Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/x24aLH0mB6HRWCNDbUDcJAPfKDw.roa
File: x24aLH0mB6HRWCNDbUDcJAPfKDw.roa (raw, json)
Hash identifier: +ZfGWDYYMbbAiWT/iDM11wNILbO4BOloEK/o45hjw7U=
Subject key identifier: C7:6E:1A:2C:7D:26:07:A1:D1:58:23:43:6D:40:DC:24:03:DF:28:3C
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0187DB4FF48E18CF9745A85CC507A2212733
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/x24aLH0mB6HRWCNDbUDcJAPfKDw.roa
Signing time: Tue 02 May 2023 07:14:22 +0000
ROA not before: Tue 02 May 2023 07:14:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:4f:f4:8e:18:cf:97:45:a8:5c:c5:07:a2:21:27:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: May 2 07:14:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c76e1a2c7d2607a1d15823436d40dc2403df283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:97:44:d5:99:14:43:f8:9e:d3:0d:92:0a:
17:6f:f6:7e:b6:f2:d2:e3:06:00:57:b0:86:58:b2:
26:b1:b6:6b:65:7d:d5:3f:dc:45:ea:5d:bf:fa:07:
48:3f:0c:fa:60:8f:9e:24:34:68:cd:29:cc:ed:b3:
d8:9f:16:1d:cf:45:a5:d2:e7:92:27:b6:9d:37:9d:
9f:02:81:5b:cb:a7:0e:97:7a:f7:c0:58:bd:cf:76:
08:6d:1d:59:7a:f8:b1:20:84:62:c1:3b:dd:99:18:
f6:a8:e4:df:70:24:24:85:17:78:1a:13:b4:d4:cd:
7c:97:75:27:91:e8:5e:05:5d:4a:5d:44:51:e6:be:
95:79:9f:5b:04:fd:56:0a:05:86:23:e6:e9:2e:67:
5d:25:2c:6f:f4:79:e3:a4:68:af:77:ba:77:68:ab:
da:ef:59:5b:57:b5:4e:dc:13:9a:8f:35:97:0c:73:
d9:ca:a1:e5:0b:b3:2b:6e:5f:8b:08:f1:aa:6d:4e:
67:ab:1f:cb:a7:4f:d7:70:fe:c4:94:c3:eb:09:97:
2c:89:89:fd:c5:60:eb:14:e0:cd:84:fe:85:64:a9:
fa:9e:2a:27:1b:8a:a3:4c:1d:bc:f0:61:d3:3c:dc:
07:df:c4:6f:4b:28:43:a1:eb:2d:05:fe:ba:fd:8b:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6E:1A:2C:7D:26:07:A1:D1:58:23:43:6D:40:DC:24:03:DF:28:3C
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/x24aLH0mB6HRWCNDbUDcJAPfKDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2a:01:91:fa:c6:c3:87:fc:c0:7d:65:fd:52:15:3a:74:09:
8c:7c:61:e0:c2:32:f4:ff:99:4e:eb:a1:04:ec:ef:3b:2b:af:
bd:4b:4c:da:06:01:91:4d:1f:81:77:2e:f3:3f:58:33:63:c3:
13:49:3b:fe:41:7a:44:4d:30:3c:23:05:47:8c:72:31:9d:59:
12:96:32:01:86:c9:17:ea:58:b5:79:a7:06:7f:84:72:72:d6:
f5:64:ed:f5:5a:ab:e1:aa:02:70:68:99:74:8b:65:61:da:3f:
54:b8:ff:1e:77:5b:b7:ac:ef:3f:7f:4f:e6:96:f0:f7:fe:e8:
c3:05:86:78:fd:d9:38:fe:d6:b7:eb:55:5e:3a:fa:76:c4:c1:
dd:f1:7d:69:06:05:d8:1a:f3:11:16:9a:a7:0c:fa:6a:5e:18:
f3:f7:fb:ca:26:1c:38:47:6f:43:11:37:f3:21:e2:26:af:38:
7d:be:5a:d6:97:88:58:49:cc:88:26:50:25:6d:80:31:2c:61:
23:56:38:2b:cb:08:0a:08:32:48:e6:b9:60:d3:51:87:5e:6c:
7a:d0:74:5a:14:24:0e:3c:15:ca:89:8e:9c:1a:b0:93:e9:1e:
ee:62:b8:aa:28:d9:6e:22:09:69:dd:0a:d4:76:80:28:fd:be:
12:1d:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org