Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/5LZQN38kTsrsemegUnpdbRsUIDs.roa
File: 5LZQN38kTsrsemegUnpdbRsUIDs.roa (raw, json)
Hash identifier: ObJbYmP7NpBbCdDnekMXBeGtqSsyQ/8B3PK5/Qge6iY=
Subject key identifier: E4:B6:50:37:7F:24:4E:CA:EC:7A:67:A0:52:7A:5D:6D:1B:14:20:3B
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01856CAF1078E97F365124F25DFC569A046E
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/5LZQN38kTsrsemegUnpdbRsUIDs.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 83.136.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 07:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:10:78:e9:7f:36:51:24:f2:5d:fc:56:9a:04:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4b650377f244ecaec7a67a0527a5d6d1b14203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:10:d3:e4:90:83:00:0f:c0:ce:b0:3d:3d:
3a:4e:90:99:e5:3e:9b:24:46:99:b6:bf:a9:73:0b:
77:36:81:19:83:04:9f:db:e1:b2:f2:cd:51:3e:cc:
22:8c:e5:65:48:8e:bd:84:e4:67:7f:87:3e:b9:da:
9d:a7:eb:4d:8d:d8:0f:5f:6e:69:13:07:74:e3:09:
93:8c:9a:60:f1:f4:64:07:51:9d:3b:94:90:c4:c5:
66:33:30:7a:91:99:d7:8d:05:68:3a:e7:42:ad:cf:
b1:21:a7:2d:1c:bc:ad:bd:46:b5:c3:17:98:d5:cc:
b5:40:40:63:44:1f:e9:e1:51:f2:76:45:78:a9:53:
06:7c:de:51:0d:44:21:07:7b:c7:0d:e2:6b:f3:24:
f8:06:9e:fd:63:c6:70:4b:26:e1:8e:37:6b:8e:48:
f3:b9:52:da:92:58:d7:11:53:2d:f0:6c:95:5a:9b:
2d:2f:72:0e:bc:41:fe:8d:ed:e2:97:8a:20:2b:39:
96:93:3e:9f:0f:13:aa:9c:06:de:ee:f3:51:1f:28:
e0:4d:ab:25:a8:74:a2:07:96:d5:40:a3:50:f6:c9:
5c:3f:be:2d:8a:2a:fa:c4:47:6f:2c:9c:59:a0:a3:
36:f5:3e:f6:1f:ff:64:45:89:e1:58:6c:74:f2:9b:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B6:50:37:7F:24:4E:CA:EC:7A:67:A0:52:7A:5D:6D:1B:14:20:3B
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/5LZQN38kTsrsemegUnpdbRsUIDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/22
Signature Algorithm: sha256WithRSAEncryption
98:13:46:22:4a:4a:fb:5a:9a:e4:79:2d:f3:8c:f5:37:db:ff:
b9:74:96:96:76:0d:6c:c6:1d:83:f9:90:f5:b2:48:1f:ff:d2:
e8:be:67:ba:1f:80:1b:5e:ab:95:05:4a:bd:c3:ea:0d:a4:91:
8a:e5:a2:71:94:3f:9b:6d:4f:0c:22:24:a5:ac:d8:3c:be:a4:
48:ad:45:ac:ab:a0:d5:a2:34:fe:79:f9:4d:8e:7e:ad:6a:77:
3c:57:1e:be:99:9d:3d:7c:41:41:0f:97:03:1d:0f:03:0b:88:
c0:ae:d5:9e:ce:1b:c1:b1:40:ef:de:09:5e:c3:95:8b:f0:6e:
28:5e:3d:8c:5d:57:27:3b:4a:8b:50:aa:68:0c:98:aa:8e:36:
bb:c0:46:a0:98:68:74:59:f2:76:6d:0b:ec:30:a0:83:22:b0:
23:f3:be:e3:6a:c6:02:49:a1:f0:22:bb:6f:ac:35:c0:51:e2:
63:cd:4b:e6:00:57:ef:55:e5:2c:00:ae:a8:c6:24:c0:2a:35:
8e:f2:ba:79:3a:a4:3f:c6:23:34:af:19:ac:59:63:85:dd:e5:
b5:c6:a1:7a:e9:0e:fc:6e:8a:ef:f6:40:8e:58:91:c3:52:2b:
88:1e:7d:2c:ce:01:37:27:ff:03:ec:20:0c:df:08:69:1d:18:
f0:e4:f7:0f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVsrxB46X82USTyXfxWmgRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjMwMTAxMDkzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGI2NTAzNzdmMjQ0ZWNhZWM3YTY3YTA1MjdhNWQ2ZDFiMTQyMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRcQ0+SQgwAPwM6wPT06TpCZ5T6b
JEaZtr+pcwt3NoEZgwSf2+Gy8s1RPswijOVlSI69hORnf4c+udqdp+tNjdgPX25p
Ewd04wmTjJpg8fRkB1GdO5SQxMVmMzB6kZnXjQVoOudCrc+xIactHLytvUa1wxeY
1cy1QEBjRB/p4VHydkV4qVMGfN5RDUQhB3vHDeJr8yT4Bp79Y8ZwSybhjjdrjkjz
uVLakljXEVMt8GyVWpstL3IOvEH+je3il4ogKzmWkz6fDxOqnAbe7vNRHyjgTasl
qHSiB5bVQKNQ9slcP74tiir6xEdvLJxZoKM29T72H/9kRYnhWGx08pvBFwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOS2UDd/JE7K7HpnoFJ6XW0bFCA7MB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xLzVMWlFOMzhrVHNyc2VtZWdVbnBkYlJzVUlEcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJTiNAw
DQYJKoZIhvcNAQELBQADggEBAJgTRiJKSvtamuR5LfOM9Tfb/7l0lpZ2DWzGHYP5
kPWySB//0ui+Z7ofgBteq5UFSr3D6g2kkYrlonGUP5ttTwwiJKWs2Dy+pEitRayr
oNWiNP55+U2Ofq1qdzxXHr6ZnT18QUEPlwMdDwMLiMCu1Z7OG8GxQO/eCV7DlYvw
bihePYxdVyc7SotQqmgMmKqONrvARqCYaHRZ8nZtC+wwoIMisCPzvuNqxgJJofAi
u2+sNcBR4mPNS+YAV+9V5SwArqjGJMAqNY7yunk6pD/GIzSvGaxZY4Xd5bXGoXrp
Dvxuiu/2QI5YkcNSK4gefSzOATcn/wPsIAzfCGkdGPDk9w8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org