Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/MzeUpEfqaDQ9mOgj6YXvG2wIq0k.roa
File: MzeUpEfqaDQ9mOgj6YXvG2wIq0k.roa (raw, json)
Hash identifier: QsZZnT0AEmuymryEUtXow4pGJQ2UHXMSmRjDh/cA6v0=
Subject key identifier: 33:37:94:A4:47:EA:68:34:3D:98:E8:23:E9:85:EF:1B:6C:08:AB:49
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01856CAF11C4B9003BBC0B168FFF19768F58
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/MzeUpEfqaDQ9mOgj6YXvG2wIq0k.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 83.136.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:11:c4:b9:00:3b:bc:0b:16:8f:ff:19:76:8f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=333794a447ea68343d98e823e985ef1b6c08ab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:29:bd:af:14:5a:00:d8:0c:c5:c7:8d:bf:
c2:ba:15:77:33:00:e5:75:d8:e9:8a:1e:98:2e:39:
9d:8b:f2:9c:4c:9f:5b:e0:c8:82:0d:7f:fa:82:6e:
38:93:e2:f3:17:0d:51:df:ad:31:ce:39:c9:fb:76:
27:6e:cd:03:b2:a6:40:bb:19:de:6d:73:fc:03:24:
46:32:73:d4:e1:7e:03:2b:17:60:9f:be:23:69:c9:
b0:c5:8f:22:5c:f0:df:a1:d4:6e:a4:9d:b6:62:ef:
c8:a3:55:84:07:6d:84:2d:f4:88:e3:78:9e:81:05:
93:3e:e2:5f:6a:9b:03:57:57:ca:19:20:38:4c:97:
a6:4f:da:db:85:76:2a:17:3a:05:87:10:d4:0c:e8:
2d:43:74:b4:84:c7:89:7e:d9:3c:db:d3:e0:99:1e:
b7:91:18:7c:58:2b:0a:69:aa:61:a6:24:6f:73:c7:
07:67:0f:ed:32:bd:4f:28:e6:05:9d:12:85:f5:f4:
98:b1:2d:7e:62:63:68:f7:de:05:ec:a6:37:b7:f1:
53:6f:5b:7c:ba:c7:53:6f:37:a1:af:a9:90:3e:89:
e3:dc:85:90:19:69:02:17:fb:4c:f0:96:1d:6c:5e:
60:c4:1f:04:94:91:50:b9:c3:fb:50:48:9f:f2:d2:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:94:A4:47:EA:68:34:3D:98:E8:23:E9:85:EF:1B:6C:08:AB:49
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/MzeUpEfqaDQ9mOgj6YXvG2wIq0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.212.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f6:90:bf:3f:6a:ea:3e:08:9a:e4:58:0c:bf:c1:77:8b:1d:
59:ac:79:c0:b4:ff:af:ce:70:0e:f7:2f:46:32:4b:b5:13:e5:
4e:62:b8:42:bc:79:e6:cd:64:0d:d9:51:e9:d6:a4:01:7d:86:
8c:38:07:5f:9c:bf:2e:10:12:29:7b:8b:0f:88:24:ca:c7:b4:
23:7d:22:69:f1:d8:53:c5:f6:69:7c:d0:e4:c1:0a:47:ad:7c:
6c:10:90:9a:dc:45:d2:52:ed:38:7d:75:38:57:9f:00:3a:03:
d7:f1:c5:ed:19:a0:a8:05:bd:60:2d:5f:44:1b:ce:31:4b:2f:
a4:a5:f0:fe:0f:7d:24:f6:77:f2:b8:0c:b6:58:08:c7:41:7b:
ad:3b:6e:82:7e:8d:66:5c:c4:f3:39:09:e0:0a:2b:a2:e4:82:
bc:e1:e0:3a:34:b9:c1:68:ed:c5:81:69:19:93:99:4f:6b:8b:
86:70:fc:2d:f0:e6:5d:ee:03:cb:5e:2b:d7:3b:a3:79:d9:63:
d1:50:2e:5f:70:93:a0:5a:5f:b6:77:16:59:7a:16:c9:20:f6:
e4:69:11:c3:e2:33:38:65:bb:d3:56:6b:07:ea:91:0f:af:f2:
f5:bb:81:10:b5:9b:40:8c:d6:65:7c:be:42:fd:5b:a2:3d:4c:
2d:45:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-ams.rpki-client.org