Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/c1gWt-Bb1P8kydlHsy_bS7-Utw0.roa
File: c1gWt-Bb1P8kydlHsy_bS7-Utw0.roa (raw, json)
Hash identifier: UBn6Qk2R+V7JXkcEyjf9VL5DXXlj23VaBCQw60dGfvg=
Subject key identifier: 73:58:16:B7:E0:5B:D4:FF:24:C9:D9:47:B3:2F:DB:4B:BF:94:B7:0D
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 018571D7BF1C72C8077D662BF06D88939A39
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/c1gWt-Bb1P8kydlHsy_bS7-Utw0.roa
Signing time: Mon 02 Jan 2023 09:37:22 +0000
ROA not before: Mon 02 Jan 2023 09:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48702
IP address blocks: 83.137.243.0/24 maxlen: 24
83.137.242.0/24 maxlen: 24
83.137.244.0/24 maxlen: 24
83.137.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:bf:1c:72:c8:07:7d:66:2b:f0:6d:88:93:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 2 09:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=735816b7e05bd4ff24c9d947b32fdb4bbf94b70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:34:3e:81:98:cd:6c:a3:88:59:67:52:e7:
70:49:c7:57:00:3a:e6:bd:7b:a0:c3:c7:df:54:34:
7b:07:a1:64:1a:d0:c7:a2:43:0b:ea:6e:c1:ac:3d:
5b:e1:32:26:be:b4:cd:9e:f9:5c:f7:65:3c:9b:d7:
b4:45:40:78:5d:07:a4:92:27:f7:d6:45:2f:51:6c:
b8:0b:94:67:37:67:86:0c:32:c9:f2:a3:cf:b7:eb:
ec:33:e4:40:ea:05:42:06:47:27:54:70:c6:b4:97:
1a:c0:2a:2e:0e:71:6b:cf:11:54:a3:0f:d0:13:8b:
81:fb:0f:38:d9:ce:ec:7a:67:72:69:87:33:c2:a4:
95:b3:7a:75:b6:f2:c4:1a:48:12:ac:8b:98:d1:8e:
a5:ae:22:e5:3e:09:3d:a8:6e:99:4b:2f:ef:ab:a7:
15:2f:04:37:9f:b9:4f:4f:da:57:86:18:0c:bd:42:
e0:77:1f:65:b6:ad:bc:3b:70:73:e7:1a:9a:f1:30:
51:d8:c3:a8:a8:0e:df:9f:08:02:45:ec:26:ae:1e:
89:b8:3f:7e:a3:32:15:b6:b5:10:d6:61:67:84:a1:
47:6e:28:a1:5b:48:cd:4d:ef:c9:88:ad:e9:b2:27:
99:fe:6a:e8:e3:b4:5e:c9:05:35:41:bf:f3:13:d7:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:58:16:B7:E0:5B:D4:FF:24:C9:D9:47:B3:2F:DB:4B:BF:94:B7:0D
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/c1gWt-Bb1P8kydlHsy_bS7-Utw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.242.0-83.137.244.255
83.137.247.0/24
Signature Algorithm: sha256WithRSAEncryption
90:53:4b:87:0c:e6:01:93:b2:94:91:30:72:a8:3d:ed:fc:16:
28:14:d7:f2:eb:ef:56:d5:ff:f1:5f:46:98:a1:fe:87:61:0a:
82:bf:42:31:95:6c:17:9e:56:11:47:55:6d:dd:6d:02:da:51:
19:b7:eb:8f:bc:f8:62:92:c7:36:f6:95:29:ec:f4:7b:ca:48:
b0:5c:50:cd:cd:49:6a:80:e2:a2:1a:2c:de:fe:b7:2e:8b:f8:
91:08:22:ab:63:90:bf:71:66:b5:c7:2c:f4:7b:9a:58:99:e2:
9e:d4:ec:36:e1:d4:67:45:37:16:92:1a:9a:63:98:13:d0:40:
09:30:a8:2f:4a:02:a8:f7:54:4f:66:db:40:cd:47:bb:7a:64:
73:17:15:26:ec:40:b1:ec:fc:7e:bc:4d:e1:9f:2f:24:5f:91:
ae:7f:02:4a:0c:96:54:15:64:91:47:10:e2:24:01:2d:97:75:
47:ce:4b:61:5c:bd:04:3b:e3:ae:6d:dd:5d:0d:a9:b8:b8:e9:
f6:69:07:8c:84:31:5d:db:87:19:70:b5:95:ae:10:be:03:36:
73:34:57:79:93:e5:25:5f:d0:4d:e9:6c:a5:63:67:f1:dc:28:
ae:8a:1d:3d:87:01:ab:4c:91:77:64:10:eb:0f:8a:20:4f:25:
9d:bf:cf:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:13 2024 by rpki-client on console-ams.rpki-client.org