Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/ea0HfhvXHGgq8hI29MCxffKfKXo.roa
File: ea0HfhvXHGgq8hI29MCxffKfKXo.roa (raw, json)
Hash identifier: +hJLIJFvUAbzbHA6WYZ8Cdrfk0+WACPA5HYK+2S/OI0=
Subject key identifier: 79:AD:07:7E:1B:D7:1C:68:2A:F2:12:36:F4:C0:B1:7D:F2:9F:29:7A
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 018CC87148BFB1E0BC96F7BBEF5AE7B742CA
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/ea0HfhvXHGgq8hI29MCxffKfKXo.roa
Signing time: Tue 02 Jan 2024 04:31:56 +0000
ROA not before: Tue 02 Jan 2024 04:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.136.208.0/22 maxlen: 24
83.136.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 13:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:48:bf:b1:e0:bc:96:f7:bb:ef:5a:e7:b7:42:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 2 04:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79ad077e1bd71c682af21236f4c0b17df29f297a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:fe:07:06:47:6c:cc:56:09:42:c6:94:bd:
c1:17:4f:26:59:a8:c3:84:d3:93:f5:62:e7:50:0d:
8f:d5:8d:f0:f3:9b:1c:2f:d6:c8:2c:e4:89:9c:b3:
65:32:9e:8c:8b:44:b1:9b:5d:9a:b5:1d:36:3f:66:
b2:d1:78:99:c1:9d:1c:16:74:e1:77:e7:b1:78:05:
b7:30:ac:75:72:f5:29:47:81:b1:a4:cb:1b:09:8d:
9d:88:fa:8f:02:4c:2d:d0:87:9a:85:f9:34:6b:26:
9e:ef:97:9e:57:93:04:d6:fd:9f:fd:07:19:69:c8:
b5:0a:e6:8f:5d:5c:04:fb:da:98:d1:87:bb:07:d4:
ff:48:5b:a5:6c:e5:c4:e1:d0:8f:58:df:b1:9c:55:
97:ff:39:f8:03:94:81:6d:33:a9:84:6c:31:c4:3c:
46:f2:52:d7:a1:98:2d:b0:15:43:9a:51:d8:a5:47:
03:29:92:39:dc:b6:5d:28:34:b8:08:42:46:6f:c0:
ac:f4:5a:07:19:d0:e4:f9:00:19:37:d7:0c:0d:09:
9d:50:d0:e1:ae:f6:44:44:87:ae:8c:d8:65:be:f2:
40:f2:fb:b6:e4:7f:1e:80:da:70:f4:5b:f6:d7:2b:
c4:a9:da:19:f4:4a:71:ac:c4:36:79:6f:82:ec:a5:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AD:07:7E:1B:D7:1C:68:2A:F2:12:36:F4:C0:B1:7D:F2:9F:29:7A
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/ea0HfhvXHGgq8hI29MCxffKfKXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/22
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:29:bc:95:49:ea:f2:43:3e:9f:b6:5a:d4:7a:a5:6a:8a:a0:
83:10:c4:b2:6a:64:ec:e6:04:f4:0c:1d:23:1e:27:36:97:c9:
a2:bb:25:b1:cd:e3:c8:3f:5f:f1:8e:48:e4:92:ac:b4:40:2e:
8d:98:67:cf:23:7b:4e:c6:3f:67:fe:52:c1:00:11:16:24:ec:
7e:09:32:98:57:fa:62:74:53:e6:92:51:9e:3e:55:41:2c:2e:
ab:ee:eb:39:83:10:e5:1b:32:1d:41:33:33:71:f6:ce:c2:dc:
2e:e8:a0:8e:1c:b9:24:65:38:29:57:76:e3:3b:6c:16:78:52:
79:2f:cc:5d:7c:29:28:f9:08:a6:46:82:38:69:12:f2:22:22:
e6:6e:71:1f:76:d4:38:55:85:bf:e7:77:43:9c:3f:25:58:85:
20:a9:1a:e2:aa:4d:2d:a2:ed:c6:c0:24:11:17:cd:cc:19:03:
ef:47:b8:bc:6b:37:ef:48:ea:ca:31:3a:f4:22:4e:b9:80:e7:
8a:91:1a:5b:c3:08:84:37:76:57:37:68:9e:fc:ca:a7:d9:cc:
2a:ba:c1:0a:8a:9b:98:06:e2:11:60:4a:7d:95:70:fc:23:4c:
74:ae:b9:e1:50:33:5f:88:0f:83:5b:da:40:c3:08:69:b8:b1:
b1:6c:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 17:51:36 2024 by rpki-client on console-ams.rpki-client.org