Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/XbzM9Vme96RXUFpOHhHItWFyf7Q.roa
File: XbzM9Vme96RXUFpOHhHItWFyf7Q.roa (raw, json)
Hash identifier: oMHGvsDBQUKOU6dC5e0i3fySROInSuQ/PTxNoeHG3SY=
Subject key identifier: 5D:BC:CC:F5:59:9E:F7:A4:57:50:5A:4E:1E:11:C8:B5:61:72:7F:B4
Certificate issuer: /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial: 01856FA6F94E6387C379BAC64CB9E916413B
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/XbzM9Vme96RXUFpOHhHItWFyf7Q.roa
Signing time: Sun 01 Jan 2023 23:24:51 +0000
ROA not before: Sun 01 Jan 2023 23:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31056
IP address blocks: 83.97.40.0/21 maxlen: 21
83.97.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f9:4e:63:87:c3:79:ba:c6:4c:b9:e9:16:41:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Validity
Not Before: Jan 1 23:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5dbcccf5599ef7a457505a4e1e11c8b561727fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:30:3a:14:03:26:00:4d:64:71:e4:d6:9c:
8b:68:a2:76:72:87:c3:d2:ea:71:95:a6:41:0f:93:
b7:c5:78:f6:45:f3:69:45:06:b1:54:7c:ee:8b:b1:
a4:d6:50:4f:79:28:95:4e:69:f4:d5:5d:55:f0:d8:
22:af:ae:17:dd:83:b2:48:cc:d2:6f:b1:f7:d7:b4:
24:68:ea:13:df:38:e7:25:88:d9:4f:12:40:32:f5:
8d:5a:f7:d5:71:d4:08:dc:05:ed:c3:e8:26:b5:b3:
23:44:8e:20:14:a2:0e:6e:eb:f8:08:76:79:ec:db:
57:83:9e:46:9e:47:aa:f9:d4:7d:57:2a:c0:a7:48:
c6:f0:a2:a9:26:0f:25:20:3b:52:09:db:39:5b:ad:
7b:39:03:78:a8:e5:72:f4:f5:17:eb:de:33:e9:1a:
3d:36:7f:cd:65:e5:78:c7:d4:7d:a2:d7:ac:bf:0e:
b5:bb:62:7f:3e:9e:bd:8c:fb:71:3f:8b:70:1e:26:
80:79:f9:b7:43:f7:b2:91:72:12:01:42:4f:f6:e1:
1c:c5:51:ea:b3:6a:03:5b:50:b8:f7:8f:b1:6e:24:
e1:f0:3a:79:9a:4c:7a:28:51:28:88:c4:89:5e:3c:
c4:64:cb:23:06:22:6d:ac:d2:a2:7a:7c:79:50:5f:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:CC:F5:59:9E:F7:A4:57:50:5A:4E:1E:11:C8:B5:61:72:7F:B4
X509v3 Authority Key Identifier:
keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/XbzM9Vme96RXUFpOHhHItWFyf7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.40.0-83.97.55.255
Signature Algorithm: sha256WithRSAEncryption
1c:2c:b4:05:b6:92:10:64:0e:dd:56:ad:86:bd:97:61:24:76:
d7:7b:c9:70:8c:9a:a5:32:c7:c4:d8:09:b8:ec:71:ed:36:d8:
30:da:7f:49:55:1f:55:04:9f:fa:a2:f2:2c:34:5b:02:e9:f7:
27:b0:7b:d0:b6:e3:db:47:d8:77:9a:4e:01:03:be:48:d5:26:
f8:66:9c:27:2f:7f:db:d0:83:9e:b1:0e:e0:59:76:3b:96:f8:
e8:06:23:d6:95:5b:8f:fd:68:2b:e4:6a:eb:9a:37:ea:a8:c7:
a5:4f:ff:21:55:03:b7:5a:98:b0:64:9f:d2:12:2d:b5:ab:e7:
26:64:00:e2:b6:e9:b5:d0:2b:39:14:bc:b5:a8:76:50:b1:71:
5d:00:89:14:38:72:22:7e:c6:7c:33:e0:8a:87:4a:ac:17:1e:
47:ad:20:e1:a5:b0:e1:ef:5b:18:4a:ae:f2:22:34:e3:c8:63:
ff:e2:9e:09:8a:41:e0:2b:53:b1:d0:c4:b7:b5:26:98:84:23:
9c:0e:21:9c:ac:d2:6e:9c:54:ca:35:13:63:50:ee:4e:8c:a4:
92:83:5e:ce:b1:8c:38:1b:c1:1d:7d:d9:26:33:01:ad:34:88:
6c:97:b4:ef:b4:9a:a3:a9:3c:53:dc:e9:4a:91:1e:49:6f:7c:
71:57:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org