Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/FdfGziwD1uqMjMkqL68-s2YMk3M.roa
File: FdfGziwD1uqMjMkqL68-s2YMk3M.roa (raw, json)
Hash identifier: gp7WGYjtq2SDdAnyTw1N5lnsZZeV/5u7ekpy0EdpdkQ=
Subject key identifier: 15:D7:C6:CE:2C:03:D6:EA:8C:8C:C9:2A:2F:AF:3E:B3:66:0C:93:73
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 0188DE4D2091DABD4228C4F8946E147748EF
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/FdfGziwD1uqMjMkqL68-s2YMk3M.roa
Signing time: Wed 21 Jun 2023 14:12:56 +0000
ROA not before: Wed 21 Jun 2023 14:12:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33852
IP address blocks: 83.139.39.0/24 maxlen: 24
83.139.1.0/24 maxlen: 24
83.139.2.0/24 maxlen: 24
83.139.11.0/24 maxlen: 24
83.139.9.0/24 maxlen: 24
83.139.10.0/24 maxlen: 24
83.139.8.0/24 maxlen: 24
83.139.8.0/21 maxlen: 21
83.139.5.0/24 maxlen: 24
83.139.6.0/23 maxlen: 23
83.139.14.0/24 maxlen: 24
83.139.15.0/24 maxlen: 24
83.139.12.0/24 maxlen: 24
83.139.13.0/24 maxlen: 24
83.139.17.0/24 maxlen: 24
83.139.16.0/24 maxlen: 24
83.139.18.0/24 maxlen: 24
83.139.32.0/21 maxlen: 21
83.139.35.0/24 maxlen: 24
83.139.33.0/24 maxlen: 24
2a01:4000::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 21 Jun 2023 15:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:4d:20:91:da:bd:42:28:c4:f8:94:6e:14:77:48:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jun 21 14:12:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15d7c6ce2c03d6ea8c8cc92a2faf3eb3660c9373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:7b:62:d4:d1:89:5c:70:61:d8:d4:59:ae:
27:93:42:e6:c2:75:85:de:0c:98:18:2c:65:0e:9d:
f9:c5:a5:4c:d5:fb:3a:33:0b:68:33:bd:2f:e7:32:
a2:0f:6e:a8:23:39:c7:77:6f:d7:b8:97:07:bd:f2:
76:6a:2c:56:66:96:c2:ae:bb:01:02:f5:fa:fe:56:
38:de:b6:88:29:5b:fc:b2:40:23:01:84:2f:ff:46:
ff:29:3d:0e:da:2b:71:65:d6:9e:30:f2:46:8a:74:
30:79:dd:8e:0f:58:fe:c7:a9:99:c9:cd:d4:c3:da:
35:75:3c:04:7c:20:cd:05:1e:7e:58:45:6c:0c:57:
b6:9c:4a:2b:b8:45:ec:49:e2:12:54:8f:d9:ca:74:
98:04:76:38:b9:f0:19:80:df:e1:57:83:55:ae:d2:
0d:11:a9:ee:9a:4f:e3:a5:5a:ac:f1:3d:55:05:85:
e5:07:33:fe:79:6f:b0:25:79:7d:18:68:2a:96:7f:
81:15:52:fd:4a:e1:bd:82:f3:d2:a7:c1:9d:c3:ee:
12:d8:2e:7c:01:43:90:41:d4:45:e4:5b:a4:00:4f:
9d:74:df:25:af:40:b9:5b:56:0c:11:2d:0b:93:19:
70:27:64:ba:53:65:d3:21:96:e8:e2:61:3c:98:fc:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D7:C6:CE:2C:03:D6:EA:8C:8C:C9:2A:2F:AF:3E:B3:66:0C:93:73
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/FdfGziwD1uqMjMkqL68-s2YMk3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.1.0-83.139.2.255
83.139.5.0-83.139.18.255
83.139.32.0/21
IPv6:
2a01:4000::/32
Signature Algorithm: sha256WithRSAEncryption
55:38:6f:cf:8c:4e:b6:42:62:9f:f3:a7:bb:87:53:bf:07:54:
f7:59:ea:f4:37:51:11:af:f0:b8:75:79:18:41:38:6e:4e:fb:
aa:b3:28:d9:c6:4b:0b:41:6c:41:1b:c0:d3:10:72:af:a5:73:
b7:1c:0c:8e:25:46:b7:e0:9b:a4:64:77:0d:8b:e8:de:f0:95:
1a:dd:1b:73:3d:fd:95:7e:aa:46:f0:4f:5b:4a:e7:7c:f5:61:
1f:82:7e:bb:45:8c:00:30:68:bf:79:54:94:58:74:62:98:87:
75:0c:75:da:bf:5a:5f:8d:22:77:a1:0e:9a:68:6a:fc:1a:0a:
5f:df:ab:df:46:87:e2:c0:93:96:6e:b0:c0:c9:7b:95:3c:dc:
ac:6a:5b:0e:8d:ba:e5:c8:b6:d8:eb:5f:ae:e9:3d:42:a3:80:
0b:ed:12:c0:d8:97:d2:ac:a4:16:13:65:6c:5f:37:22:47:09:
d1:85:74:9e:1f:4b:99:0e:f1:5f:27:68:47:91:ec:c0:81:4b:
b6:3b:a7:e8:b3:55:d4:e2:c4:72:b6:4f:bb:b5:c2:b5:ce:ef:
ea:4c:34:b3:83:1b:9b:e9:da:f9:07:bb:68:63:41:fb:eb:27:
a4:0d:15:be:89:47:cd:44:d8:01:3c:75:7d:a3:56:82:41:e7:
d7:ba:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:32 2024 by rpki-client on console-fra.rpki-client.org