Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/a-cZ_EdVSb8keQL5-OIxBOcVvoU.roa
File: a-cZ_EdVSb8keQL5-OIxBOcVvoU.roa (raw, json)
Hash identifier: sZH5TcpYLU800MTzidaAc13wbeuHY7rwvt6ddbjlvFM=
Subject key identifier: 6B:E7:19:FC:47:55:49:BF:24:79:02:F9:F8:E2:31:04:E7:15:BE:85
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01905360DA05484B503F3EB9E3DEF4DA37EB
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/a-cZ_EdVSb8keQL5-OIxBOcVvoU.roa
Signing time: Wed 26 Jun 2024 07:09:34 +0000
ROA not before: Wed 26 Jun 2024 07:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 15:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:60:da:05:48:4b:50:3f:3e:b9:e3:de:f4:da:37:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jun 26 07:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6be719fc475549bf247902f9f8e23104e715be85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:5d:f0:a7:d1:e0:6d:57:d7:1a:56:b5:79:
a0:d4:42:00:a9:4f:eb:53:eb:8a:13:ad:b7:46:c0:
d9:5a:d4:e7:58:cf:4d:dd:e5:30:63:f6:d3:9d:9c:
b7:2b:42:1a:7e:93:c9:62:90:6a:5f:22:b0:46:fd:
3c:96:1b:95:f9:b3:c1:66:60:fc:bf:5a:d6:73:18:
5b:fd:61:52:af:6c:42:f3:cb:46:49:66:cb:be:70:
08:6c:9d:cb:2b:f1:c8:c0:a3:52:e8:ac:88:69:cf:
6b:f8:58:d9:db:f4:05:49:43:7b:51:91:07:7c:68:
67:34:88:e1:47:13:68:e3:8c:ff:51:68:12:c3:06:
c6:d1:9a:2f:59:39:9c:c6:62:15:f1:75:22:f7:8b:
06:39:71:da:49:21:89:8b:68:98:bd:64:63:8e:3c:
b0:a7:17:7b:fd:e0:b1:6c:c6:b4:04:a7:31:1a:a4:
d0:ac:07:d7:1a:75:14:ae:c1:c4:99:9b:ed:4d:f4:
63:62:65:75:46:e2:28:48:22:8e:98:4c:90:18:79:
29:8d:be:28:57:5e:2a:f9:e2:f9:53:2d:57:d1:f8:
0c:28:9e:e3:c7:fb:bc:d3:e3:44:a2:62:26:bc:9a:
29:06:6d:16:d7:c9:bc:af:e5:35:09:42:1f:b1:5c:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:19:FC:47:55:49:BF:24:79:02:F9:F8:E2:31:04:E7:15:BE:85
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/a-cZ_EdVSb8keQL5-OIxBOcVvoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:78:1d:fd:91:cb:cb:41:d6:ba:9a:d0:b9:4a:54:b8:08:08:
58:0d:ee:6c:e8:76:cd:58:de:5a:01:66:57:0d:67:b0:d2:a4:
11:37:e8:8d:91:8f:6b:54:52:68:5d:d3:be:d3:09:89:04:01:
95:53:6c:42:63:88:3c:c6:a1:e6:7d:46:b2:64:fb:a0:3a:69:
34:d9:f2:20:0b:79:f5:10:f5:b0:32:00:c7:70:e7:5d:87:be:
fc:0b:15:87:d9:40:35:7b:d4:a3:7e:23:d0:a1:38:35:69:1d:
7d:cc:47:25:69:58:7f:a8:96:da:5b:fa:40:41:0a:f5:74:f1:
a8:19:df:c6:ca:ad:ff:ff:dc:b8:0b:e3:79:68:dc:81:ff:3f:
52:2d:1b:ec:48:7b:6b:b8:18:44:79:2b:1d:1d:6b:ca:40:bb:
04:bb:d7:8d:95:18:62:9a:d8:a6:cf:a7:5a:56:45:3a:e3:71:
7c:a7:f4:2c:32:d0:22:37:b5:56:ca:08:0d:4d:65:dd:73:33:
95:86:9d:5f:13:be:dc:b2:9a:e9:9a:2d:55:7a:06:cf:5b:e6:
e8:d9:c8:10:04:7d:ae:5c:d0:3f:7e:0a:49:01:63:89:15:67:
e1:89:d7:63:e8:8a:84:ed:52:49:d4:14:e7:fb:64:f1:da:c5:
ef:e0:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org