Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/4a-LxRdtAMatsd_ZBb4xN8hh44s.roa
File: 4a-LxRdtAMatsd_ZBb4xN8hh44s.roa (raw, json)
Hash identifier: ui/4vYxUCn5CFEiesUX2J2IeUZNpvSTvR3YyRXq4V0s=
Subject key identifier: E1:AF:8B:C5:17:6D:00:C6:AD:B1:DF:D9:05:BE:31:37:C8:61:E3:8B
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018723454AB82A0506E09A1367B503CC02EE
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/4a-LxRdtAMatsd_ZBb4xN8hh44s.roa
Signing time: Mon 27 Mar 2023 13:32:36 +0000
ROA not before: Mon 27 Mar 2023 13:32:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33852
IP address blocks: 83.139.39.0/24 maxlen: 24
83.139.0.0/24 maxlen: 24
83.139.1.0/24 maxlen: 24
83.139.2.0/24 maxlen: 24
83.139.11.0/24 maxlen: 24
83.139.9.0/24 maxlen: 24
83.139.10.0/24 maxlen: 24
83.139.8.0/24 maxlen: 24
83.139.8.0/21 maxlen: 21
83.139.5.0/24 maxlen: 24
83.139.6.0/23 maxlen: 23
83.139.14.0/24 maxlen: 24
83.139.15.0/24 maxlen: 24
83.139.12.0/24 maxlen: 24
83.139.13.0/24 maxlen: 24
83.139.17.0/24 maxlen: 24
83.139.16.0/24 maxlen: 24
83.139.23.0/24 maxlen: 24
83.139.18.0/24 maxlen: 24
83.139.32.0/21 maxlen: 21
83.139.35.0/24 maxlen: 24
83.139.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 14:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:45:4a:b8:2a:05:06:e0:9a:13:67:b5:03:cc:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Mar 27 13:32:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1af8bc5176d00c6adb1dfd905be3137c861e38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:ab:bd:f7:a6:ac:0a:18:c7:ea:18:b0:df:
33:9d:d7:99:42:39:e1:b1:c2:7f:26:14:92:25:40:
43:c9:00:b0:41:56:c5:0b:e9:be:d7:3d:a4:09:a6:
32:dc:34:e4:2e:57:55:49:58:12:a9:d6:7f:38:a2:
8d:6f:a1:82:f9:8e:5e:fb:25:95:f2:cf:a6:f2:4a:
45:f7:5e:72:22:3c:e9:cf:14:66:f5:64:db:c1:9f:
7b:bf:34:f6:c3:ec:8d:27:be:33:fb:67:7d:37:20:
22:5b:26:49:13:33:fd:bd:b4:f7:d6:8b:76:78:19:
ed:d0:70:73:b7:2f:fa:d3:1d:e3:98:da:d9:f7:72:
ea:fa:23:83:f4:6c:7e:65:c9:85:7f:cc:57:f7:42:
05:21:c7:b1:35:4a:10:9e:3f:b1:3e:dd:26:7f:53:
38:64:eb:f6:ca:5a:b7:bd:6a:03:4b:82:29:f3:da:
c0:4a:04:34:8a:8d:db:12:c3:3f:3d:51:fe:d4:3e:
f9:db:3d:8f:15:72:c5:49:1e:94:5d:dc:92:24:3d:
93:e0:08:24:8d:38:da:d9:f7:3b:74:31:75:74:8c:
11:81:a4:cd:96:84:a4:b5:37:54:0b:45:e1:7b:94:
cf:82:34:3b:72:9b:4f:d9:b1:a5:41:3e:99:03:4b:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:8B:C5:17:6D:00:C6:AD:B1:DF:D9:05:BE:31:37:C8:61:E3:8B
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/4a-LxRdtAMatsd_ZBb4xN8hh44s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.0.0-83.139.2.255
83.139.5.0-83.139.18.255
83.139.23.0/24
83.139.32.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:b9:ac:9b:34:14:47:70:bc:92:6b:6a:65:17:b7:19:62:f4:
83:d8:0a:b9:c5:f9:05:ab:0b:99:75:19:88:96:d1:7c:0b:20:
b1:88:cc:76:c8:16:2f:18:b3:1e:4e:98:fa:c9:f6:51:ad:b7:
70:8e:ab:7a:89:1a:d6:a4:c2:84:0e:7c:5c:9b:22:33:f9:f1:
f8:07:38:7c:54:28:18:18:52:93:2a:d8:a2:2d:1d:f6:11:93:
72:37:4f:f5:5f:cf:22:d9:b4:5b:c6:c7:e7:bb:8a:28:b5:99:
3d:3b:19:cf:00:04:da:85:be:9f:e1:51:22:ae:8f:d8:a5:f4:
96:c9:11:f8:f1:8f:12:4e:7e:59:0d:dc:97:8e:d2:56:16:86:
ae:57:5f:39:06:55:95:9a:9c:3e:14:fa:ec:6c:5e:1e:e9:30:
81:e2:94:6e:08:cf:7e:80:92:1a:a3:42:9c:cb:1b:47:5f:a9:
76:40:86:f5:a5:78:64:d7:31:d8:a6:92:f1:63:58:06:ef:4c:
85:34:17:7e:75:a6:1c:7e:ad:56:46:79:29:78:bd:97:f6:e4:
a3:87:55:93:78:81:ea:d6:61:5d:a8:78:4f:83:27:4b:e9:7a:
6c:37:92:f6:97:9c:46:38:bb:c8:10:1d:eb:31:88:83:32:a0:
6c:1a:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:32 2024 by rpki-client on console-fra.rpki-client.org