMa7KExtTf19fNnI0MIefUSUH4yRBShDhbO2D1LKA=
Subject key identifier: 55:6B:70:E5:8A:A9:D4:5E:48:26:A2:F4:3D:88:AF:5B:25:D5:30:90
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 0189BF2D856BC93769DDC07517DF8FC82675
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/VWtw5Yqp1F5IJqL0PYivWyXVMJA.roa
Signing time: Fri 04 Aug 2023 06:12:58 +0000
ROA not before: Fri 04 Aug 2023 06:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 83.217.9.0/24 maxlen: 24
83.217.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:2d:85:6b:c9:37:69:dd:c0:75:17:df:8f:c8:26:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Aug 4 06:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=556b70e58aa9d45e4826a2f43d88af5b25d53090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:6b:ba:1a:9f:8a:0f:27:dd:c5:12:d2:f9:
37:0b:e8:81:47:f2:d5:52:97:92:04:24:7b:23:7c:
18:1c:ee:a7:37:cf:bf:f6:db:fd:23:d4:d4:7c:67:
3e:e5:cb:73:bd:ce:ce:55:79:3b:96:ab:5a:23:be:
b7:48:fe:33:f5:ca:63:eb:5b:11:43:cd:1f:81:da:
64:c8:71:c9:bb:bc:46:b6:c0:fd:76:0b:5d:5a:96:
99:19:92:0f:72:c5:d6:56:44:38:54:fa:c2:83:9a:
f9:e0:ed:59:87:b2:5a:1e:a4:ac:1f:59:ae:26:af:
34:a8:b0:f3:88:66:63:06:a2:9b:05:dc:89:78:2b:
20:11:40:d0:26:2c:3e:75:b6:04:7c:df:8e:a0:57:
3c:90:7e:32:d5:dc:92:b1:93:65:6a:5d:63:24:fb:
1f:0d:eb:1a:32:5b:8e:4c:37:b3:10:5a:d9:69:3a:
74:0a:5c:23:e0:a6:46:5b:0f:1f:f6:61:a6:98:b3:
34:bd:63:6c:41:4e:50:f0:df:60:ae:f5:92:50:b0:
ab:b8:bb:c4:05:a8:56:07:7d:60:e7:34:4c:6c:25:
de:11:61:c6:0f:b3:9d:00:a0:0d:d7:50:ec:03:5e:
d9:1c:78:c9:54:e6:79:37:1b:a5:a6:08:b3:51:54:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6B:70:E5:8A:A9:D4:5E:48:26:A2:F4:3D:88:AF:5B:25:D5:30:90
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/VWtw5Yqp1F5IJqL0PYivWyXVMJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.9.0/24
83.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
73:81:f4:b6:0c:eb:9f:2a:01:3b:22:e7:ec:98:20:b1:40:55:
a6:14:08:05:3f:81:79:a0:e2:da:e1:4d:a1:28:b7:56:cf:74:
2f:07:91:84:c7:57:37:55:7e:0b:a0:1a:44:52:c1:c2:db:cb:
57:ee:4a:71:0e:b8:0e:b7:a7:a4:1c:59:73:8e:da:8c:94:90:
1a:f7:87:cb:89:db:86:10:71:b3:62:f8:3e:c2:1a:23:62:55:
38:91:58:46:98:ac:88:f0:bd:3c:fe:04:72:fc:1b:b6:88:99:
e3:43:f9:84:9a:8d:80:b6:ac:da:19:3d:ce:eb:ef:7b:9f:11:
db:a2:ef:8a:63:19:1c:83:9e:01:5f:77:56:01:0f:94:2b:6a:
01:19:12:83:c7:75:23:2e:75:bf:24:e4:65:b7:40:22:32:52:
9f:46:0f:01:3f:ab:d4:05:3a:90:4c:30:bd:55:23:28:87:0b:
73:db:1f:4c:ee:90:78:88:66:51:02:00:83:30:bf:6c:29:0d:
d0:03:be:6d:ea:d0:8d:ee:86:48:d9:69:f5:e6:cf:9d:5b:11:
d0:ec:92:59:97:a3:ef:54:d6:de:81:54:f1:87:32:34:2d:17:
69:77:7d:96:e0:60:cb:84:12:85:86:5a:dd:df:d3:a8:cc:de:
84:74:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:34 2024 by rpki-client on console-ams.rpki-client.org