Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/xzTu66eQbvrWxmdtMOMFvkpqkp4.roa
File: xzTu66eQbvrWxmdtMOMFvkpqkp4.roa (raw, json)
Hash identifier: +CWZwpWzcXeFPVlrTLcrPV8GAtJF84VTOl8sYPGIaN0=
Subject key identifier: C7:34:EE:EB:A7:90:6E:FA:D6:C6:67:6D:30:E3:05:BE:4A:6A:92:9E
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0187B7DACD8CAEA78BD5AECAFC6B86FEF5FD
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/xzTu66eQbvrWxmdtMOMFvkpqkp4.roa
Signing time: Tue 25 Apr 2023 09:59:42 +0000
ROA not before: Tue 25 Apr 2023 09:59:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40934
IP address blocks: 83.231.212.0/24 maxlen: 24
83.231.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 16:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:da:cd:8c:ae:a7:8b:d5:ae:ca:fc:6b:86:fe:f5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 25 09:59:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c734eeeba7906efad6c6676d30e305be4a6a929e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:aa:99:97:4b:6e:26:d0:f8:2b:39:96:78:
2c:06:da:6d:e0:1d:db:df:7e:50:ab:9f:aa:5a:b9:
23:af:d0:5e:d7:bc:6c:aa:70:ad:4e:99:1b:b6:aa:
10:f6:19:59:86:ae:cb:0c:55:85:9a:c4:c9:8e:73:
4b:ce:d6:db:f2:52:0c:ad:2b:51:61:b1:b3:cc:0c:
6c:73:63:35:cf:8a:e1:7f:0e:81:70:29:9b:11:af:
d9:b4:ce:84:f0:4e:6c:45:30:e4:cb:0a:42:36:c2:
e9:1b:e6:b3:c3:dd:ea:09:0a:8e:be:b5:66:e0:a1:
06:16:be:05:29:23:3c:3d:7f:16:21:3e:59:be:26:
b3:91:bd:a4:8b:61:97:21:35:34:aa:82:57:b8:ee:
37:89:0e:4f:b3:e2:26:bc:bd:05:a7:75:f5:e2:11:
21:a8:29:b3:e5:0b:5e:82:0e:ac:31:7b:31:4e:fb:
bd:48:e5:e6:24:91:c2:db:45:64:fd:5f:8d:17:a3:
b3:b3:2b:81:98:82:29:6a:71:8a:0d:a0:b1:33:3f:
a7:df:af:c9:86:89:6e:04:b3:c1:8c:f3:7b:58:44:
ca:82:39:d0:1c:e0:d2:12:2b:be:ea:b9:96:1b:b5:
87:d6:cc:67:93:24:7c:f4:6f:e7:b1:d7:51:87:5f:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:34:EE:EB:A7:90:6E:FA:D6:C6:67:6D:30:E3:05:BE:4A:6A:92:9E
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/xzTu66eQbvrWxmdtMOMFvkpqkp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.169.0/24
83.231.212.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b8:51:45:0b:03:cd:77:4d:e2:06:34:dc:fd:19:74:9b:e0:
1c:56:82:3d:62:35:da:39:1e:79:c8:82:d9:69:c5:d0:0c:35:
75:b9:41:db:f6:61:47:36:ea:dd:cb:cd:fc:89:0a:d7:af:d1:
ab:ca:c3:0c:d3:87:1e:5e:2e:cd:3a:db:4f:b6:2a:1e:d6:48:
d0:c0:52:43:af:32:53:37:3c:d1:bd:10:9d:39:82:5a:c3:55:
ec:5e:fb:a2:4a:40:d3:09:7d:52:e6:72:ca:c1:f8:7f:20:fb:
be:78:00:be:f7:38:56:fa:07:68:ad:d6:18:c7:a1:af:80:65:
1b:f0:57:86:66:89:ba:d8:29:d6:8f:22:ef:e5:0a:aa:a9:54:
18:e0:a3:85:38:d1:c6:f8:b7:69:86:17:7a:d9:b7:38:77:3b:
fc:65:7a:97:83:2e:41:3d:41:89:61:7a:2e:4f:3c:28:de:ab:
65:53:8e:e5:f2:48:bd:2d:9e:3d:1c:8c:3e:be:14:70:f3:64:
bc:a3:43:54:d0:1b:b6:12:a8:26:44:6c:62:d5:47:18:f3:4e:
cb:44:3c:3f:fb:4a:6a:6b:95:69:0b:b7:1a:d0:d7:0b:ac:cd:
ad:71:d5:34:31:5c:80:fd:ce:a0:49:c3:39:93:a2:de:88:27:
98:1f:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org