Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/1-WpxWjpCC9tsnJ2_b72_6E0zDm0.roa
File: 1-WpxWjpCC9tsnJ2_b72_6E0zDm0.roa (raw, json)
Hash identifier: z+Dwb00ZMMPviRSLCPmEj1O2LNcwt61Z3ieibng7Ytw=
Subject key identifier: F9:6A:71:5A:3A:42:0B:DB:6C:9C:9D:BF:6F:BD:BF:E8:4D:33:0E:6D
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018AF6697FDFC4F431539F35439BCDD0500E
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/1-WpxWjpCC9tsnJ2_b72_6E0zDm0.roa
Signing time: Tue 03 Oct 2023 16:40:23 +0000
ROA not before: Tue 03 Oct 2023 16:40:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40934
IP address blocks: 83.231.212.0/24 maxlen: 24
83.231.145.0/24 maxlen: 24
83.231.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Nov 2023 15:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:69:7f:df:c4:f4:31:53:9f:35:43:9b:cd:d0:50:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Oct 3 16:40:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f96a715a3a420bdb6c9c9dbf6fbdbfe84d330e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:1d:9c:54:45:f7:d9:47:ce:68:19:7d:c8:
45:ec:3d:cb:39:f0:a6:5c:e8:d7:34:2b:ca:e3:43:
af:6b:05:e0:43:26:99:7d:45:64:1f:bf:5b:d2:39:
b8:ab:a5:7e:ae:6d:12:c9:db:16:41:ae:ce:99:4e:
d5:34:62:c5:3b:be:81:63:f4:88:58:c5:42:8b:05:
6b:29:e7:19:43:36:f3:b1:33:80:36:05:9c:0a:c5:
e9:ac:15:2e:22:1d:41:8d:e0:13:2e:40:49:1d:71:
3d:be:fd:96:84:11:df:38:2a:fa:dd:f0:9b:84:48:
6b:7d:24:ee:70:bf:d4:2d:69:e7:80:2f:0a:21:7f:
80:e4:b3:bb:15:ad:47:fe:fc:e0:13:ac:74:e6:e5:
63:bc:4e:fa:87:3e:47:e1:95:e6:99:e2:94:da:d7:
59:b1:20:51:0a:8b:bc:1c:b4:0d:30:9f:df:5a:bf:
2b:a5:11:4e:3e:32:06:d4:be:3b:cd:aa:1b:a2:be:
67:fe:93:a8:70:7c:5d:a5:46:00:f6:d8:4c:de:36:
94:00:63:4f:6b:3f:54:ac:18:25:44:d0:52:0c:38:
d8:42:49:8b:d7:7b:01:4f:a2:53:83:d9:76:cd:5f:
50:dc:65:e9:56:74:86:22:db:61:5d:ed:e8:cc:91:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:71:5A:3A:42:0B:DB:6C:9C:9D:BF:6F:BD:BF:E8:4D:33:0E:6D
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/1-WpxWjpCC9tsnJ2_b72_6E0zDm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.145.0/24
83.231.169.0/24
83.231.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e0:6a:26:04:6e:65:a7:f6:16:78:4c:27:67:1f:f0:98:25:
b1:c7:e5:b7:0d:6f:10:a6:dd:0c:3e:e1:05:1d:96:95:e7:44:
fc:5d:57:17:dc:43:29:fe:06:7e:f4:19:82:5e:1c:80:84:f7:
96:4b:67:41:cd:8f:31:8f:30:da:b2:ca:19:8e:22:fd:bc:3f:
c6:b5:2b:27:d4:a6:76:aa:b0:cc:ce:b1:10:af:a2:04:d5:f7:
28:d9:b6:a4:34:46:88:a1:c8:ba:6b:73:e4:96:c4:f0:d2:16:
8b:68:a8:e7:b3:a4:64:ff:35:e3:e0:17:99:e9:54:af:71:05:
51:97:06:79:af:ee:ef:22:90:36:fb:66:06:85:3b:7c:11:35:
4d:24:01:c7:0b:ee:4d:9d:1e:2d:b4:d2:d9:cc:76:e1:fe:87:
62:fd:60:3e:2e:33:c3:06:82:3e:b0:68:5d:a5:09:0d:9f:50:
7d:17:0c:e3:a3:87:15:09:d5:b9:09:a2:2c:72:21:92:a2:be:
e0:ce:52:52:9e:b0:9b:b3:50:05:74:d4:e1:d2:57:03:41:e4:
98:eb:cd:e0:97:43:2c:f6:83:6e:5f:fe:a5:72:cb:8c:22:81:
09:10:31:4d:da:90:31:0a:16:ac:b5:92:f8:bf:dd:fc:cb:47:
da:a8:16:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org