Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/bzNaUaFHYUK2APGL6PxQLUfyn4o.roa
File: bzNaUaFHYUK2APGL6PxQLUfyn4o.roa (raw, json)
Hash identifier: yLXuxNlV23TIojNYBp+TLbvMf8N4j3hf6HJBRr46vts=
Subject key identifier: 6F:33:5A:51:A1:47:61:42:B6:00:F1:8B:E8:FC:50:2D:47:F2:9F:8A
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0188710C0158D0B87FF67E9CFD265CE5F927
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/bzNaUaFHYUK2APGL6PxQLUfyn4o.roa
Signing time: Wed 31 May 2023 09:03:12 +0000
ROA not before: Wed 31 May 2023 09:03:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.136.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:0c:01:58:d0:b8:7f:f6:7e:9c:fd:26:5c:e5:f9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: May 31 09:03:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f335a51a1476142b600f18be8fc502d47f29f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:0c:57:6d:dc:b9:19:9a:de:30:99:08:07:
c1:3c:c4:82:cf:41:9f:b5:3d:a5:3b:e6:9f:e2:7a:
80:66:e8:9d:95:49:a4:03:71:0a:cd:f1:68:46:13:
16:cd:2c:65:8f:fc:bb:0d:5e:68:79:fb:11:7c:8e:
bd:84:ec:78:c9:79:49:da:35:3d:cf:62:81:f7:99:
bb:d0:03:40:42:f6:54:87:aa:ba:43:dc:5a:b5:64:
c3:ef:71:6a:24:c7:97:bc:a7:c8:9a:9f:16:af:81:
f7:91:4d:3a:a1:e5:e2:9b:32:18:bb:0c:f4:79:52:
af:23:29:10:63:77:57:11:1d:a3:de:cb:53:4f:ea:
85:7a:df:bf:65:5a:95:5b:46:4d:6f:98:8d:4b:12:
3e:51:b9:e4:5a:a8:8c:49:53:39:6f:55:c7:d3:8a:
9f:78:fe:bc:a7:0b:6a:a9:da:b7:8c:93:b9:18:69:
dd:da:2e:fe:74:8d:ab:00:71:1a:33:1b:7c:a7:db:
f1:34:c1:e4:09:fb:12:81:59:e3:33:c1:89:df:35:
64:94:59:c7:6d:c0:a4:14:b6:c4:71:9d:0a:08:c6:
a8:ad:94:64:0e:2f:30:7f:a1:67:ba:53:c5:62:95:
62:ba:6d:db:3e:34:13:08:92:af:08:5c:66:d9:c3:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:5A:51:A1:47:61:42:B6:00:F1:8B:E8:FC:50:2D:47:F2:9F:8A
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/bzNaUaFHYUK2APGL6PxQLUfyn4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:db:ec:ef:a0:c3:3d:c8:87:cc:e0:06:0e:fd:85:94:0f:ac:
e1:6a:11:65:74:b7:29:5e:ca:ff:5d:e8:af:61:b1:58:97:9f:
b2:18:30:af:40:7d:5c:7c:bb:ae:a3:79:cd:e6:ec:b1:17:67:
b3:0a:f4:7d:1b:b2:c1:4a:f0:fb:b8:2a:e1:cd:39:e6:06:8f:
7e:e5:44:b7:c6:10:48:3e:30:e6:1a:5b:9d:1f:08:c5:f8:71:
04:ee:7a:9e:86:89:aa:37:35:96:49:20:42:81:2c:1a:b5:02:
b0:52:f1:b2:99:fd:a4:96:82:b4:f0:d0:1e:0e:a0:12:14:6e:
80:35:db:8b:7b:db:54:27:23:d1:62:15:0b:dc:6e:1f:bc:36:
64:01:92:cb:5a:8f:4c:9b:c9:be:cd:c0:b3:db:c5:85:a1:63:
b7:1d:0c:9a:2c:1d:d6:17:3c:45:4a:88:ed:e5:d8:f2:84:cc:
67:b9:3e:9f:94:0a:f8:f1:d6:9a:6d:ce:65:85:83:bb:cc:ea:
6b:0f:b3:4c:64:bd:8f:93:97:7b:78:df:a9:46:c5:f1:6d:46:
92:a4:6a:81:1f:91:f2:62:bc:0c:63:1c:3c:85:2e:d2:b3:3f:
14:a8:94:18:7c:97:e3:27:8f:8d:1b:e9:a3:2b:f1:4d:d5:b1:
b3:c4:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-ams.rpki-client.org