Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4l8Qpwdr5N1M-D88o1JppZpowwE.roa
File: 4l8Qpwdr5N1M-D88o1JppZpowwE.roa (raw, json)
Hash identifier: VwRUqLyfpDY3f23fwSLtbv3DL56El6TtK9/iRZ+VFWs=
Subject key identifier: E2:5F:10:A7:07:6B:E4:DD:4C:F8:3F:3C:A3:52:69:A5:9A:68:C3:01
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01856CAF103248B5D8FF74D4D8C11C9DD2E2
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4l8Qpwdr5N1M-D88o1JppZpowwE.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 83.136.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 07:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:10:32:48:b5:d8:ff:74:d4:d8:c1:1c:9d:d2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e25f10a7076be4dd4cf83f3ca35269a59a68c301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:d7:63:e0:96:97:4a:1b:3c:a1:14:ed:30:
04:21:a7:ad:a8:10:e2:40:32:98:e0:8c:59:f2:e3:
9f:72:4a:00:77:be:97:37:b2:e7:89:fc:e7:87:46:
b2:b4:12:8f:5d:31:38:d8:55:57:c6:5c:43:b4:8b:
d0:cf:c9:bf:db:a5:41:53:18:08:3c:5e:df:28:01:
19:ee:7f:9a:a3:29:8b:b0:77:71:c4:14:5c:49:13:
66:0e:d8:90:09:14:70:7f:d0:89:81:b7:fd:2a:40:
43:5f:3f:26:6a:d8:40:56:e8:5b:51:a5:18:49:13:
fb:b5:95:fd:e9:bf:33:d6:84:d1:1c:9a:b5:14:45:
8a:61:53:bd:76:b1:d2:8e:a6:64:2e:40:80:6d:fc:
6a:e0:51:93:cf:c0:6a:6d:f4:7a:6d:4b:de:02:a3:
a9:74:cd:b3:91:71:21:23:15:05:8c:b4:fe:88:9c:
ff:e5:f9:1f:9d:82:bc:c7:6b:c8:bf:cf:9e:a0:aa:
2f:ed:71:79:98:9f:46:ae:56:9e:33:da:b3:02:45:
b4:8c:4c:44:76:66:b3:03:79:d2:e4:e1:94:62:9f:
0d:da:51:21:b8:34:a0:84:f0:29:ad:4c:5a:a2:d9:
1e:e8:26:06:0c:20:78:d0:0b:05:2b:58:71:13:ee:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:10:A7:07:6B:E4:DD:4C:F8:3F:3C:A3:52:69:A5:9A:68:C3:01
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4l8Qpwdr5N1M-D88o1JppZpowwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/22
Signature Algorithm: sha256WithRSAEncryption
51:c2:24:c4:c5:b3:d4:bd:59:2c:b8:1b:f5:60:6e:48:67:cc:
08:56:43:46:c6:3c:27:36:7c:4c:f2:4f:00:2a:ea:24:78:d6:
14:45:1c:37:76:24:6d:c6:7a:6e:f5:75:7e:52:80:2d:95:39:
e2:67:e7:25:40:68:05:14:1d:60:e5:d8:ad:ec:63:80:69:14:
46:d4:dd:08:a1:0b:62:f4:72:c2:3b:88:30:9b:22:c8:e4:69:
ae:48:1d:b6:ca:3a:af:b9:52:a2:9c:f1:75:e0:af:78:5f:08:
30:9d:9a:fa:d4:15:78:96:0d:31:a9:35:ed:26:fe:93:46:cb:
89:a3:83:f8:80:39:90:96:51:5d:79:61:0c:f1:7e:14:c0:05:
34:d0:9f:3b:e1:e8:0d:eb:e7:e7:84:79:96:b5:5a:d4:cd:3f:
a0:f8:15:54:47:1d:21:84:cb:94:e7:f9:49:3c:d1:ec:a8:10:
b1:d1:f1:be:62:04:6a:dc:75:6f:5a:8e:3e:e9:54:a1:cc:91:
ca:9f:e3:66:fb:47:52:c6:ed:c8:ed:4e:6b:5a:db:86:91:27:
1c:13:c2:92:ed:67:3c:32:c6:da:f8:e9:b1:9b:27:14:37:4d:
e1:52:ee:55:ab:0e:30:28:19:78:29:bd:3c:b3:8a:fc:94:66:
57:9b:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org