Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/f0Cx5rRzusXEDZFAU7QpmTkyV14.roa
File: f0Cx5rRzusXEDZFAU7QpmTkyV14.roa (raw, json)
Hash identifier: f7ot1erAHqDvYoEfGJfcE6Zbku0djZTZWopLI8TOr8o=
Subject key identifier: 7F:40:B1:E6:B4:73:BA:C5:C4:0D:91:40:53:B4:29:99:39:32:57:5E
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 01856E5D78704C8CB8149256035218A28D87
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/f0Cx5rRzusXEDZFAU7QpmTkyV14.roa
Signing time: Sun 01 Jan 2023 17:24:57 +0000
ROA not before: Sun 01 Jan 2023 17:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42973
IP address blocks: 83.97.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:78:70:4c:8c:b8:14:92:56:03:52:18:a2:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jan 1 17:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f40b1e6b473bac5c40d914053b429993932575e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:54:6a:00:87:16:4e:b7:57:b6:0c:ed:cf:
3b:ef:f3:ec:9d:6c:80:39:5f:2d:4e:c0:e6:3a:ca:
3d:a0:8a:b9:03:af:25:af:28:c5:2e:e5:44:b2:d6:
f8:c1:43:d6:59:73:a4:37:12:2a:f6:69:1d:d6:86:
46:8a:c0:ac:d3:c4:14:31:64:c1:35:3b:12:6f:1c:
66:25:65:1f:8f:58:22:a9:cf:84:ba:8f:c6:91:2d:
15:cc:10:3e:4d:96:d4:df:5c:c6:78:80:e0:45:50:
27:96:ef:a6:87:61:76:f3:df:aa:ac:56:18:9c:75:
a4:3d:24:77:c4:e5:86:9a:20:b0:da:c7:ea:fd:35:
14:60:62:d9:2f:69:01:e8:c6:05:af:b5:3d:03:67:
a0:0f:a4:0d:24:da:2d:e4:ab:b3:63:58:e2:19:59:
dd:b4:87:05:48:aa:53:1c:61:be:da:a4:69:fe:28:
51:0d:4f:3a:fa:70:fb:70:1f:59:7f:da:48:5b:1d:
65:88:2a:f0:67:aa:cc:a9:10:22:ba:a1:12:8e:dc:
c5:ba:8c:47:5b:e6:45:53:07:1f:a7:fb:56:a4:26:
83:58:16:9c:cf:f8:1c:35:d2:96:2e:78:72:0f:bd:
62:fd:2d:79:a3:9e:eb:f0:6a:4c:fc:09:59:4f:a8:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:40:B1:E6:B4:73:BA:C5:C4:0D:91:40:53:B4:29:99:39:32:57:5E
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/f0Cx5rRzusXEDZFAU7QpmTkyV14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.32.0/22
Signature Algorithm: sha256WithRSAEncryption
22:24:c6:cc:ad:b8:68:71:9a:aa:52:f7:73:40:fb:c2:32:0a:
e0:44:d5:21:4e:e7:42:f4:d4:b9:8f:ab:b6:fa:16:71:96:23:
7d:eb:7c:d4:99:cb:80:16:5a:ca:9e:2a:d9:b6:09:f5:f9:4c:
13:27:1b:75:9d:7c:a5:ea:b3:9f:09:41:a9:58:ea:7b:56:9b:
51:95:57:e7:ac:8f:b1:8d:e8:e3:8a:79:8c:51:d1:0f:9e:99:
49:65:12:7b:d5:d2:87:e5:c2:63:b0:f5:48:23:da:cd:09:de:
de:d6:6b:78:ce:05:ad:85:ee:eb:60:31:c1:9a:82:5f:5b:9a:
c5:3c:36:19:8d:82:fd:14:b5:8f:97:39:c2:53:bd:2b:e7:9c:
0f:8b:da:9f:0b:20:43:e1:ab:3a:c0:e3:c7:e3:34:b6:6d:6b:
70:cf:1d:14:6e:96:d2:73:dc:0e:b4:38:c9:26:49:d4:33:49:
4a:17:5f:8c:ad:ae:c7:41:d1:b0:02:3b:98:e1:94:16:4f:ad:
50:8b:ba:59:48:f8:dd:f4:68:8f:59:ee:06:00:52:5d:80:d3:
cf:29:4b:e2:84:83:e9:02:ca:b2:bb:49:dd:92:27:d5:f9:c4:
df:26:ef:be:d6:88:ab:fd:db:17:19:2c:f7:1c:e2:fb:08:05:
64:34:ff:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuXXhwTIy4FJJWA1IYoo2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZGY2Yzc1M2VhMDg1YmVmMzcyYjM5MjYzMGY3NGJhNTc2
OTZlZTUwHhcNMjMwMTAxMTcyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjQwYjFlNmI0NzNiYWM1YzQwZDkxNDA1M2I0Mjk5OTM5MzI1NzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDxUagCHFk63V7YM7c877/PsnWyA
OV8tTsDmOso9oIq5A68lryjFLuVEstb4wUPWWXOkNxIq9mkd1oZGisCs08QUMWTB
NTsSbxxmJWUfj1giqc+Euo/GkS0VzBA+TZbU31zGeIDgRVAnlu+mh2F289+qrFYY
nHWkPSR3xOWGmiCw2sfq/TUUYGLZL2kB6MYFr7U9A2egD6QNJNot5KuzY1jiGVnd
tIcFSKpTHGG+2qRp/ihRDU86+nD7cB9Zf9pIWx1liCrwZ6rMqRAiuqESjtzFuoxH
W+ZFUwcfp/tWpCaDWBacz/gcNdKWLnhyD71i/S15o57r8GpM/AlZT6hJywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9Asea0c7rFxA2RQFO0KZk5MldeMB8GA1UdIwQY
MBaAFHHfbHU+oIW+83KzkmMPdLpXaW7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNTk0ODQtYjA3YS00Y2ExLWFiY2Qt
YTgzODQ1Y2FhYzIxLzEvZjBDeDVyUnp1c1hFRFpGQVU3UXBtVGt5VjE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNTk0ODQtYjA3YS00Y2ExLWFiY2QtYTgzODQ1Y2FhYzIx
LzEvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU2EgMA0G
CSqGSIb3DQEBCwUAA4IBAQAiJMbMrbhocZqqUvdzQPvCMgrgRNUhTudC9NS5j6u2
+hZxliN963zUmcuAFlrKnirZtgn1+UwTJxt1nXyl6rOfCUGpWOp7VptRlVfnrI+x
jejjinmMUdEPnplJZRJ71dKH5cJjsPVII9rNCd7e1mt4zgWthe7rYDHBmoJfW5rF
PDYZjYL9FLWPlznCU70r55wPi9qfCyBD4as6wOPH4zS2bWtwzx0UbpbSc9wOtDjJ
JknUM0lKF1+Mra7HQdGwAjuY4ZQWT61Qi7pZSPjd9GiPWe4GAFJdgNPPKUvihIPp
Asqyu0ndkifV+cTfJu++1oir/dsXGSz3HOL7CAVkNP+D
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:53 2024 by rpki-client on console-fra.rpki-client.org