Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/40n5AAwbgir-7zjmWZxGXhYJUN8.roa
File: 40n5AAwbgir-7zjmWZxGXhYJUN8.roa (raw, json)
Hash identifier: kjMoejwSL0SsxqSedSfPP42nTYNzNg8+V+1jfCyKiQw=
Subject key identifier: E3:49:F9:00:0C:1B:82:2A:FE:EF:38:E6:59:9C:46:5E:16:09:50:DF
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 01872378EFF2A4A631A0B06D249356215B4B
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/40n5AAwbgir-7zjmWZxGXhYJUN8.roa
Signing time: Mon 27 Mar 2023 14:29:00 +0000
ROA not before: Mon 27 Mar 2023 14:29:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200205
IP address blocks: 83.139.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:78:ef:f2:a4:a6:31:a0:b0:6d:24:93:56:21:5b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Mar 27 14:29:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e349f9000c1b822afeef38e6599c465e160950df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:9e:34:e1:f8:be:70:3c:26:22:20:ff:2c:
ef:ae:72:a8:1b:b6:73:06:df:d7:25:bd:bd:4b:f6:
70:3b:98:59:4c:60:ea:6d:10:4e:a9:28:94:2b:6a:
87:72:97:1b:7e:51:99:41:5b:45:6b:c1:04:6b:74:
4c:23:ca:78:43:e7:f7:a5:33:53:8e:c8:42:d6:c6:
ca:7e:c8:2c:c2:2b:7e:2a:f6:5a:32:35:cf:78:f1:
fd:46:da:d1:8b:51:ed:81:62:72:16:a6:74:b2:17:
6f:d5:65:16:89:88:14:34:5c:66:9f:8f:2e:12:f6:
a0:a7:cd:2f:79:50:12:f6:23:2a:a4:82:7e:ec:65:
c7:2b:3d:7f:be:d1:bc:6c:ab:aa:a7:05:63:ed:50:
f3:ce:37:f1:6c:6d:d9:3a:7e:64:2c:2d:a1:0d:8b:
f6:c1:1f:62:52:9d:17:78:ff:5a:79:83:8e:eb:d4:
25:6a:11:35:56:d4:c4:37:be:c8:a6:b2:f1:9c:52:
41:e3:4e:e3:e6:40:f7:22:80:cd:56:ea:31:65:00:
7a:1c:dc:8b:bd:2a:14:63:a0:7f:f2:2c:2e:56:38:
1b:f2:1a:67:69:06:a3:02:c9:bf:6c:88:10:a1:84:
17:d2:81:50:3c:8f:e0:de:e4:2d:09:5c:b3:68:4c:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:49:F9:00:0C:1B:82:2A:FE:EF:38:E6:59:9C:46:5E:16:09:50:DF
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/40n5AAwbgir-7zjmWZxGXhYJUN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.22.0/24
Signature Algorithm: sha256WithRSAEncryption
03:99:cb:3e:ab:f7:2f:63:a5:7f:09:6b:53:e7:42:a9:1e:54:
b0:b0:79:54:b6:93:5f:ef:cb:9f:ce:04:1c:5c:23:96:47:4d:
b5:21:44:8d:37:ce:19:e1:70:9a:e3:c7:eb:d2:0c:70:a2:5d:
6d:f9:93:c0:fd:4a:b3:bd:62:2c:0f:d9:88:26:64:27:8f:de:
f6:ac:bc:e8:af:3f:e3:99:b0:ef:dc:b0:b5:16:ee:f4:11:07:
a3:62:4f:16:fe:76:a0:36:56:07:4a:be:93:21:89:80:00:3c:
67:8a:ed:03:8c:ee:b9:8c:89:06:1b:8c:fe:cc:12:1c:54:38:
d7:03:f7:fc:76:e5:83:6d:1f:41:a5:a8:23:e2:c7:0b:18:9c:
d5:ae:9d:cc:2a:27:a8:5a:c0:6c:36:51:a7:39:bc:65:38:fd:
1b:06:07:59:4d:e1:94:12:c9:6b:98:bf:95:ec:a6:8d:21:ea:
bf:84:59:a1:7d:51:9c:9d:93:4d:4b:9c:55:5e:36:c9:63:c2:
9f:22:cc:37:74:03:06:cb:8e:ba:69:97:d2:0e:5f:6a:bc:01:
ab:4f:b0:1f:db:fd:5f:84:d3:43:5f:90:7f:7a:82:05:f4:64:
d6:40:3d:61:74:02:03:c5:03:66:88:41:7e:65:9a:41:a2:76:
d5:bc:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:45 2024 by rpki-client on console-ams.rpki-client.org