Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/mF0YoWMr_sWMOyjWYs5C99NaQIA.roa
File: mF0YoWMr_sWMOyjWYs5C99NaQIA.roa (raw, json)
Hash identifier: Ze2R7ILDM5LEDdl90Z3zE1u+1cvWxcW9m7Qm8FHusY0=
Subject key identifier: 98:5D:18:A1:63:2B:FE:C5:8C:3B:28:D6:62:CE:42:F7:D3:5A:40:80
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018745DE6050722AF5B1B5FB8D5EBC5DA3F0
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/mF0YoWMr_sWMOyjWYs5C99NaQIA.roa
Signing time: Mon 03 Apr 2023 06:46:54 +0000
ROA not before: Mon 03 Apr 2023 06:46:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33852
IP address blocks: 83.139.39.0/24 maxlen: 24
83.139.1.0/24 maxlen: 24
83.139.2.0/24 maxlen: 24
83.139.11.0/24 maxlen: 24
83.139.9.0/24 maxlen: 24
83.139.10.0/24 maxlen: 24
83.139.8.0/24 maxlen: 24
83.139.8.0/21 maxlen: 21
83.139.5.0/24 maxlen: 24
83.139.6.0/23 maxlen: 23
83.139.14.0/24 maxlen: 24
83.139.15.0/24 maxlen: 24
83.139.12.0/24 maxlen: 24
83.139.13.0/24 maxlen: 24
83.139.17.0/24 maxlen: 24
83.139.16.0/24 maxlen: 24
83.139.18.0/24 maxlen: 24
83.139.23.0/24 maxlen: 24
83.139.32.0/21 maxlen: 21
83.139.35.0/24 maxlen: 24
83.139.33.0/24 maxlen: 24
2a01:4000::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 21 Jun 2023 14:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:de:60:50:72:2a:f5:b1:b5:fb:8d:5e:bc:5d:a3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Apr 3 06:46:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=985d18a1632bfec58c3b28d662ce42f7d35a4080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7a:86:bc:2f:91:a6:3f:8e:15:b6:43:4c:0f:
a9:d1:4b:97:9e:53:88:62:72:9d:ec:0d:dd:9e:7c:
ee:84:be:fa:4a:69:c9:93:d8:fd:15:69:70:e2:e6:
d0:1f:a7:ed:c6:06:b3:d3:6d:eb:b2:60:46:25:28:
8d:0a:4c:10:45:c4:19:2f:b1:8b:3b:dc:cb:17:6d:
4a:47:1b:41:e4:75:96:da:51:35:50:dc:4e:e6:86:
4b:0c:08:a0:8b:9a:34:09:30:d0:54:37:ec:f4:c0:
2e:99:53:cc:bb:52:ba:75:84:ae:57:b4:f8:2e:b7:
1a:b9:c6:ac:be:47:51:b3:b5:aa:f7:b1:19:bf:41:
ca:35:0f:cf:14:ee:2b:13:ea:f2:e0:a8:07:80:4e:
4b:2f:37:d2:a5:f0:d2:36:b6:d6:2e:c3:be:80:75:
27:96:03:bb:91:f8:f5:10:5b:9f:ab:7e:00:54:f7:
21:61:21:60:c3:fd:4b:95:ff:fe:b1:ac:ed:1b:a5:
cd:aa:ce:ab:5e:50:28:f5:be:b1:fa:75:59:6f:94:
a7:a3:92:0d:c9:e8:86:0e:fb:48:ec:ed:12:73:08:
96:9b:44:ac:27:89:95:89:da:2b:58:4f:b4:0e:1d:
7f:ee:9d:94:a2:be:ba:83:db:f5:70:04:8f:40:95:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5D:18:A1:63:2B:FE:C5:8C:3B:28:D6:62:CE:42:F7:D3:5A:40:80
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/mF0YoWMr_sWMOyjWYs5C99NaQIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.1.0-83.139.2.255
83.139.5.0-83.139.18.255
83.139.23.0/24
83.139.32.0/21
IPv6:
2a01:4000::/32
Signature Algorithm: sha256WithRSAEncryption
50:3d:bb:1c:35:9f:fc:05:d8:44:35:3c:16:b1:5d:c6:61:86:
ce:45:d0:85:e5:11:5d:65:29:9d:fd:ce:8a:7f:4b:4b:18:48:
2d:2e:43:e2:d2:42:66:ef:61:4f:6c:20:d6:d2:fe:4d:68:98:
9a:70:24:7c:b2:64:10:59:ab:8c:0f:ba:08:1d:e4:a6:af:42:
af:de:ee:8d:ad:fb:ed:cf:f5:01:2c:8c:aa:bb:b7:37:86:cc:
42:f3:a1:05:20:38:ed:a8:6d:a0:e5:25:bc:76:3a:c4:15:1c:
a7:78:fb:98:4e:b1:a4:51:88:26:59:33:d0:80:94:88:72:1f:
f7:0f:a2:1d:9e:ca:79:b5:c7:01:79:e0:02:ba:73:3f:8d:ef:
e9:ba:a5:36:4e:03:a8:8e:c6:8a:99:9e:aa:0f:2f:54:f9:3f:
02:ab:35:97:10:69:31:73:26:be:0e:0c:aa:5f:b1:67:21:fc:
22:a7:66:9b:5a:0a:32:29:68:09:04:74:3e:cb:02:63:33:0f:
a2:59:47:f7:e6:0d:1a:2f:97:f0:cb:4e:e0:15:90:fc:b7:66:
7b:90:12:26:38:8b:0d:61:86:c8:5d:15:e8:15:22:91:03:77:
06:2c:b7:fc:67:65:d1:40:6b:9a:2b:31:cd:5e:64:2f:8c:ed:
31:54:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:32 2024 by rpki-client on console-fra.rpki-client.org