Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/hffo9VGdTu_p--DGNanuJwT07Qg.roa
File: hffo9VGdTu_p--DGNanuJwT07Qg.roa (raw, json)
Hash identifier: ViG/IyoeLfK6RLfmeMaEcpbQg73rLIphN853x6Pr8og=
Subject key identifier: 85:F7:E8:F5:51:9D:4E:EF:E9:FB:E0:C6:35:A9:EE:27:04:F4:ED:08
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 018CC9BC9695646265D170AF324200C3F018
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/hffo9VGdTu_p--DGNanuJwT07Qg.roa
Signing time: Tue 02 Jan 2024 10:33:48 +0000
ROA not before: Tue 02 Jan 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31304
IP address blocks: 83.168.64.0/21 maxlen: 21
83.168.96.0/21 maxlen: 21
83.168.104.0/24 maxlen: 24
83.168.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 10:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:96:95:64:62:65:d1:70:af:32:42:00:c3:f0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 2 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85f7e8f5519d4eefe9fbe0c635a9ee2704f4ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:d0:ad:66:ff:2f:7e:f6:0f:1d:73:37:f7:
a2:df:60:fc:fd:1d:a3:ad:72:bf:e9:ab:e0:a8:a9:
00:ea:2d:62:19:04:a5:2b:4d:c2:17:68:46:77:be:
7a:bb:fa:73:23:ce:d1:77:2a:29:6b:40:a1:c9:80:
f5:8c:3e:ab:20:94:f9:c3:a8:c9:4d:88:5a:8f:61:
38:81:54:15:82:9e:39:af:d7:0a:2e:27:53:6f:89:
fe:f6:b8:7d:ad:79:c7:ba:8c:1f:ef:84:50:5d:57:
75:4d:38:6a:59:d2:db:54:dc:46:fe:26:00:00:d7:
a7:7d:d3:3a:e1:52:3a:a3:f2:b7:2c:f7:2a:14:4d:
bd:54:3b:3f:88:16:b8:a9:bf:a0:3a:1b:41:49:41:
f1:0b:d1:68:0e:ad:ce:88:67:66:8f:1b:b1:6f:d2:
4d:32:13:e2:eb:4f:1a:65:dc:45:2b:78:de:4e:bd:
ee:d9:0d:cc:ce:6d:1e:82:54:ed:61:4f:81:c4:6a:
3c:11:77:18:ad:65:58:37:ad:20:33:61:8c:95:fe:
f9:f6:09:2c:2d:43:81:50:88:c0:9c:be:b9:f3:b0:
da:90:81:55:55:68:d4:0f:eb:40:f1:8d:5c:84:17:
42:f7:c4:78:c7:ad:36:f9:5c:a0:e8:75:4f:d2:3d:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:E8:F5:51:9D:4E:EF:E9:FB:E0:C6:35:A9:EE:27:04:F4:ED:08
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/hffo9VGdTu_p--DGNanuJwT07Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.64.0/21
83.168.96.0-83.168.104.255
83.168.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d7:2e:4c:ee:ff:ae:ab:93:44:20:aa:b8:05:56:3a:c1:49:
d0:33:5d:51:2c:ef:a1:4b:ca:fb:a9:d3:7e:6e:b2:99:22:70:
37:29:60:7a:66:91:44:ca:34:1d:68:39:36:34:1b:d2:9d:00:
a8:03:3c:6b:15:56:a0:25:04:29:69:4f:42:b0:cd:46:53:61:
69:c1:a7:52:ad:dc:b8:a6:53:40:c7:36:16:46:2d:ec:31:c9:
d0:49:44:4a:23:5d:77:09:bf:d2:ad:7b:35:90:3a:c3:3e:e5:
78:d3:21:54:90:7c:6c:07:6e:4d:8e:a5:46:19:d4:70:85:40:
59:01:16:85:9d:bb:58:f3:69:19:36:57:96:81:27:c0:fa:dc:
f3:7a:ef:58:6c:a2:e8:02:dc:73:66:d9:ce:d2:87:fc:a3:2a:
89:f8:98:da:64:c7:17:58:67:98:91:12:52:d0:03:d2:46:80:
51:04:41:df:1d:dd:97:d8:84:bc:d3:38:c7:73:10:38:cc:04:
a8:2f:69:6a:e9:aa:8d:bf:60:93:93:e4:f2:c6:82:b2:86:ec:
64:44:6a:7e:6a:46:07:b6:d6:b5:3d:34:ce:af:d8:8a:b2:f8:
46:86:ca:1a:1d:1e:d4:81:a8:cb:91:cf:52:44:b7:b2:e8:ec:
1e:ee:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 15:15:07 2024 by rpki-client on console-ams.rpki-client.org