Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/_PMf9zCWJJ-HCUjQrun3Bwbv0Y0.roa
File: _PMf9zCWJJ-HCUjQrun3Bwbv0Y0.roa (raw, json)
Hash identifier: KxxfNJ8IFEHQaY4/aoDDk5njuJpQ1nK7IMrjUH9Wl2M=
Subject key identifier: FC:F3:1F:F7:30:96:24:9F:87:09:48:D0:AE:E9:F7:07:06:EF:D1:8D
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 018D5689AD0BF3617643CA5D9CF1ADDD97C0
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/_PMf9zCWJJ-HCUjQrun3Bwbv0Y0.roa
Signing time: Mon 29 Jan 2024 18:44:39 +0000
ROA not before: Mon 29 Jan 2024 18:44:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 83.97.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Jan 2024 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:89:ad:0b:f3:61:76:43:ca:5d:9c:f1:ad:dd:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Jan 29 18:44:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcf31ff73096249f870948d0aee9f70706efd18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:37:ef:8c:e0:f0:e6:4c:00:03:ef:e0:6b:
00:cd:86:4f:6d:bb:66:64:04:0a:c1:5e:31:89:8b:
e9:03:9b:15:ea:db:9a:e5:e5:36:be:48:5f:2c:5b:
9b:d9:00:12:21:bb:b8:8b:e8:51:76:a1:cf:8b:51:
55:9b:92:5b:2b:ba:c1:ed:22:13:75:f0:9b:75:cc:
26:85:e7:64:be:cd:f7:fa:70:7b:39:9f:2a:ae:e3:
cc:12:19:f3:f6:6f:1d:51:2f:34:2b:a1:d2:dd:53:
63:5e:33:8e:d2:90:98:95:79:8c:68:b1:5b:e8:8e:
e2:77:6b:1a:79:b5:da:04:98:dd:ad:19:e2:bc:3d:
75:92:40:01:56:71:86:70:b3:99:21:c9:f8:69:87:
9a:fa:9c:3c:3a:70:df:cd:28:eb:ff:01:6e:18:10:
ec:df:93:88:76:08:3d:ef:16:99:79:06:4d:cf:48:
21:73:79:b8:c4:11:0d:cb:78:bd:52:ba:3a:9f:e0:
ae:b5:46:36:a6:9c:f3:44:08:0f:a1:37:c7:18:83:
bc:f5:18:fb:d1:c6:c9:ab:2e:e5:40:dd:b2:b8:f6:
15:75:45:fd:8b:34:3c:d6:7d:8c:d6:57:dd:f8:93:
d3:fc:6d:8b:29:72:63:96:76:46:0b:0a:d2:b0:bf:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:1F:F7:30:96:24:9F:87:09:48:D0:AE:E9:F7:07:06:EF:D1:8D
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/_PMf9zCWJJ-HCUjQrun3Bwbv0Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.96.0/21
Signature Algorithm: sha256WithRSAEncryption
43:11:46:8e:44:96:ba:8e:84:70:63:0c:90:9e:c6:b6:e1:51:
ad:e9:cf:42:b3:75:fc:1a:50:96:1c:b2:ba:9e:ba:1d:62:55:
b4:44:bb:c6:7a:fd:14:92:a4:c4:da:ac:94:d7:f0:79:81:be:
38:6c:e5:45:5b:09:94:07:4f:17:dd:d9:eb:c6:aa:bf:1c:6e:
b0:0d:44:06:81:0e:28:43:d9:79:bd:92:86:4f:ec:d2:e2:92:
7f:a0:3f:81:96:b4:d1:0f:04:94:55:d4:fb:92:28:7e:1e:9a:
21:cc:94:8a:85:40:4e:e5:9a:db:16:0d:99:cd:c7:8f:2c:82:
41:76:f0:4a:17:25:53:51:12:43:cb:8b:4e:8a:6f:24:f1:8a:
73:aa:42:a4:81:86:39:2b:6a:c6:1d:2b:96:67:3f:17:58:ec:
fa:99:de:88:fa:27:df:e1:6e:03:06:b6:88:65:9b:c8:cf:cf:
a3:b3:59:a5:7d:f1:a5:2c:f3:d1:70:c0:af:dc:a4:85:e7:8f:
81:4d:73:f5:e2:a3:18:4b:fa:d5:10:f3:1a:72:2a:11:33:a6:
36:23:25:ef:5f:6b:ab:ae:97:ea:9a:bb:e9:02:94:5f:23:03:
04:43:5b:fa:51:f8:ce:86:75:33:96:b3:31:1c:58:77:36:58:
c8:b3:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:59 2024 by rpki-client on console-ams.rpki-client.org