Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/KcZMDkx2WgrRF8igjAoZsavRICc.roa
File: KcZMDkx2WgrRF8igjAoZsavRICc.roa (raw, json)
Hash identifier: oUXX1i9PmgSuau7ABEZeQPomulVT/xNwfvJG6Jcb0eI=
Subject key identifier: 29:C6:4C:0E:4C:76:5A:0A:D1:17:C8:A0:8C:0A:19:B1:AB:D1:20:27
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0189B0AD7DFEE79FF87994451389B451E483
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/KcZMDkx2WgrRF8igjAoZsavRICc.roa
Signing time: Tue 01 Aug 2023 10:38:27 +0000
ROA not before: Tue 01 Aug 2023 10:38:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.136.208.0/22 maxlen: 24
83.136.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:ad:7d:fe:e7:9f:f8:79:94:45:13:89:b4:51:e4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Aug 1 10:38:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29c64c0e4c765a0ad117c8a08c0a19b1abd12027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:c1:3b:32:b2:08:78:f1:00:ea:c9:01:6b:
ec:71:7f:e0:f5:9c:e6:d3:38:ea:fd:0e:ca:5a:d7:
83:56:55:c2:7a:13:1e:dd:06:b0:60:b6:26:1f:81:
70:41:d6:cc:ac:4f:6c:10:f7:0a:ea:18:d1:91:f8:
d5:6a:17:3b:90:6b:8f:3d:13:97:23:7f:dc:65:fe:
cc:12:4c:c9:59:73:96:df:78:51:10:97:3c:d5:a6:
e8:0b:0d:ed:97:72:b8:78:60:11:53:59:87:29:55:
10:85:ba:49:00:06:fa:ce:ce:2e:2f:38:77:87:a9:
a5:c0:7f:a9:b3:e5:d7:2e:5f:05:a7:b2:7f:eb:7d:
47:66:c2:94:7b:e2:43:60:b9:84:b2:f9:82:bd:81:
8d:fb:be:1d:20:f1:8b:ac:26:cb:68:d4:5f:42:d8:
cf:a0:0d:d1:79:19:c4:0a:83:38:f5:c9:fd:d2:b2:
32:21:b5:6a:38:53:10:16:fe:26:3b:33:e9:05:f4:
95:ea:1f:9d:61:90:2c:34:48:34:dc:44:13:82:c6:
b4:2f:35:7b:4e:ae:be:57:2e:ee:bd:0b:f0:d6:83:
9f:a2:52:e7:b3:da:75:37:c6:a3:1a:53:d6:f2:58:
37:8a:3e:cf:94:ec:1f:61:8a:15:9d:11:bd:ae:00:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:4C:0E:4C:76:5A:0A:D1:17:C8:A0:8C:0A:19:B1:AB:D1:20:27
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/KcZMDkx2WgrRF8igjAoZsavRICc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/22
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:77:20:56:6e:aa:82:80:1e:f4:a0:9c:56:ed:7c:3e:7b:af:
78:49:ec:e7:6b:f5:0d:2c:d6:86:8f:26:70:4d:7a:34:aa:1f:
56:9f:40:83:b1:fc:6c:06:80:1d:ca:e3:af:98:30:00:96:e0:
48:e2:02:66:c6:bd:af:5a:3b:d3:e7:4f:06:84:1d:85:66:5a:
ef:50:c3:30:e3:3e:fa:0b:4c:ee:d8:35:07:98:87:d0:c1:43:
7e:16:cf:27:36:f4:af:46:07:6b:6b:81:d4:24:e2:8b:21:85:
0b:f2:a3:6c:dc:d0:7f:97:09:20:d5:55:d6:d2:76:41:49:54:
95:5e:50:60:21:ee:16:c3:b3:10:56:e9:6f:ce:20:18:ba:86:
64:3c:ee:49:5f:10:17:0e:4f:c9:94:a1:9f:fa:bc:14:aa:b7:
64:22:88:11:4b:a8:39:ea:fb:21:52:a4:d0:4b:e1:8b:ab:e6:
ee:9c:a3:9d:78:48:41:f9:f8:fa:6a:6f:82:b9:1e:ef:3e:95:
c2:ba:52:39:de:64:5f:97:34:f8:4e:7a:a3:67:56:0a:41:98:
ac:2a:5a:7b:52:8c:24:09:31:1d:6c:ed:4b:ab:b4:ab:56:6d:
76:53:fb:d7:7b:4a:43:fe:de:fe:09:c9:34:c0:d5:7b:67:2a:
bb:47:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:31 2024 by rpki-client on console-fra.rpki-client.org