Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/sfTh3r1VVqL5pZt5dZfB4O0bJzc.roa
File: sfTh3r1VVqL5pZt5dZfB4O0bJzc.roa (raw, json)
Hash identifier: iZGekKldvnm5+F5yBztC8FkqNJnyC060BkLOGBMIKO4=
Subject key identifier: B1:F4:E1:DE:BD:55:56:A2:F9:A5:9B:79:75:97:C1:E0:ED:1B:27:37
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0190647D6872432EC09BB110596532C99945
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/sfTh3r1VVqL5pZt5dZfB4O0bJzc.roa
Signing time: Sat 29 Jun 2024 14:54:18 +0000
ROA not before: Sat 29 Jun 2024 14:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 07:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:7d:68:72:43:2e:c0:9b:b1:10:59:65:32:c9:99:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jun 29 14:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1f4e1debd5556a2f9a59b797597c1e0ed1b2737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:32:6a:1a:09:5c:8a:07:02:98:ea:f4:8a:
64:b8:45:f8:9a:26:76:b9:51:b6:45:5c:74:4a:44:
eb:62:94:92:01:e7:ac:ea:44:1a:fb:4c:c2:f5:ab:
c1:cc:81:1c:79:8f:c1:ff:f3:ae:bd:4a:c6:46:1c:
65:41:ab:2f:5e:b6:3c:6a:4c:72:80:97:41:e3:47:
45:62:78:a8:c1:c6:a7:a7:3d:31:36:3a:bb:19:2c:
01:31:d2:00:78:3b:9d:3d:f6:1d:9b:bd:9f:26:d2:
5c:f7:0d:27:b0:bd:da:76:dc:92:68:bb:7e:ed:00:
7a:e0:52:0f:b0:ab:0b:88:8d:8f:cf:68:51:6e:26:
26:36:4d:01:e6:30:2c:3b:1f:da:c3:fe:a5:40:a6:
97:d6:80:33:59:20:0c:8b:8c:d9:43:01:a0:a3:39:
2a:cf:11:2f:a6:fb:9f:c5:20:85:45:5b:27:a6:86:
3c:22:17:68:5d:6c:cc:9f:8d:b4:c3:06:2b:2a:56:
e7:d5:de:11:34:53:1a:9f:da:bc:8f:e9:87:30:0d:
df:77:1f:54:af:2a:35:00:88:5e:f5:da:b3:09:08:
a2:7e:d1:c1:aa:12:2c:40:c3:d7:7d:65:e4:a3:f3:
97:79:c2:ff:06:5f:19:4e:87:23:39:cf:39:a0:73:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:E1:DE:BD:55:56:A2:F9:A5:9B:79:75:97:C1:E0:ED:1B:27:37
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/sfTh3r1VVqL5pZt5dZfB4O0bJzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:91:4d:1b:74:69:61:86:61:e0:65:2a:77:45:fb:92:a4:59:
88:c3:16:9d:83:72:e7:de:45:c2:aa:e9:ad:72:cd:85:c3:af:
e8:8e:93:06:a3:36:52:41:93:0c:70:59:0b:55:81:59:57:4b:
3c:f5:39:31:2d:37:fa:c4:cb:70:4d:0e:2b:e7:09:dd:75:2d:
5d:d7:99:50:69:49:81:39:cc:76:72:52:38:de:3c:8c:11:80:
eb:2e:d9:77:a1:e4:c6:ab:84:71:21:9d:8f:80:b0:90:21:ae:
a4:7b:5d:e6:c5:3e:cd:4a:88:48:6e:7d:de:61:92:ea:96:17:
1e:8b:5c:32:61:8a:56:14:05:c1:9b:05:67:2b:14:6c:08:1c:
c1:be:9e:fd:af:3b:72:97:00:cd:6e:1a:f2:19:af:1a:17:4c:
9c:f7:47:c6:66:08:28:24:18:27:85:85:aa:ba:c4:4a:29:f2:
c1:37:32:54:47:47:5f:a7:be:a7:1a:b5:5c:83:a6:06:ff:96:
5e:36:e8:66:04:8b:e3:7e:b8:3e:69:48:8e:7d:34:fe:7e:b8:
c4:ec:ed:dd:1a:bb:b8:10:ea:ff:22:91:aa:86:23:00:41:e8:
13:d6:90:cd:1c:26:d6:8e:26:ea:d1:b0:0e:5a:b7:df:89:9d:
80:25:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org