Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/pSzQAHdNzrW_meafYXFntgyMopw.roa
File: pSzQAHdNzrW_meafYXFntgyMopw.roa (raw, json)
Hash identifier: 0yT6qVsxsNOK58gv8+oWU0rFqT/Rd/cZZ98YHCt3yzI=
Subject key identifier: A5:2C:D0:00:77:4D:CE:B5:BF:99:E6:9F:61:71:67:B6:0C:8C:A2:9C
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01856CAF0F3C4C60FA3DC2CF0F1171EC4F95
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/pSzQAHdNzrW_meafYXFntgyMopw.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 83.136.208.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:0f:3c:4c:60:fa:3d:c2:cf:0f:11:71:ec:4f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a52cd000774dceb5bf99e69f617167b60c8ca29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:e5:2d:e0:7b:34:65:89:d7:d5:37:47:45:
1b:73:aa:ff:b5:86:44:9a:98:a6:1d:4e:1c:f9:7a:
67:b5:9c:25:88:13:2f:a4:ed:ff:ac:53:14:58:e5:
4a:e7:b3:b0:03:eb:82:c5:01:55:cc:59:03:e0:56:
b4:5b:bc:ff:06:ca:b0:ce:46:63:a4:b6:35:e7:c4:
3e:42:69:be:16:d1:68:b7:88:9f:e3:6d:79:98:f1:
97:55:c6:c1:59:6c:3a:ec:a5:bd:6f:b0:ee:0c:e9:
ba:3d:2e:2e:dd:cd:2c:1f:9c:ad:92:80:14:0d:72:
f8:ec:76:48:cd:31:b6:cf:c9:65:52:f8:dc:16:53:
c1:a2:27:f0:89:5d:22:07:f0:d1:46:df:ba:25:39:
83:0e:02:39:d5:98:14:71:59:b0:7d:ca:fc:0e:c7:
71:fb:8d:55:07:be:5b:b8:3a:92:9c:ee:23:7f:b8:
f0:11:33:58:da:a3:a0:4b:bb:79:97:7a:2a:eb:04:
20:ea:fb:5c:23:ed:aa:77:3b:31:4a:7f:a6:08:e5:
74:c9:d1:25:d2:a7:bf:41:78:6f:5b:d8:44:29:99:
5f:2c:3e:78:d6:c8:34:f5:9d:0f:d5:e8:4c:3d:8b:
bc:0d:da:a9:db:7d:a6:f4:0d:0a:6b:41:42:da:b6:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:D0:00:77:4D:CE:B5:BF:99:E6:9F:61:71:67:B6:0C:8C:A2:9C
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/pSzQAHdNzrW_meafYXFntgyMopw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:65:6a:05:2d:32:c2:dc:2d:15:20:d0:c6:ea:a0:26:2c:2b:
dd:f9:d5:f6:a4:7d:22:23:ad:bd:a7:a9:44:db:1e:07:73:7d:
8b:f2:78:a4:db:5a:dc:68:44:7a:26:62:29:15:49:8a:75:6f:
18:ca:a3:dd:5b:f2:6c:5e:fe:f1:07:ae:33:ef:2a:9d:68:4d:
eb:e5:7d:14:57:43:c6:bb:e6:9d:e3:dd:cf:52:25:a1:2d:a2:
17:87:1e:e2:df:30:f5:6b:b4:81:63:66:40:ff:64:f6:88:0d:
51:14:3b:90:6c:4b:03:2f:ee:73:4d:5f:11:1c:62:cf:8b:fe:
43:c5:fe:62:1a:27:ed:d3:71:fe:4a:e9:ea:1a:26:8c:7b:a8:
0e:20:0d:2a:13:8d:4c:db:9d:8d:5b:61:71:25:b5:36:b7:ba:
e1:07:5f:98:36:82:09:fc:e2:3a:e3:8e:5d:af:da:d8:8e:c0:
42:38:c5:69:12:7e:76:1f:c6:8d:12:1a:d0:11:8b:f1:99:a4:
40:e0:71:bb:f7:35:33:bb:04:46:54:80:9e:65:5a:89:bb:18:
52:1d:74:96:fe:13:f2:3c:3e:9c:f4:cc:38:7a:d7:e9:26:bd:
25:a1:2c:ed:43:e8:cd:41:64:fe:06:2e:04:29:9b:ad:e0:c4:
ff:96:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org