Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/RDzP1gCqQSN9x88M2_uLoIonuDs.roa
File: RDzP1gCqQSN9x88M2_uLoIonuDs.roa (raw, json)
Hash identifier: D6xDsWVd5pedGSWrnCm00UwxpMeC9M6b5G3qUQLje7s=
Subject key identifier: 44:3C:CF:D6:00:AA:41:23:7D:C7:CF:0C:DB:FB:8B:A0:8A:27:B8:3B
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 018962BEAED71B7A078E06CB5707481869E2
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/RDzP1gCqQSN9x88M2_uLoIonuDs.roa
Signing time: Mon 17 Jul 2023 07:26:50 +0000
ROA not before: Mon 17 Jul 2023 07:26:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 83.118.224.0/22 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:be:ae:d7:1b:7a:07:8e:06:cb:57:07:48:18:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jul 17 07:26:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=443ccfd600aa41237dc7cf0cdbfb8ba08a27b83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:5b:eb:26:de:c7:b2:87:18:ea:37:36:4a:
f8:83:63:af:64:8c:38:0e:62:5a:5f:0c:c8:49:ee:
5a:69:4c:78:06:a8:83:00:b5:58:2e:0b:ae:de:bf:
5f:24:31:25:0b:45:df:9a:14:cb:2c:84:19:c1:ae:
32:ba:7f:36:d3:a8:f8:6e:3a:de:63:61:82:9d:28:
70:06:60:a5:8e:e0:2b:48:6d:8e:17:ea:3e:7b:f7:
7c:26:46:d5:a6:32:1f:c9:ac:c1:07:26:0f:91:16:
71:47:d0:1e:ec:47:b8:ba:86:84:77:2f:3e:7d:24:
3f:2c:fd:4b:9b:28:50:08:09:58:59:4f:78:36:d4:
4c:42:bd:0d:be:47:68:01:e2:fe:13:2a:8e:f9:ff:
f9:36:3e:2c:58:db:95:86:b1:a8:f2:da:a8:67:af:
48:44:04:fa:bf:e5:7d:b4:72:c3:5a:f6:f1:21:a6:
74:97:3b:29:67:80:e8:bd:fd:43:0b:c2:50:d9:f0:
9c:af:5d:9c:ea:73:20:34:a3:25:ef:54:a5:a3:d4:
e7:42:8a:9a:6c:07:e4:ec:f1:e2:5c:9b:b7:99:1f:
54:d1:45:91:64:8d:0a:96:b6:c3:b8:43:4b:4c:5a:
90:07:1c:a8:a5:f3:51:4b:65:05:c6:96:4b:ed:78:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3C:CF:D6:00:AA:41:23:7D:C7:CF:0C:DB:FB:8B:A0:8A:27:B8:3B
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/RDzP1gCqQSN9x88M2_uLoIonuDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
Signature Algorithm: sha256WithRSAEncryption
07:6e:a1:48:90:61:c5:7d:ac:e6:3e:b2:e0:90:af:c8:45:8f:
4e:53:19:f0:6d:d5:52:50:2c:ea:42:cd:bb:45:58:41:d5:44:
28:6a:e0:9c:1a:5c:24:d9:2f:7a:bd:fc:67:d9:10:ce:32:5f:
d9:d5:81:00:1a:0a:80:d4:e2:37:b7:b4:86:ea:94:3c:e6:e7:
db:8e:f8:09:d5:7c:a7:38:d9:ba:1a:30:9c:ec:f1:b6:3f:34:
06:66:53:5e:37:d9:77:16:f5:a9:c5:4c:43:b1:71:b9:5d:f0:
76:b9:06:8a:20:63:b8:df:83:96:29:31:d1:17:33:a0:64:ec:
20:59:03:c7:36:1a:7b:32:1a:4c:9c:99:bc:37:22:c4:05:15:
6f:12:00:c4:98:f9:62:32:87:31:ed:65:2e:b9:1e:74:49:30:
c1:a8:4a:80:fe:73:bd:d0:d6:1c:59:c8:e3:40:1b:c2:27:e3:
a5:3e:c0:e4:6e:a7:24:90:7d:97:81:e3:60:c7:66:bc:27:25:
2a:25:f5:f1:37:92:74:28:6f:e7:b3:50:e8:42:16:bb:8c:cf:
20:d0:c0:3d:00:81:ce:c5:65:98:42:21:29:3d:92:e3:b7:80:
9d:15:86:a6:3c:37:48:d0:36:7e:3f:64:4f:3d:bd:3c:e6:d6:
95:d4:e0:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlivq7XG3oHjgbLVwdIGGniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NTk2Y2VjYzIxZGQwMjY3N2E3MjdlZjM3ZjA2ODk1NDZl
YTUwOTcwHhcNMjMwNzE3MDcyNjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDNjY2ZkNjAwYWE0MTIzN2RjN2NmMGNkYmZiOGJhMDhhMjdiODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Zb6ybex7KHGOo3Nkr4g2OvZIw4
DmJaXwzISe5aaUx4BqiDALVYLguu3r9fJDElC0XfmhTLLIQZwa4yun8206j4bjre
Y2GCnShwBmCljuArSG2OF+o+e/d8JkbVpjIfyazBByYPkRZxR9Ae7Ee4uoaEdy8+
fSQ/LP1LmyhQCAlYWU94NtRMQr0NvkdoAeL+EyqO+f/5Nj4sWNuVhrGo8tqoZ69I
RAT6v+V9tHLDWvbxIaZ0lzspZ4Dovf1DC8JQ2fCcr12c6nMgNKMl71Slo9TnQoqa
bAfk7PHiXJu3mR9U0UWRZI0KlrbDuENLTFqQBxyopfNRS2UFxpZL7XhvmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQ8z9YAqkEjfcfPDNv7i6CKJ7g7MB8GA1UdIwQY
MBaAFElZbOzCHdAmd6cn7zfwaJVG6lCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt
ODk3ZDAwOTc3ZmYyLzEvUkR6UDFnQ3FRU045eDg4TTJfdUxvSW9udURzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy
LzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU3bgMA0G
CSqGSIb3DQEBCwUAA4IBAQAHbqFIkGHFfazmPrLgkK/IRY9OUxnwbdVSUCzqQs27
RVhB1UQoauCcGlwk2S96vfxn2RDOMl/Z1YEAGgqA1OI3t7SG6pQ85ufbjvgJ1Xyn
ONm6GjCc7PG2PzQGZlNeN9l3FvWpxUxDsXG5XfB2uQaKIGO434OWKTHRFzOgZOwg
WQPHNhp7MhpMnJm8NyLEBRVvEgDEmPliMocx7WUuuR50STDBqEqA/nO90NYcWcjj
QBvCJ+OlPsDkbqckkH2XgeNgx2a8JyUqJfXxN5J0KG/ns1DoQha7jM8g0MA9AIHO
xWWYQiEpPZLjt4CdFYamPDdI0DZ+P2RPPb085taV1ODx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:07 2024 by rpki-client on console-fra.rpki-client.org