Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/pwDC8I8jNtfoK8LZJ40EWiZvRJs.roa
File: pwDC8I8jNtfoK8LZJ40EWiZvRJs.roa (raw, json)
Hash identifier: Dz0byQJmQVY7Wf+IZtx8Ks5bTpAU9rHoKOwp7Jb5mmU=
Subject key identifier: A7:00:C2:F0:8F:23:36:D7:E8:2B:C2:D9:27:8D:04:5A:26:6F:44:9B
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 018875C9FDA6381E406B4D806B5A7FF1E891
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/pwDC8I8jNtfoK8LZJ40EWiZvRJs.roa
Signing time: Thu 01 Jun 2023 07:09:11 +0000
ROA not before: Thu 01 Jun 2023 07:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.136.208.0/21 maxlen: 24
83.136.208.0/22 maxlen: 24
83.136.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:c9:fd:a6:38:1e:40:6b:4d:80:6b:5a:7f:f1:e8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jun 1 07:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a700c2f08f2336d7e82bc2d9278d045a266f449b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:ec:2d:44:5d:4f:c4:13:7d:34:da:d5:7f:
7a:41:69:df:0d:8c:ca:17:af:ed:d4:0b:e5:bd:aa:
dc:53:22:2d:7b:ea:20:e2:c9:c8:18:84:ed:8a:38:
8b:b5:aa:17:99:cb:74:bc:d7:6b:68:3c:5d:52:f9:
56:f4:85:40:28:af:45:c3:90:10:37:bc:5b:0a:c0:
fb:7d:7c:2a:24:df:14:63:1a:0f:50:8a:96:de:bc:
cb:30:7c:fa:1c:d4:5f:22:e5:e2:48:b8:ac:94:61:
d5:b0:bb:15:ae:95:70:f7:3e:3f:4e:50:01:f7:24:
5a:0a:6a:b7:63:fe:78:4b:a9:7b:d8:13:e8:8e:d6:
14:a4:45:c8:a0:8d:c4:1e:c5:e8:23:03:f9:92:cf:
d1:d6:e1:74:7d:84:32:24:9c:2d:ae:1c:5a:2b:fb:
5e:7a:c8:7c:02:cb:c0:63:9a:1f:b8:87:6e:8b:fe:
36:77:6e:a6:d3:15:17:ec:db:31:3f:6d:53:4a:f3:
97:eb:33:b4:7a:f9:67:ce:2b:82:ff:48:f7:04:c3:
bb:8a:83:8a:fa:ad:23:c3:ea:4b:0c:f8:99:84:fe:
73:3c:76:05:32:cd:93:fe:1c:94:12:82:3e:0c:ee:
36:aa:e7:e5:ed:e7:b0:8f:2c:c3:eb:18:52:e9:8c:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:C2:F0:8F:23:36:D7:E8:2B:C2:D9:27:8D:04:5A:26:6F:44:9B
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/pwDC8I8jNtfoK8LZJ40EWiZvRJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:17:34:8c:76:0b:01:30:df:bd:20:ae:e5:ac:4e:2b:b4:94:
e7:e1:7a:40:cd:35:5e:95:d8:ba:3e:3b:01:be:fb:e9:3c:a6:
ae:89:92:8e:85:b7:de:43:9a:de:a6:81:0c:96:b2:42:c8:d1:
94:13:ab:20:04:16:18:c5:77:a8:0a:25:ff:d8:9a:56:b6:09:
47:ba:c7:3a:c9:fb:e0:a5:df:58:33:ba:3a:7e:f4:84:c9:58:
04:d3:ec:d7:d9:97:a0:4e:77:de:56:30:36:d8:be:f1:46:3c:
ff:d7:e9:e6:24:cd:77:0c:66:59:8f:f4:f8:ec:2a:b1:5b:8f:
a8:0b:ee:49:e3:2d:99:bb:44:2c:66:2c:9a:b7:63:16:3d:ae:
a4:1d:d9:4a:d6:1c:09:0a:01:96:2f:34:1c:0b:26:8c:0d:e1:
3b:81:fb:57:60:88:d5:fc:ad:ff:ac:81:d1:01:67:9a:95:67:
7d:8e:09:fb:52:59:c7:85:29:89:96:95:f9:6e:6a:a8:64:a6:
11:f3:f0:fa:2e:3e:1b:7f:b2:48:80:8e:d1:e2:a9:00:ef:01:
33:22:47:7f:55:78:ed:32:ea:71:cf:f0:e0:59:0a:8c:d0:54:
60:fb:10:15:94:fe:7d:d0:a7:3b:20:48:39:a1:eb:42:f7:c3:
44:8b:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org