Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/S3OLlOqnrzlYyAyCV2_E3QVZDDo.roa
File: S3OLlOqnrzlYyAyCV2_E3QVZDDo.roa (raw, json)
Hash identifier: EkLoa8X7vXPW/CGgJcMFj1FGcj6kCI8uPcuDKBd1Gc4=
Subject key identifier: 4B:73:8B:94:EA:A7:AF:39:58:C8:0C:82:57:6F:C4:DD:05:59:0C:3A
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 01872378F1742619A487D370A6A651854850
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/S3OLlOqnrzlYyAyCV2_E3QVZDDo.roa
Signing time: Mon 27 Mar 2023 14:29:01 +0000
ROA not before: Mon 27 Mar 2023 14:29:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209176
IP address blocks: 83.139.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:78:f1:74:26:19:a4:87:d3:70:a6:a6:51:85:48:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Mar 27 14:29:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b738b94eaa7af3958c80c82576fc4dd05590c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:a7:12:f8:ff:8b:fb:94:d4:2a:a3:ac:38:
8c:c0:2f:dd:cf:86:24:48:ba:b5:1b:80:23:7a:4a:
94:31:a0:ba:6c:56:d0:5b:10:b6:70:be:72:39:49:
87:73:d1:ff:48:39:ed:72:0c:2c:a0:03:6e:41:05:
04:3b:66:bb:99:76:89:66:c7:32:b1:b6:fa:d4:c7:
cb:93:38:47:fa:ca:a3:26:45:41:3e:0b:b2:40:4d:
08:78:71:9e:ee:36:f8:1c:39:10:1e:38:b1:dc:d5:
5e:e9:39:fd:11:14:fc:e7:e4:78:e1:7c:18:bf:95:
4e:f4:26:09:f8:e2:a3:c1:bf:e8:c0:c6:af:2b:9c:
00:b0:3f:cc:1e:da:4a:4e:7c:a9:32:47:50:a2:89:
e3:4c:59:9f:1b:ee:52:98:8d:f3:50:14:f8:c0:8f:
95:1d:38:ab:52:f5:c1:54:c9:c5:53:13:38:76:2a:
56:87:b4:24:19:9a:f3:d4:69:6d:f1:bf:0e:a8:57:
4f:37:ee:b2:02:3f:b3:cd:87:60:52:2a:a5:3e:bd:
9b:36:b1:52:d4:de:9e:98:d2:10:51:3c:3d:fe:34:
08:87:ac:69:3e:55:e6:06:5d:6c:80:11:3e:08:ce:
d7:d4:11:fa:f2:5d:56:0a:4e:71:86:9f:24:05:54:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:8B:94:EA:A7:AF:39:58:C8:0C:82:57:6F:C4:DD:05:59:0C:3A
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/S3OLlOqnrzlYyAyCV2_E3QVZDDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b5:01:55:54:93:96:76:21:60:17:f0:a5:18:8f:41:ec:d0:
ab:66:25:c9:9b:8d:af:62:b3:3e:1b:ac:c6:23:d4:57:a4:1a:
b1:d1:e8:c0:cc:e5:b3:27:0a:88:f4:12:6a:7e:93:9f:c6:26:
b5:bc:e8:0d:ba:9e:5b:e7:19:13:58:79:0d:da:d1:fe:00:4f:
fb:ae:44:7c:72:af:2f:37:2e:09:24:7c:32:0e:78:33:79:c0:
a2:42:8d:80:58:8f:53:ae:49:72:ef:f2:fd:8a:d0:39:c5:3e:
22:5e:cd:86:7b:bd:d3:ae:ab:f8:d0:f2:03:3c:41:ad:83:c1:
f2:e3:ac:e4:30:12:a2:df:70:1f:2d:78:d3:f9:6d:c9:c0:ea:
56:dc:47:44:5f:d5:ad:ee:61:44:2a:18:48:9c:cf:d5:61:8b:
1a:15:a4:fe:9c:39:1d:2a:c3:cf:f5:cf:cf:48:45:9e:b7:fb:
b3:ba:e9:f5:85:12:55:72:db:47:4e:e7:da:91:fc:2b:e6:57:
2b:fd:bd:3b:66:f6:d4:d3:1e:68:2f:a7:ce:b5:e6:3a:51:74:
8e:61:98:96:3e:3b:59:4f:55:44:56:4c:9e:37:d1:dd:dc:d5:
6e:57:a0:4e:75:75:12:7e:93:7c:ba:8c:ce:a8:80:23:ce:bc:
9a:f6:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:45 2024 by rpki-client on console-ams.rpki-client.org