Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/l0yiWsBt155GWVjiiWrmlBjdBvA.roa
File: l0yiWsBt155GWVjiiWrmlBjdBvA.roa (raw, json)
Hash identifier: i7guwjyvgF5qlv5ZibAI3tBmS4T2qSmrMod55rVgOfQ=
Subject key identifier: 97:4C:A2:5A:C0:6D:D7:9E:46:59:58:E2:89:6A:E6:94:18:DD:06:F0
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 01876EEC744A0A3BB4DA7EA968D74FAB4C95
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/l0yiWsBt155GWVjiiWrmlBjdBvA.roa
Signing time: Tue 11 Apr 2023 06:06:42 +0000
ROA not before: Tue 11 Apr 2023 06:06:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51543
IP address blocks: 83.234.10.0/24 maxlen: 24
83.234.54.0/24 maxlen: 24
83.234.169.0/24 maxlen: 24
83.234.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:ec:74:4a:0a:3b:b4:da:7e:a9:68:d7:4f:ab:4c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Apr 11 06:06:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=974ca25ac06dd79e465958e2896ae69418dd06f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:92:06:f1:be:25:3f:c0:c8:1d:b5:fc:7c:
93:fa:fa:b8:9f:b1:0a:04:ff:a0:6a:6d:eb:3c:7b:
87:bf:a0:ef:42:60:ea:76:c8:10:69:8f:bd:9d:42:
92:bb:30:85:84:b1:3d:46:30:cc:a3:db:ed:05:22:
3b:7a:3a:07:a0:77:c0:b3:49:d6:d7:30:a6:30:d0:
6f:b6:fd:4d:78:73:42:f8:3f:70:31:ed:bc:ab:49:
31:5b:5b:24:15:05:b1:af:fc:42:74:1b:38:71:f0:
6d:b2:f3:88:a1:2e:2f:9a:28:6e:67:6d:60:9b:1b:
cd:70:2f:84:6f:71:9e:a9:ff:6a:80:56:26:53:52:
ba:44:d2:f2:15:c1:9e:7e:9a:3b:07:ae:7f:87:e5:
eb:c7:23:79:cb:0a:c9:eb:e6:72:dd:96:45:ff:9e:
2e:3d:62:42:80:8f:c4:6a:c1:5a:fc:a1:34:98:ef:
a2:ed:38:43:3e:01:25:9b:3d:b5:ff:b2:79:5d:31:
8e:51:9a:0a:ce:dd:0a:49:c4:0d:d1:c0:d3:fe:96:
b5:b9:34:00:74:18:f9:aa:cf:e8:9e:f4:64:e4:85:
5c:c3:f7:b4:02:7d:ae:5c:00:4b:7a:07:2e:81:4e:
a4:33:7f:7d:6f:ea:10:5d:b3:07:b0:4d:c4:87:12:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4C:A2:5A:C0:6D:D7:9E:46:59:58:E2:89:6A:E6:94:18:DD:06:F0
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/l0yiWsBt155GWVjiiWrmlBjdBvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.234.10.0/24
83.234.54.0/24
83.234.168.0/23
Signature Algorithm: sha256WithRSAEncryption
df:56:4c:41:c1:10:06:8d:23:ef:8b:bb:ca:38:ab:7a:88:58:
f8:ec:df:ce:ef:7b:ba:18:bf:e2:bc:f7:f7:9a:79:3e:11:7d:
cf:63:39:2e:c1:7d:3c:e4:7c:36:f9:39:6a:49:89:ef:ab:a1:
1c:1f:f1:86:5b:1a:8f:bb:d4:82:df:e2:d9:9a:9e:bb:fd:30:
78:86:e2:79:fa:c4:33:ac:c1:af:1c:56:a3:0c:06:68:27:a1:
99:dc:a7:8e:b9:f3:f3:05:93:a7:57:e2:40:30:1b:23:be:de:
56:01:0d:59:62:ad:eb:d6:53:77:cf:ee:d2:b5:5d:12:24:0f:
b6:e0:f8:ee:b2:01:f5:06:6e:e5:89:46:fa:c0:e8:6c:e2:83:
7b:07:a0:a9:5c:25:87:e3:1b:91:d8:8b:e6:41:2f:4c:3b:5d:
79:a1:32:c6:0f:c5:b6:b7:d9:e2:cb:c0:04:f3:cd:3a:f5:d7:
b3:cb:0c:6f:92:01:33:48:38:81:19:9d:36:9d:c6:1a:12:81:
22:71:b4:5f:d5:2e:e8:11:81:b8:71:f1:69:84:0c:ad:45:7d:
94:dd:9d:10:a7:34:99:ac:61:46:91:da:f1:45:e6:1b:28:cf:
1b:47:c4:e5:4f:f7:12:5b:53:3c:c1:2f:ef:c4:41:cd:9f:09:
38:75:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 06:07:11 2023 by rpki-client on console-fra.rpki-client.org