Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/QzbOTAhs-8cO2OuElg3FkAiHDug.roa
File: QzbOTAhs-8cO2OuElg3FkAiHDug.roa (raw, json)
Hash identifier: Ua53SYgMmMUpsZ68wY1DRxb8XW9U4565on95E6PVHvs=
Subject key identifier: 43:36:CE:4C:08:6C:FB:C7:0E:D8:EB:84:96:0D:C5:90:08:87:0E:E8
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01886D683012B2CAC4F8768EC72844E12A40
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/QzbOTAhs-8cO2OuElg3FkAiHDug.roa
Signing time: Tue 30 May 2023 16:05:24 +0000
ROA not before: Tue 30 May 2023 16:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 10:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:68:30:12:b2:ca:c4:f8:76:8e:c7:28:44:e1:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: May 30 16:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4336ce4c086cfbc70ed8eb84960dc59008870ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:83:fb:d0:c2:68:5a:6a:53:7d:f2:d3:6d:
53:b2:c2:74:fa:9f:76:7a:5f:44:3b:45:d8:17:c2:
93:f8:15:90:cd:bc:2b:75:a6:1a:83:a0:f1:38:23:
9a:24:16:7a:04:f9:74:d6:4f:8a:0a:02:a8:a3:b4:
2c:7f:fa:5a:6c:05:83:76:c7:92:81:0e:cd:a0:ba:
11:94:ea:fc:95:b8:88:46:25:cf:0b:f9:40:7f:00:
93:a7:b2:39:38:f9:11:c4:7e:96:03:5b:c7:86:f6:
ac:18:70:82:86:eb:be:10:4b:14:6c:68:d4:05:f5:
aa:83:d7:ea:69:47:ac:21:52:88:20:e6:7a:cf:d1:
2d:af:c0:41:e3:d4:de:75:0b:d1:6c:7c:36:92:7f:
f2:70:ea:23:8f:99:47:32:c3:a5:ee:7a:9b:cb:e1:
60:ec:a7:3c:35:1a:8c:49:e6:19:a2:fd:86:d1:d8:
7a:c5:93:fc:b2:d1:da:c0:ea:2b:b0:55:00:c6:da:
b1:1e:11:fe:cb:3b:aa:08:57:f8:4c:96:b3:0e:10:
b7:af:e1:bc:cf:02:ae:20:88:f4:41:a3:f7:80:cc:
11:27:e4:ac:eb:ab:30:e8:79:1a:6d:58:1e:01:82:
f1:c1:a5:fe:68:c1:26:6b:d0:4b:89:52:ed:f0:66:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:36:CE:4C:08:6C:FB:C7:0E:D8:EB:84:96:0D:C5:90:08:87:0E:E8
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/QzbOTAhs-8cO2OuElg3FkAiHDug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
54:89:55:56:24:ec:3a:fc:e6:16:70:43:5f:9d:fc:ab:2c:5e:
1b:0b:37:ba:37:e0:3f:85:f7:30:97:aa:8d:40:2d:25:36:3c:
e0:c2:36:b0:c9:73:06:8e:f5:9b:26:eb:34:f5:12:d4:77:9c:
57:03:8e:f8:26:9b:c3:5f:67:4a:a9:2f:25:a6:29:bb:28:21:
1d:7b:dc:02:06:5c:b6:10:64:50:ba:d7:db:dd:c8:a7:0a:7c:
c1:df:ad:6d:ff:3e:75:83:d9:93:c0:75:f6:ad:db:31:6a:c3:
bb:a8:3b:0b:d6:cb:99:af:06:ab:4e:b6:11:33:93:04:34:27:
1a:8d:20:fa:a9:9a:52:75:76:17:00:b7:61:43:51:43:c7:85:
91:78:60:a1:3c:42:47:76:84:9e:02:1b:4e:e1:9d:41:d0:37:
58:fe:ba:c8:2b:94:bb:d4:7a:58:4a:3d:ac:f4:9f:0c:52:7c:
8d:4c:1b:57:9a:a2:07:a5:35:e4:e0:fc:58:46:28:bb:db:dc:
23:92:24:66:5a:9a:f8:9a:14:b8:9c:cd:d6:ab:1a:34:e8:37:
c0:f1:dc:14:29:06:6f:1f:fa:ea:3b:2d:b7:18:b6:e0:2f:b8:
65:06:f4:1f:cc:7e:64:02:fa:2a:ae:fd:68:c6:50:34:65:9b:
a8:b5:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org