Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3zQA7KtYlq0inKulS7nWzuUZ4vA.roa
File: 3zQA7KtYlq0inKulS7nWzuUZ4vA.roa (raw, json)
Hash identifier: 18zH8sl00QfQZJ7YuyU0GuTJUVfz5QQvDBepNFywBqA=
Subject key identifier: DF:34:00:EC:AB:58:96:AD:22:9C:AB:A5:4B:B9:D6:CE:E5:19:E2:F0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018934B98B70F4652531090779E1A858F9D6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3zQA7KtYlq0inKulS7nWzuUZ4vA.roa
Signing time: Sat 08 Jul 2023 08:58:42 +0000
ROA not before: Sat 08 Jul 2023 08:58:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 83.219.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:b9:8b:70:f4:65:25:31:09:07:79:e1:a8:58:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 08:58:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df3400ecab5896ad229caba54bb9d6cee519e2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:af:f6:9b:2a:0b:0c:14:de:5a:8e:2e:4f:
a7:5f:01:7e:85:61:0f:8a:90:c9:8e:a1:26:44:7b:
58:03:b4:82:89:88:26:78:7c:c0:3b:a5:9f:3d:c5:
28:29:e8:ef:a7:4f:c0:4f:8e:f7:a4:66:5c:cf:2a:
0f:6f:88:37:da:0c:4e:ea:f0:ea:7f:47:cf:c8:56:
40:ce:fc:95:63:43:7c:4f:7b:e5:9d:31:c3:ba:d7:
d4:c7:6f:97:74:6b:04:89:ba:62:f6:9e:3d:2b:d5:
9e:76:8e:da:59:58:49:7a:b0:ab:a1:07:1c:51:ae:
70:0a:56:55:e7:21:f0:44:3c:c0:1e:d0:16:c9:bc:
27:31:f9:26:2a:4d:6f:a1:68:34:36:a9:f8:3d:b8:
fb:1d:fe:e1:d0:be:2a:fb:33:96:89:30:c2:c0:d0:
eb:1e:87:2e:2f:1b:e0:7c:de:77:e2:20:91:41:78:
a4:02:2c:a2:62:f2:84:d5:b6:6a:71:a3:f6:02:7d:
78:30:fe:03:61:df:a3:b2:61:a7:0e:47:c7:9a:9d:
af:ca:ff:eb:6d:2b:a5:47:20:06:de:35:56:22:ea:
48:f2:40:e2:01:0c:d8:9b:4b:72:7c:36:49:7e:33:
61:5d:42:e9:a5:21:18:a7:2d:fb:49:f6:3c:47:2e:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:34:00:EC:AB:58:96:AD:22:9C:AB:A5:4B:B9:D6:CE:E5:19:E2:F0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3zQA7KtYlq0inKulS7nWzuUZ4vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e5:5b:3b:a1:72:d9:34:dc:b1:51:c9:4e:00:47:1d:44:be:
fb:6b:7b:ee:01:1f:7e:7d:86:69:6e:d2:39:0a:af:a3:d5:31:
bd:39:ef:c0:ff:d1:e4:17:b5:2a:1b:7e:9b:85:ca:e5:9d:f8:
6d:9e:74:6f:d5:c2:79:04:47:3f:df:53:0c:5a:9f:dd:40:77:
f3:cc:b6:d5:01:00:90:91:ad:02:4f:aa:90:a9:9f:18:da:ee:
f8:73:52:d5:55:07:a3:87:dc:1d:e6:44:9b:f0:ec:3e:04:a7:
45:de:53:6f:37:b3:bf:dc:57:49:df:f9:a5:c4:94:59:1d:b8:
8c:fd:a7:43:99:71:78:89:93:6c:79:03:38:74:b1:ae:ef:80:
b3:67:5a:d7:79:82:86:30:b3:63:1d:e1:9c:60:d7:86:78:5d:
14:86:f6:41:45:aa:9e:9b:43:89:8e:c0:97:b6:25:48:f0:5d:
8e:d1:03:ab:22:18:b4:e4:cb:10:15:14:c9:17:55:ac:e0:22:
af:da:c9:02:7a:b4:f8:b0:9a:78:4c:3a:ab:0f:55:d9:c8:cf:
6c:d4:c1:22:f7:1c:b4:ab:dd:0d:aa:1d:50:58:42:00:04:84:
a4:00:05:a6:ce:06:0f:08:fe:f8:8b:10:77:ce:cf:2e:3e:6a:
f2:21:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org