Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/K4WceCv0fVe1Lxqbj_Dw9UwSxxQ.roa
File: K4WceCv0fVe1Lxqbj_Dw9UwSxxQ.roa (raw, json)
Hash identifier: ZQENDvT64v8owXCqexvSP+8UCBQnLtQvoYcvIWFcwKA=
Subject key identifier: 2B:85:9C:78:2B:F4:7D:57:B5:2F:1A:9B:8F:F0:F0:F5:4C:12:C7:14
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 01872378F388CB6F5173908BAB20188790A3
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/K4WceCv0fVe1Lxqbj_Dw9UwSxxQ.roa
Signing time: Mon 27 Mar 2023 14:29:01 +0000
ROA not before: Mon 27 Mar 2023 14:29:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212505
IP address blocks: 83.139.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:78:f3:88:cb:6f:51:73:90:8b:ab:20:18:87:90:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Mar 27 14:29:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b859c782bf47d57b52f1a9b8ff0f0f54c12c714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:a5:b0:c1:1b:5a:ac:c1:22:a8:6e:23:17:
c6:2a:16:db:49:70:11:43:f9:5c:68:7a:26:71:35:
98:c6:ef:6c:42:ab:98:3c:1e:bf:96:fe:98:41:12:
4b:9a:50:4f:fb:d4:44:50:81:3a:65:43:3f:ac:6d:
06:ab:21:8d:ba:d7:41:3c:5d:29:93:67:44:eb:19:
ba:b8:f3:05:bc:7b:51:e2:02:91:99:db:9e:b5:1e:
24:20:37:62:93:66:ca:38:27:af:e1:27:21:b3:05:
ae:e7:e7:fa:ba:2f:7c:52:b7:e8:0e:e0:89:db:7f:
7a:c4:89:f6:13:50:4c:72:25:e2:85:46:65:37:4e:
e4:d5:82:94:aa:86:73:a5:28:c7:d9:aa:d5:0d:16:
f2:3a:7f:be:36:35:59:ad:5a:5c:96:49:aa:ca:64:
c3:69:9a:6c:ac:50:a1:1a:98:51:f4:89:14:bf:18:
49:e0:34:dc:a4:e3:a4:da:6c:2f:25:61:34:ce:b3:
a1:f6:36:3c:33:fb:0a:65:b5:4e:03:78:24:76:ee:
73:aa:32:b6:00:7f:78:1c:c0:71:f7:92:54:49:b2:
31:ed:46:e1:45:f7:e9:5d:d9:ec:6b:e8:1d:9f:b7:
19:10:a6:b8:0c:79:84:58:ca:99:01:3b:4e:6b:1d:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:9C:78:2B:F4:7D:57:B5:2F:1A:9B:8F:F0:F0:F5:4C:12:C7:14
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/K4WceCv0fVe1Lxqbj_Dw9UwSxxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.19.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c5:45:7c:03:f8:4d:35:18:83:a9:4a:18:bd:d7:b0:5d:4f:
66:05:7f:08:7c:92:ff:60:c8:5a:d1:e8:f0:7e:ce:fc:7f:5c:
2e:4a:7d:a9:70:3c:f2:4d:db:89:4b:d6:9d:41:2a:a3:66:ce:
b8:61:c4:a0:04:6a:b4:ea:66:26:89:fe:98:90:4d:4e:97:56:
31:1e:b2:c8:19:cd:cb:d5:f5:d2:cb:fd:29:73:10:16:c0:54:
e7:2f:29:c9:a3:22:c8:a7:e6:e2:a0:70:5b:79:2e:9c:5a:7a:
d2:f3:4b:f7:43:49:ac:19:c5:21:61:cb:81:fc:8c:80:60:79:
f6:b9:c4:fd:7e:78:3e:99:7b:fd:86:57:98:84:f6:03:c3:47:
63:72:45:f0:2d:19:f0:66:a9:6e:e6:d6:2b:e0:1d:33:15:db:
d7:93:c8:0f:ed:36:5e:77:ba:e1:ed:f0:8a:c6:0c:ec:35:be:
31:3c:b2:6b:be:5c:d8:56:e3:5d:dd:eb:9c:e0:cd:e0:4d:4f:
be:78:66:80:95:8e:b3:d8:5b:ec:68:53:a4:c6:23:0e:0b:1d:
a6:83:4b:90:e6:22:87:66:1b:a3:f6:ca:fc:1c:65:3f:4c:63:
fc:dd:41:4d:b4:04:53:3a:d8:1a:81:6f:f1:9a:14:a9:ba:20:
62:34:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:32 2024 by rpki-client on console-fra.rpki-client.org