Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/3yDI8BoQNxDm--a5xNjqR8jQUsI.roa
File: 3yDI8BoQNxDm--a5xNjqR8jQUsI.roa (raw, json)
Hash identifier: JWqDZNPxas/ZUZ9h/w+FFLl4kyloTbTbMIlO7RZR8fg=
Subject key identifier: DF:20:C8:F0:1A:10:37:10:E6:FB:E6:B9:C4:D8:EA:47:C8:D0:52:C2
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 018CC9BC971CE6A12E812C8C887EA0759776
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/3yDI8BoQNxDm--a5xNjqR8jQUsI.roa
Signing time: Tue 02 Jan 2024 10:33:49 +0000
ROA not before: Tue 02 Jan 2024 10:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 83.168.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 10:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:97:1c:e6:a1:2e:81:2c:8c:88:7e:a0:75:97:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 2 10:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df20c8f01a103710e6fbe6b9c4d8ea47c8d052c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:2c:31:30:1b:86:a7:b3:11:d7:89:ca:23:
ee:f7:71:b5:38:d1:24:8c:98:67:b8:65:79:39:6c:
9a:7f:e2:ed:90:96:4f:e2:78:a5:c0:2a:57:2e:b7:
10:ef:6d:bf:69:79:d4:40:6e:de:ed:0f:d8:de:28:
41:76:d6:67:3e:ee:62:9b:4f:5f:81:f1:9c:d1:77:
72:a8:39:1d:9b:c7:7d:91:a9:8c:af:68:73:0c:00:
d4:af:62:cc:0c:c8:01:a1:26:db:b3:06:33:ad:d6:
b2:f2:83:06:ef:53:91:9a:6b:bd:0f:b8:bd:a3:a0:
26:a3:14:b6:43:06:cf:38:78:d2:49:58:e5:88:34:
5b:2b:cd:a1:fc:b8:f5:21:c0:df:c4:06:f2:32:33:
56:d8:31:4a:7a:ac:a1:91:f8:67:a1:78:38:67:5f:
af:4c:26:12:3f:8f:b8:6f:6b:9c:23:f9:52:6c:b6:
32:ff:be:ff:83:84:49:5e:e9:1e:5a:8c:1b:75:9e:
65:37:f5:0a:b7:01:96:ce:cf:b9:3b:c5:77:72:6a:
87:46:53:0b:83:39:47:9d:e8:e3:97:84:08:8a:93:
b5:7e:37:8c:4a:5c:e0:a1:30:3d:35:f1:63:a8:cf:
d3:0f:d6:39:b3:64:a9:70:91:16:6a:b9:f2:b0:ab:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:C8:F0:1A:10:37:10:E6:FB:E6:B9:C4:D8:EA:47:C8:D0:52:C2
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/3yDI8BoQNxDm--a5xNjqR8jQUsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.125.0/24
Signature Algorithm: sha256WithRSAEncryption
50:da:12:66:15:47:57:59:c2:31:8a:09:27:32:8c:be:75:34:
b4:c9:1e:30:71:c7:ce:58:9d:92:85:c6:6c:20:0c:57:fc:db:
14:10:61:a1:b6:d5:7a:aa:b3:ea:7c:c5:aa:eb:3a:d1:07:da:
8a:2e:18:c1:90:6a:82:55:eb:00:60:bc:e2:fc:f5:96:31:c3:
9c:c0:df:c1:b3:e1:a8:63:77:70:39:f3:86:5b:2a:30:7d:2d:
9f:df:ef:2c:52:51:22:a8:e5:29:f3:eb:d8:57:d8:30:8e:26:
6a:96:7d:ac:6b:bc:67:63:43:67:25:b8:60:d0:4e:59:a8:92:
a4:b4:87:b4:9f:f2:2a:2b:ee:16:6a:80:a6:30:bf:9b:3a:36:
b7:41:a7:c5:fb:a0:e0:4e:c5:5f:a7:46:61:fd:6d:94:48:5f:
5f:5c:ed:a6:6a:75:53:82:70:da:29:94:2e:ea:8d:4b:93:15:
68:18:c2:11:80:91:f2:51:dc:56:f8:fd:9e:0d:5b:2a:d6:51:
e4:8a:89:5d:7a:8c:a5:9f:d7:bf:f3:58:9c:0a:aa:b0:7a:94:
b6:d3:74:de:fb:ae:0b:4e:66:81:9a:d6:f3:3d:85:57:4d:22:
27:cb:5a:e6:39:5c:09:88:e4:8b:f6:99:f6:3f:96:63:2e:11:
68:08:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:01 2024 by rpki-client on console-ams.rpki-client.org