Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3cN6cm-Id45GGIf8yLUCVOVxhA4.roa
File: 3cN6cm-Id45GGIf8yLUCVOVxhA4.roa (raw, json)
Hash identifier: A3BIKvn+sMJSpuoIoZvq4/Az1zooxyurMmgjHQysTdo=
Subject key identifier: DD:C3:7A:72:6F:88:77:8E:46:18:87:FC:C8:B5:02:54:E5:71:84:0E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01888B7357FA827C1F65B5CEB04F6044F170
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3cN6cm-Id45GGIf8yLUCVOVxhA4.roa
Signing time: Mon 05 Jun 2023 12:06:12 +0000
ROA not before: Mon 05 Jun 2023 12:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.219.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:73:57:fa:82:7c:1f:65:b5:ce:b0:4f:60:44:f1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 5 12:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddc37a726f88778e461887fcc8b50254e571840e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:4d:2f:c2:6b:a0:34:a8:18:63:e2:84:b2:
29:47:08:7c:82:12:f2:86:aa:1e:fb:3a:fd:bb:e6:
36:9b:a7:12:fc:66:03:0f:ab:e7:35:ca:6c:86:88:
91:01:69:74:b9:4a:e4:39:cc:fb:de:27:a6:2f:16:
b5:bd:1a:aa:65:2d:a8:cc:de:02:ff:cd:c8:ab:f1:
2f:9c:24:67:67:3f:3f:46:1c:4c:1c:3a:f8:04:89:
6a:cc:b7:3d:5e:ad:d7:b0:cd:df:b8:d6:4b:05:68:
50:d9:0a:48:cc:7b:ba:f4:e3:97:1d:f6:31:e4:57:
69:75:b1:1d:3d:e8:4d:1a:2d:88:02:cc:ab:95:cf:
4b:c1:3e:17:1c:55:f0:41:58:51:1d:70:a0:17:3c:
f8:20:8a:e6:92:e3:a0:50:04:8b:e9:15:26:cc:50:
3b:db:6e:49:35:a9:d4:63:18:10:7c:4f:09:cf:33:
4e:b3:f7:bc:eb:ea:d2:15:b6:7b:24:69:a8:d6:89:
28:52:ab:15:ae:7f:fa:5b:eb:c6:c0:cf:39:f6:c0:
a4:70:18:30:25:59:da:b4:1d:39:d4:e7:21:60:a0:
f9:cf:45:7d:20:9b:09:4e:5e:4a:c6:c4:e5:f1:f4:
3f:bd:01:d8:3c:32:49:bf:1c:54:6a:2f:f1:35:db:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C3:7A:72:6F:88:77:8E:46:18:87:FC:C8:B5:02:54:E5:71:84:0E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3cN6cm-Id45GGIf8yLUCVOVxhA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.96.0/24
Signature Algorithm: sha256WithRSAEncryption
78:18:55:b7:6c:a1:dd:0e:13:f2:ea:04:b2:f4:ee:5c:18:e1:
a8:31:2f:c6:a1:4c:22:c8:0d:9e:6e:0a:f3:e4:37:1d:32:ce:
35:80:ca:ce:bf:88:e5:07:27:7f:0f:62:46:87:70:ae:51:09:
3a:34:f4:c6:2f:65:22:c4:bc:b2:e9:15:06:26:98:ed:b6:9e:
42:43:62:f8:99:87:ff:ab:df:c1:b4:ba:bb:4f:dd:8f:c8:68:
5c:a5:c9:cf:1e:a0:2f:9b:1f:e3:2f:0d:d8:b3:34:97:5f:27:
85:8f:c3:1b:cd:50:94:fe:3c:3f:63:90:bb:58:55:61:ed:5d:
fb:9c:ac:97:58:f1:46:54:83:74:a5:22:13:10:b5:27:4c:3b:
48:a8:11:f0:b1:7a:cd:73:16:f4:26:af:16:37:9a:81:d2:ba:
98:06:41:ca:05:60:ed:fb:7b:3d:0c:27:c8:92:3c:69:5c:6f:
c5:b6:6c:4c:74:4f:d1:ca:8e:a3:af:a9:96:53:08:4c:5d:83:
a7:50:5a:d4:82:3b:69:60:5f:a3:9b:08:7e:3f:1a:bd:54:4f:
42:3a:93:8f:d6:80:dd:40:f6:a0:13:30:5d:f4:8c:c4:71:1d:
8d:df:e3:c4:fa:ef:0f:3f:4a:fa:da:db:bd:0d:10:83:bd:f6:
6c:ca:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org