Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-950Gu0BjXTDbzyNa4v0IzGbfqc.roa
File: 1-950Gu0BjXTDbzyNa4v0IzGbfqc.roa (raw, json)
Hash identifier: UYabjSsu5A5b4NzoQ7l1Blyho1nuHAEDhBkXqVm+Jd4=
Subject key identifier: FB:DE:74:1A:ED:01:8D:74:C3:6F:3C:8D:6B:8B:F4:23:31:9B:7E:A7
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01886B971B528883DA0A6FF4019D8D9E19C5
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-950Gu0BjXTDbzyNa4v0IzGbfqc.roa
Signing time: Tue 30 May 2023 07:37:24 +0000
ROA not before: Tue 30 May 2023 07:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 83.136.213.0/24 maxlen: 24
83.136.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:97:1b:52:88:83:da:0a:6f:f4:01:9d:8d:9e:19:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: May 30 07:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbde741aed018d74c36f3c8d6b8bf423319b7ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bf:01:56:47:59:f1:98:8d:fd:39:70:7e:41:
ed:5b:12:3b:63:df:5b:a8:d2:a4:15:0e:05:be:85:
ae:1d:c9:81:ac:66:b1:af:6e:ae:3e:8c:24:c0:e8:
3c:59:37:dc:d0:38:af:c1:d5:3b:20:65:56:5a:72:
4e:e3:0b:71:6d:16:81:c8:7c:46:18:f7:99:4f:ba:
86:23:1c:0c:00:fc:93:36:7c:ab:68:0e:4d:e2:85:
19:cb:cf:d1:60:34:ae:68:e9:69:32:94:7e:ac:58:
17:bb:6b:b3:b7:d3:66:0c:e1:8f:d7:27:3d:b2:f7:
33:0c:cc:d9:d9:3d:ea:0c:47:5a:e3:6a:27:40:a9:
e2:ba:e8:ce:d1:df:4d:7e:ab:99:6f:e4:a8:96:f1:
db:1a:a1:86:22:70:1d:26:7b:a1:7b:bf:19:f3:8c:
43:55:4d:f5:82:a6:0a:f9:92:d0:46:d5:9e:3d:a6:
74:67:d4:14:c9:6e:e5:4e:cc:2b:b4:b3:27:0a:b0:
96:52:e1:41:7e:94:d4:06:3c:df:a5:b2:57:52:7d:
76:8a:c8:a7:38:68:01:cf:14:0f:73:1d:6d:93:82:
4c:87:6f:cd:9f:c3:23:67:0a:49:6f:64:57:e4:bf:
05:64:5d:a9:b9:5c:f8:dd:4f:1f:3b:84:91:0c:30:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:74:1A:ED:01:8D:74:C3:6F:3C:8D:6B:8B:F4:23:31:9B:7E:A7
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-950Gu0BjXTDbzyNa4v0IzGbfqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.212.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:89:2b:43:04:97:e6:67:01:23:58:d4:f4:17:ee:33:da:1b:
a1:b0:71:a1:2d:ad:d3:92:24:5d:32:0c:ea:08:80:9d:3e:c3:
a5:33:96:59:80:47:4e:d7:fb:a4:fd:88:ab:02:2d:6c:27:02:
f1:35:66:47:fc:71:1d:0e:de:91:f8:6b:14:98:a1:99:eb:a6:
e2:62:c2:1b:f2:b3:ba:ea:d0:8d:2d:3f:d7:46:fe:9d:e1:a6:
30:0d:e9:e9:51:b2:e8:a2:fe:c8:6c:68:89:47:3d:b4:76:9f:
93:5f:21:ed:01:3e:c2:2b:24:49:eb:f0:fc:e4:93:2f:0e:82:
27:5a:d6:5d:36:2d:a0:80:c6:b0:24:1a:26:d3:2b:5b:b2:4a:
81:1a:00:7e:43:a1:d7:06:b9:f5:95:15:fb:0b:5e:c1:b6:7f:
c3:71:40:c4:cc:7f:56:11:77:9c:ef:d1:76:5e:91:29:57:67:
d5:fc:0d:47:7d:06:1d:fb:bc:5e:f4:54:de:e0:5f:d2:5a:3f:
f8:c7:71:4d:e8:a5:84:17:15:bc:0a:d9:a2:d4:ff:6b:c6:d9:
99:61:17:94:59:71:c5:55:b7:32:9e:9d:79:df:5d:d5:1b:a6:
f1:42:d5:11:fe:ad:98:d1:81:94:48:ec:f5:ce:6b:8b:6f:dd:
be:01:e4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org