Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/kDG2a8C768AncqzsAa2fHGPwGY4.roa
File: kDG2a8C768AncqzsAa2fHGPwGY4.roa (raw, json)
Hash identifier: kzYX6ij5169RY8oySQaE5il8qPo2VJxfn2Rdkl3PNmw=
Subject key identifier: 90:31:B6:6B:C0:BB:EB:C0:27:72:AC:EC:01:AD:9F:1C:63:F0:19:8E
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01891FC328FE7EB7133651889BB2654D0F37
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/kDG2a8C768AncqzsAa2fHGPwGY4.roa
Signing time: Tue 04 Jul 2023 07:17:10 +0000
ROA not before: Tue 04 Jul 2023 07:17:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.136.208.0/21 maxlen: 24
83.136.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 07:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:c3:28:fe:7e:b7:13:36:51:88:9b:b2:65:4d:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jul 4 07:17:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9031b66bc0bbebc02772acec01ad9f1c63f0198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:42:d3:7c:41:a0:0e:55:9c:f2:01:20:85:
1b:18:93:82:ec:af:22:88:b9:a3:24:5c:ce:7d:8b:
fe:7c:a2:0f:0d:0b:f6:a1:fa:b3:8d:67:0e:65:9e:
a6:6d:d5:1c:5a:f0:43:e1:86:6c:95:d8:f8:5c:22:
e9:48:b9:c6:ce:b8:51:c8:b0:98:ca:63:f7:e2:85:
94:a8:5a:86:e5:a9:36:85:2b:21:f8:ee:4f:c4:45:
df:aa:42:b0:f2:b5:d6:0f:e9:40:b8:0d:83:78:b4:
9e:58:3e:c6:f5:53:86:ed:e1:c3:75:dc:65:06:74:
45:f0:72:81:78:9f:ed:2f:6c:09:c4:ef:94:f1:87:
90:59:7e:29:75:f3:77:1a:10:8c:04:17:f7:65:64:
ee:e1:de:d2:85:15:b3:58:2e:65:02:b4:ba:29:0d:
d8:ab:51:a8:28:77:98:79:80:04:4f:22:9c:08:72:
42:87:bc:c7:5f:73:7b:68:7f:79:5c:2f:58:87:ac:
e9:27:0a:7e:94:42:20:36:27:c7:f1:84:0f:a1:3a:
5e:14:45:1c:7d:07:c8:fb:b0:87:21:8b:dd:8d:ca:
52:2f:af:ef:73:c4:4a:50:66:52:18:ef:94:61:f7:
55:42:d9:bf:ca:ee:91:e0:e4:9d:62:43:43:de:d9:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:B6:6B:C0:BB:EB:C0:27:72:AC:EC:01:AD:9F:1C:63:F0:19:8E
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/kDG2a8C768AncqzsAa2fHGPwGY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/21
Signature Algorithm: sha256WithRSAEncryption
60:b9:cf:f2:32:e7:94:14:0a:2b:05:08:29:58:72:2e:f3:e4:
e9:c7:62:bd:55:77:7d:c3:a6:32:bb:38:b3:a1:0e:ca:b7:df:
19:5a:45:84:6c:0c:46:9a:6d:8f:52:05:d7:70:6e:61:a1:2a:
5e:08:09:53:8c:50:d3:6b:55:66:b1:42:78:7e:31:3f:7d:55:
78:c4:9b:d4:fa:81:db:06:7b:bc:55:e2:c6:02:32:49:ec:1b:
7f:ed:c5:65:93:4f:df:f3:6e:61:d4:db:6b:56:fd:72:61:8f:
0c:8e:6b:08:63:5d:a9:cd:0b:dd:95:f6:b1:e4:58:f6:fb:3f:
0d:2d:0b:04:66:1c:97:5d:10:dd:bb:72:d9:99:67:5d:4d:1c:
17:24:9f:a3:39:02:87:44:b3:4b:f7:ef:d7:6b:45:56:6e:b3:
1d:41:99:52:fd:2e:38:79:b6:00:7d:36:3c:28:b0:69:e7:30:
58:53:2d:3f:a9:35:26:11:5d:78:88:24:b1:0f:5d:48:75:2f:
a5:57:ef:1b:b1:28:3b:35:3b:7b:54:77:2e:e1:ec:1d:9b:b4:
8d:79:65:3c:82:14:62:5a:67:fb:3f:14:b1:fc:94:7a:83:4c:
46:2a:e7:93:d8:06:51:15:89:3f:25:94:87:9a:ce:36:01:4b:
33:95:41:ca
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYkfwyj+frcTNlGIm7JlTQ83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjMwNzA0MDcxNzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDMxYjY2YmMwYmJlYmMwMjc3MmFjZWMwMWFkOWYxYzYzZjAxOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh5C03xBoA5VnPIBIIUbGJOC7K8i
iLmjJFzOfYv+fKIPDQv2ofqzjWcOZZ6mbdUcWvBD4YZsldj4XCLpSLnGzrhRyLCY
ymP34oWUqFqG5ak2hSsh+O5PxEXfqkKw8rXWD+lAuA2DeLSeWD7G9VOG7eHDddxl
BnRF8HKBeJ/tL2wJxO+U8YeQWX4pdfN3GhCMBBf3ZWTu4d7ShRWzWC5lArS6KQ3Y
q1GoKHeYeYAETyKcCHJCh7zHX3N7aH95XC9Yh6zpJwp+lEIgNifH8YQPoTpeFEUc
fQfI+7CHIYvdjcpSL6/vc8RKUGZSGO+UYfdVQtm/yu6R4OSdYkND3tmGGwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJAxtmvAu+vAJ3Ks7AGtnxxj8BmOMB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xL2tERzJhOEM3NjhBbmNxenNBYTJmSEdQd0dZNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANTiNAw
DQYJKoZIhvcNAQELBQADggEBAGC5z/Iy55QUCisFCClYci7z5OnHYr1Vd33DpjK7
OLOhDsq33xlaRYRsDEaabY9SBddwbmGhKl4ICVOMUNNrVWaxQnh+MT99VXjEm9T6
gdsGe7xV4sYCMknsG3/txWWTT9/zbmHU22tW/XJhjwyOawhjXanNC92V9rHkWPb7
Pw0tCwRmHJddEN27ctmZZ11NHBckn6M5AodEs0v379drRVZusx1BmVL9Ljh5tgB9
NjwosGnnMFhTLT+pNSYRXXiIJLEPXUh1L6VX7xuxKDs1O3tUdy7h7B2btI15ZTyC
FGJaZ/s/FLH8lHqDTEYq55PYBlEViT8llIeazjYBSzOVQco=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:13 2024 by rpki-client on console-ams.rpki-client.org