Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/x1k5yIv7D2lfoa2_Wa9HeZWzlmo.roa
File: x1k5yIv7D2lfoa2_Wa9HeZWzlmo.roa (raw, json)
Hash identifier: FBk+zdMJHAqcKcDPIuH/lS00qgHORJzYAUTBP0O28Js=
Subject key identifier: C7:59:39:C8:8B:FB:0F:69:5F:A1:AD:BF:59:AF:47:79:95:B3:96:6A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 018C39215435A097F15859F3D55732C7BF97
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/x1k5yIv7D2lfoa2_Wa9HeZWzlmo.roa
Signing time: Tue 05 Dec 2023 08:38:54 +0000
ROA not before: Tue 05 Dec 2023 08:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31500
IP address blocks: 83.243.69.0/25 maxlen: 25
83.243.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:21:54:35:a0:97:f1:58:59:f3:d5:57:32:c7:bf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Dec 5 08:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c75939c88bfb0f695fa1adbf59af477995b3966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:94:e8:d8:f3:42:a6:92:68:56:93:cb:9e:
ba:29:f3:a8:3d:c6:31:43:1a:28:df:12:d3:80:f1:
1b:40:75:8a:af:71:d2:03:f8:53:53:f7:6b:03:ec:
77:05:c6:a7:c7:63:4f:2d:35:00:0b:1b:02:fa:91:
4d:4f:64:9c:87:f2:96:6b:22:94:a5:70:7a:8e:ac:
5e:19:ea:0f:57:92:2a:04:6d:65:26:9c:33:49:a6:
ce:64:b0:0c:3f:e2:0e:8e:8a:3c:6c:47:6e:70:d9:
94:0a:c5:b4:67:29:3e:9d:6f:bf:65:ff:cf:44:28:
57:81:5b:9c:a6:68:e8:b3:71:cb:58:23:c8:10:7a:
e8:5f:52:0e:ac:04:62:b4:94:5b:ef:29:0b:5e:20:
16:ea:38:3e:9b:41:4c:ed:d9:53:38:4a:d6:0e:df:
00:0f:cf:01:b5:3d:31:2f:23:9e:8b:e6:7b:52:a3:
05:74:c6:21:7b:1a:6c:15:ab:6b:43:40:c3:53:e4:
63:25:c9:36:21:45:fa:69:8c:e2:66:05:5f:80:77:
e3:de:a9:60:28:87:4d:bb:a1:4f:1e:79:82:be:18:
5f:d1:84:c3:da:18:71:d9:57:31:c8:bb:dd:7e:3e:
8b:05:a1:9e:4c:ae:ea:72:72:fd:93:ac:cd:a6:6e:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:59:39:C8:8B:FB:0F:69:5F:A1:AD:BF:59:AF:47:79:95:B3:96:6A
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/x1k5yIv7D2lfoa2_Wa9HeZWzlmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7d:12:d3:9f:1b:27:f7:7d:31:1f:8d:ce:de:ae:46:22:af:
0c:26:8e:de:52:7c:92:7f:e0:8c:d9:59:64:e8:db:cb:92:82:
5d:16:04:d5:71:82:99:de:ce:27:ea:0e:a7:82:ff:39:b4:c2:
61:b5:bb:0f:f9:58:3c:c4:5d:a8:99:10:f8:75:ec:4a:0b:81:
75:94:ed:d4:1b:f4:12:a6:5d:fc:89:14:5a:04:53:f7:e7:5b:
6a:a6:86:0b:42:b0:ae:66:1b:ed:73:c5:7b:d2:f7:06:59:14:
a6:39:95:ba:ea:ce:fb:12:49:99:8e:2a:bf:7a:46:18:34:88:
b9:0a:22:d4:20:3f:e5:0f:36:c3:b3:ff:69:7d:3a:b6:41:94:
dd:94:b9:bf:61:99:5f:53:39:0d:c9:5c:9e:9c:b9:b4:b6:73:
fe:7f:72:e2:73:47:4a:b7:79:9e:b0:75:a1:06:dc:c0:5b:e8:
5f:02:1d:58:7e:d8:9a:0c:c2:41:ac:cc:28:f0:80:2e:3b:2f:
d6:86:a1:d1:3b:be:ee:b4:17:f7:c9:36:f4:f2:ce:55:f5:aa:
71:92:cc:96:68:b0:a4:b0:59:c6:c7:06:96:a0:2e:14:63:db:
a8:c2:ef:cc:a9:10:a3:07:79:b6:d2:da:cc:f5:31:0f:e4:67:
7d:97:d9:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw5IVQ1oJfxWFnz1Vcyx7+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYzk4MTRhODJjY2I2OGY1MWMzN2JmODNhZTZjZjU3ODI0
NGNhMWEwHhcNMjMxMjA1MDgzODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzU5MzljODhiZmIwZjY5NWZhMWFkYmY1OWFmNDc3OTk1YjM5NjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRKU6NjzQqaSaFaTy566KfOoPcYx
Qxoo3xLTgPEbQHWKr3HSA/hTU/drA+x3Bcanx2NPLTUACxsC+pFNT2Sch/KWayKU
pXB6jqxeGeoPV5IqBG1lJpwzSabOZLAMP+IOjoo8bEducNmUCsW0Zyk+nW+/Zf/P
RChXgVucpmjos3HLWCPIEHroX1IOrARitJRb7ykLXiAW6jg+m0FM7dlTOErWDt8A
D88BtT0xLyOei+Z7UqMFdMYhexpsFatrQ0DDU+RjJck2IUX6aYziZgVfgHfj3qlg
KIdNu6FPHnmCvhhf0YTD2hhx2VcxyLvdfj6LBaGeTK7qcnL9k6zNpm6yuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdZOciL+w9pX6Gtv1mvR3mVs5ZqMB8GA1UdIwQY
MBaAFM3JgUqCzLaPUcN7+Drmz1eCRMoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUt
OTYzYjI1ZmEzMDY4LzEveDFrNXlJdjdEMmxmb2EyX1dhOUhlWld6bG1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUtOTYzYjI1ZmEzMDY4
LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/NFMA0G
CSqGSIb3DQEBCwUAA4IBAQB8fRLTnxsn930xH43O3q5GIq8MJo7eUnySf+CM2Vlk
6NvLkoJdFgTVcYKZ3s4n6g6ngv85tMJhtbsP+Vg8xF2omRD4dexKC4F1lO3UG/QS
pl38iRRaBFP351tqpoYLQrCuZhvtc8V70vcGWRSmOZW66s77EkmZjiq/ekYYNIi5
CiLUID/lDzbDs/9pfTq2QZTdlLm/YZlfUzkNyVyenLm0tnP+f3Lic0dKt3mesHWh
BtzAW+hfAh1YftiaDMJBrMwo8IAuOy/WhqHRO77utBf3yTb08s5V9apxksyWaLCk
sFnGxwaWoC4UY9uowu/MqRCjB3m20trM9TEP5Gd9l9la
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:29 2024 by rpki-client on console-fra.rpki-client.org