Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0BmZq_6ba0nU2Y4HJloa629k04I.roa
File: 0BmZq_6ba0nU2Y4HJloa629k04I.roa (raw, json)
Hash identifier: /robnmoiMj5unLo9d8ezkD4CL9FUOCWZF2687t1FyGk=
Subject key identifier: D0:19:99:AB:FE:9B:6B:49:D4:D9:8E:07:26:5A:1A:EB:6F:64:D3:82
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019261B4E7F15FA532549BD48E19CD3F9A9E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0BmZq_6ba0nU2Y4HJloa629k04I.roa
Signing time: Sun 06 Oct 2024 12:01:38 +0000
ROA not before: Sun 06 Oct 2024 12:01:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19740
IP address blocks: 83.136.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:61:b4:e7:f1:5f:a5:32:54:9b:d4:8e:19:cd:3f:9a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 6 12:01:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d01999abfe9b6b49d4d98e07265a1aeb6f64d382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:7a:e7:e2:22:c9:9a:82:da:7b:3b:fa:02:
a0:c8:f8:bd:1c:cb:9b:31:75:97:ff:f4:22:32:97:
19:84:ca:15:d4:3d:3e:12:70:9f:a2:d7:c9:cb:46:
93:6c:ed:9e:e8:72:00:aa:b0:f4:ba:5e:47:28:92:
d7:b8:3a:c2:77:c6:2d:6a:fb:75:57:83:00:8d:95:
a2:1d:22:98:56:e1:0a:ac:c7:bd:ca:7a:c2:53:a2:
f6:b8:32:0c:ac:e8:bc:62:98:03:bc:cd:60:c6:34:
9a:c9:ab:02:59:f3:3b:6d:26:c7:52:7e:62:a0:18:
4e:b5:ba:62:53:a8:58:24:7e:fd:34:40:f8:40:1a:
d4:d5:1a:39:63:b0:71:b4:4e:05:4d:58:54:dd:ac:
69:7b:b4:6a:c1:8c:64:b4:64:5c:32:f2:74:98:0d:
4d:df:ff:49:4b:9c:50:11:88:62:65:6c:d6:24:6a:
4a:9e:a0:3f:30:ed:7b:17:f3:d3:ce:d0:e8:02:98:
b9:c5:5b:ae:a7:6e:14:c8:62:cb:a4:46:5b:d1:67:
a7:ec:6e:14:af:1d:a4:b3:ee:75:1f:01:6c:19:de:
e6:fe:c0:95:f3:4f:f4:9d:70:f6:50:d6:24:60:bb:
49:3e:9d:b0:f1:7b:d4:eb:89:87:91:13:b9:4c:e6:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:99:AB:FE:9B:6B:49:D4:D9:8E:07:26:5A:1A:EB:6F:64:D3:82
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0BmZq_6ba0nU2Y4HJloa629k04I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.50.0/24
Signature Algorithm: sha256WithRSAEncryption
23:32:41:57:52:e2:a4:89:0c:b6:1b:b9:16:08:23:f5:e8:1d:
fc:08:21:10:ba:09:13:26:9e:2d:8d:b1:64:8d:77:9c:45:46:
32:a3:1b:0d:c3:32:74:49:e6:a3:b0:90:36:d8:a1:f4:17:a4:
7c:4b:f0:72:7e:3d:75:2c:30:13:85:b7:92:78:b3:57:09:0a:
3b:d1:8a:89:4b:6c:76:7b:f5:5c:9e:30:6a:8e:97:7f:eb:2d:
c8:33:ea:7c:c9:40:12:f9:0d:cd:3e:b0:bb:56:3b:79:34:43:
38:3d:80:f7:da:3a:13:79:3a:26:d4:10:b2:55:e0:aa:13:1f:
5a:e1:eb:4b:ed:7b:51:c9:de:e9:2d:e7:3b:f6:df:3a:08:8e:
f4:92:95:49:f2:40:a4:41:83:53:11:25:10:8b:02:08:4b:8b:
b9:e0:e4:39:93:d3:39:b4:c7:50:47:51:c2:45:5f:e8:a7:ce:
ce:35:da:c0:a9:be:65:6a:7c:7a:53:3e:25:12:c5:85:98:54:
6f:59:00:f3:73:39:ab:70:df:ec:e3:5c:92:e7:57:0d:98:40:
a2:65:70:a4:7a:96:54:74:80:0b:13:7a:ee:2f:95:9c:40:b4:
f4:3c:4d:06:7e:7f:75:4e:54:98:0f:b6:1b:91:a9:80:8d:35:
f2:98:c6:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJhtOfxX6UyVJvUjhnNP5qeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjQxMDA2MTIwMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDE5OTlhYmZlOWI2YjQ5ZDRkOThlMDcyNjVhMWFlYjZmNjRkMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW565+IiyZqC2ns7+gKgyPi9HMub
MXWX//QiMpcZhMoV1D0+EnCfotfJy0aTbO2e6HIAqrD0ul5HKJLXuDrCd8Ytavt1
V4MAjZWiHSKYVuEKrMe9ynrCU6L2uDIMrOi8YpgDvM1gxjSayasCWfM7bSbHUn5i
oBhOtbpiU6hYJH79NED4QBrU1Ro5Y7BxtE4FTVhU3axpe7RqwYxktGRcMvJ0mA1N
3/9JS5xQEYhiZWzWJGpKnqA/MO17F/PTztDoApi5xVuup24UyGLLpEZb0Wen7G4U
rx2ks+51HwFsGd7m/sCV80/0nXD2UNYkYLtJPp2w8XvU64mHkRO5TOZSFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAZmav+m2tJ1NmOByZaGutvZNOCMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvMEJtWnFfNmJhMG5VMlk0SEpsb2E2MjlrMDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4gyMA0G
CSqGSIb3DQEBCwUAA4IBAQAjMkFXUuKkiQy2G7kWCCP16B38CCEQugkTJp4tjbFk
jXecRUYyoxsNwzJ0SeajsJA22KH0F6R8S/Byfj11LDAThbeSeLNXCQo70YqJS2x2
e/VcnjBqjpd/6y3IM+p8yUAS+Q3NPrC7Vjt5NEM4PYD32joTeTom1BCyVeCqEx9a
4etL7XtRyd7pLec79t86CI70kpVJ8kCkQYNTESUQiwIIS4u54OQ5k9M5tMdQR1HC
RV/op87ONdrAqb5lanx6Uz4lEsWFmFRvWQDzczmrcN/s41yS51cNmECiZXCkepZU
dIALE3ruL5WcQLT0PE0Gfn91TlSYD7YbkamAjTXymMb7
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:42 2025 by rpki-client