Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/2l-IUFrXQc5E4UiugXArV9SVaQk.roa
File: 2l-IUFrXQc5E4UiugXArV9SVaQk.roa (raw, json)
Hash identifier: h18WV7ElUSNylLdbOJcGD4D/Z3GBboWzxtl1Rn7Epqg=
Subject key identifier: DA:5F:88:50:5A:D7:41:CE:44:E1:48:AE:81:70:2B:57:D4:95:69:09
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 018CC9BC964F80C38F89BBF2338A6B663A33
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/2l-IUFrXQc5E4UiugXArV9SVaQk.roa
Signing time: Tue 02 Jan 2024 10:33:48 +0000
ROA not before: Tue 02 Jan 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 83.168.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 11:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:96:4f:80:c3:8f:89:bb:f2:33:8a:6b:66:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 2 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da5f88505ad741ce44e148ae81702b57d4956909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:73:ff:a3:7b:1f:6a:c2:1d:82:48:71:9b:a0:
13:73:f1:03:ae:ce:81:ce:2e:35:22:14:d2:be:7d:
59:8e:88:5a:03:c0:e7:bd:d4:dd:ab:56:5e:44:bf:
44:7a:9b:e8:4e:31:df:4a:92:5f:27:88:95:5a:80:
b5:24:d8:9d:7e:fc:fb:ee:65:86:0b:77:ec:81:04:
df:3a:2c:18:5c:75:ec:b1:fc:50:7f:df:64:03:80:
6e:26:51:42:fc:83:54:e2:bb:b4:ba:88:5b:ee:30:
31:be:61:a0:bd:f2:3d:b1:8e:b9:8c:cf:14:23:3d:
73:4d:9b:b1:3b:42:fa:cd:c8:73:d9:05:2a:9e:5a:
af:dc:03:69:cf:06:f0:ea:5c:93:98:85:9c:0d:31:
14:61:8b:d7:8c:b1:e4:17:18:7e:7c:a5:e8:40:4f:
c6:bc:9b:82:70:1f:18:ff:44:ff:06:83:a9:f6:85:
a2:21:58:be:90:ad:6a:61:4e:07:3f:80:c7:07:e2:
ba:76:b7:6c:35:1a:fb:2c:23:c5:c0:4b:d3:8c:a4:
ae:b7:2d:13:dc:c4:ab:8c:c1:44:fc:ee:34:d4:19:
1e:c5:06:d7:b3:b7:05:50:71:9f:c1:b6:71:ac:ed:
9b:cd:9d:ee:e3:fc:2f:30:a9:42:a3:d8:ca:7b:d8:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5F:88:50:5A:D7:41:CE:44:E1:48:AE:81:70:2B:57:D4:95:69:09
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/2l-IUFrXQc5E4UiugXArV9SVaQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.122.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c1:4b:1b:fd:2c:df:a8:24:c2:7d:ae:48:01:04:fc:66:ae:
6e:de:b5:ec:41:4c:07:2b:a4:81:e8:f4:84:61:15:0c:5f:cf:
9b:5d:2e:ef:d6:fe:d4:e5:b6:9f:7c:28:16:1f:b5:c5:9f:c6:
17:72:93:77:d5:21:60:56:57:18:d3:13:7c:a3:b6:c6:1d:5f:
43:e7:a5:17:4d:ab:f3:18:48:21:d3:06:9b:8b:28:6b:ff:c5:
ca:64:3c:f4:df:30:a9:87:16:fe:55:de:7c:43:0a:d2:ed:be:
38:83:a5:e6:03:0d:88:23:51:44:ba:d3:d7:85:1a:c0:93:2c:
cb:e3:7e:99:d9:10:07:fe:ed:7c:5d:13:69:8d:3a:f2:21:fc:
f1:e9:ae:49:0b:5c:d4:0f:e9:b0:bc:d0:c9:03:a8:38:e4:00:
4c:7d:a2:9f:57:67:89:5e:e5:04:7e:ec:cc:09:d8:45:93:67:
7b:92:75:87:35:e7:ef:cf:66:d0:dc:77:ed:d2:d3:0a:80:a9:
63:6c:99:5e:ae:5e:ba:b4:62:2f:cd:5f:d8:1d:d1:d6:12:10:
7d:f2:80:30:04:6f:34:5a:fc:03:34:b5:b2:22:57:88:25:02:
bd:6b:5b:df:0c:2e:ca:b1:3b:fb:c0:d9:e7:4a:92:30:9e:82:
06:7a:12:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvJZPgMOPibvyM4prZjozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi
M2Q5MjQwHhcNMjQwMTAyMTAzMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTVmODg1MDVhZDc0MWNlNDRlMTQ4YWU4MTcwMmI1N2Q0OTU2OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXP/o3sfasIdgkhxm6ATc/EDrs6B
zi41IhTSvn1ZjohaA8DnvdTdq1ZeRL9EepvoTjHfSpJfJ4iVWoC1JNidfvz77mWG
C3fsgQTfOiwYXHXssfxQf99kA4BuJlFC/INU4ru0uohb7jAxvmGgvfI9sY65jM8U
Iz1zTZuxO0L6zchz2QUqnlqv3ANpzwbw6lyTmIWcDTEUYYvXjLHkFxh+fKXoQE/G
vJuCcB8Y/0T/BoOp9oWiIVi+kK1qYU4HP4DHB+K6drdsNRr7LCPFwEvTjKSuty0T
3MSrjMFE/O401BkexQbXs7cFUHGfwbZxrO2bzZ3u4/wvMKlCo9jKe9iLYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNpfiFBa10HOROFIroFwK1fUlWkJMB8GA1UdIwQY
MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt
ODI0NTFmMzNmNGNhLzEvMmwtSVVGclhRYzVFNFVpdWdYQXJWOVNWYVFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh
LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU6h6MA0G
CSqGSIb3DQEBCwUAA4IBAQBgwUsb/SzfqCTCfa5IAQT8Zq5u3rXsQUwHK6SB6PSE
YRUMX8+bXS7v1v7U5baffCgWH7XFn8YXcpN31SFgVlcY0xN8o7bGHV9D56UXTavz
GEgh0wabiyhr/8XKZDz03zCphxb+Vd58QwrS7b44g6XmAw2II1FEutPXhRrAkyzL
436Z2RAH/u18XRNpjTryIfzx6a5JC1zUD+mwvNDJA6g45ABMfaKfV2eJXuUEfuzM
CdhFk2d7knWHNefvz2bQ3Hft0tMKgKljbJlerl66tGIvzV/YHdHWEhB98oAwBG80
WvwDNLWyIleIJQK9a1vfDC7KsTv7wNnnSpIwnoIGehIF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-fra.rpki-client.org