Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/8g-GOr6JE-tOpF9YJnx3ZDkf2Is.roa
File: 8g-GOr6JE-tOpF9YJnx3ZDkf2Is.roa (raw, json)
Hash identifier: ituYipVOp6qP9S3VBLNFoEfcyzm8rs2xQ7uIJ0ecPsM=
Subject key identifier: F2:0F:86:3A:BE:89:13:EB:4E:A4:5F:58:26:7C:77:64:39:1F:D8:8B
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 01856ECB8E40E30FFCAE88ABD6AAD33D5B6C
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/8g-GOr6JE-tOpF9YJnx3ZDkf2Is.roa
Signing time: Sun 01 Jan 2023 19:25:12 +0000
ROA not before: Sun 01 Jan 2023 19:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 83.143.208.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 12:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:8e:40:e3:0f:fc:ae:88:ab:d6:aa:d3:3d:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Jan 1 19:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f20f863abe8913eb4ea45f58267c7764391fd88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:c0:c5:c2:fb:7f:e5:a1:07:67:c3:bf:9e:
5f:59:f5:db:80:9a:f6:f1:e6:69:e9:21:d0:4d:e8:
41:0c:7c:ab:2b:85:99:b0:51:f3:bd:fb:3d:7e:3c:
ba:1d:98:a3:16:53:f7:3e:ee:b9:ce:15:82:0f:95:
7d:ee:69:ac:74:64:cb:eb:ef:e0:49:9d:1a:4b:3f:
14:57:d5:69:71:7e:42:92:be:c0:90:e2:65:0c:57:
73:a7:49:bd:bd:cc:b7:83:40:97:56:cd:22:02:e7:
5b:8a:57:bd:38:05:f9:db:e7:68:b3:2c:73:10:c4:
b8:97:ca:32:8a:7b:f4:56:09:77:f7:08:f7:4b:6a:
59:53:89:a0:c2:5b:75:80:68:99:ac:2a:d3:6a:55:
d7:82:3d:ce:cb:2d:a2:3a:63:f0:6f:3c:30:54:6e:
1f:b5:b8:b2:81:ec:5a:c7:93:ac:2c:51:b3:7d:77:
c7:36:d9:d8:4e:5c:da:30:da:e2:d8:09:5f:e5:04:
f4:5e:c3:d5:b6:7a:65:c9:75:62:ab:dc:83:da:f0:
3d:66:96:83:a0:02:08:2c:fa:ce:a9:4b:dc:30:b5:
7b:1a:76:74:7c:b9:17:3d:28:86:b7:ea:af:46:09:
ed:b4:bc:a3:ea:a1:d8:dc:23:6f:74:74:54:5b:3b:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:86:3A:BE:89:13:EB:4E:A4:5F:58:26:7C:77:64:39:1F:D8:8B
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/8g-GOr6JE-tOpF9YJnx3ZDkf2Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.208.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:e2:2b:c3:d3:00:58:c8:56:78:d3:9c:99:b1:1a:39:18:b7:
33:90:df:bf:ff:46:4d:51:86:e7:b6:51:f7:cb:cb:9a:ee:a7:
c8:d5:fd:11:28:1f:33:ab:14:d9:10:6d:45:21:8f:26:32:61:
9a:eb:61:dd:80:f3:c2:55:93:dc:08:88:93:fa:09:8a:04:e0:
8a:a9:ed:00:28:f8:ba:92:e2:64:bd:6a:37:24:a8:0d:79:4c:
3b:f0:e9:2d:da:e9:fe:29:b6:7a:9c:f5:5c:79:17:48:1f:aa:
53:fb:94:5b:e8:09:5f:dd:1f:44:d4:32:df:73:81:87:06:6d:
3a:1e:29:17:8e:d1:e5:70:9e:cf:8a:1b:87:d8:4c:d0:d3:08:
b4:46:f5:75:30:ac:78:bf:1c:e8:66:89:be:62:e1:83:6f:b3:
65:76:cc:df:1f:7b:aa:27:48:fb:03:2d:89:38:83:62:27:05:
2e:21:65:df:45:44:d0:3f:f0:6a:83:b1:55:40:00:92:f0:61:
83:18:31:e2:2b:7a:1e:1a:a4:19:86:40:a7:41:4d:05:1c:5b:
5a:be:01:74:05:c6:77:0a:9b:b9:fb:6e:97:14:c7:69:00:a2:
3e:89:5d:de:a2:58:bb:c6:6f:39:48:10:10:30:06:e6:50:a1:
7b:b7:60:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuy45A4w/8roir1qrTPVtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTUwYjQzOGNjNjhmNjJkYzE1ZDM1OTU5MzE2MWY3OTlk
ZTUzYWYwHhcNMjMwMTAxMTkyNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjBmODYzYWJlODkxM2ViNGVhNDVmNTgyNjdjNzc2NDM5MWZkODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9fAxcL7f+WhB2fDv55fWfXbgJr2
8eZp6SHQTehBDHyrK4WZsFHzvfs9fjy6HZijFlP3Pu65zhWCD5V97mmsdGTL6+/g
SZ0aSz8UV9VpcX5Ckr7AkOJlDFdzp0m9vcy3g0CXVs0iAudbile9OAX52+dosyxz
EMS4l8oyinv0Vgl39wj3S2pZU4mgwlt1gGiZrCrTalXXgj3Oyy2iOmPwbzwwVG4f
tbiygexax5OsLFGzfXfHNtnYTlzaMNri2Alf5QT0XsPVtnplyXViq9yD2vA9ZpaD
oAIILPrOqUvcMLV7GnZ0fLkXPSiGt+qvRgnttLyj6qHY3CNvdHRUWzv5HwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPIPhjq+iRPrTqRfWCZ8d2Q5H9iLMB8GA1UdIwQY
MBaAFG0VC0OMxo9i3BXTWVkxYfeZ3lOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQt
MWIzZDk4YmVmMWU5LzEvOGctR09yNkpFLXRPcEY5WUpueDNaRGtmMklzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQtMWIzZDk4YmVmMWU5
LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU4/QMA0G
CSqGSIb3DQEBCwUAA4IBAQCP4ivD0wBYyFZ405yZsRo5GLczkN+//0ZNUYbntlH3
y8ua7qfI1f0RKB8zqxTZEG1FIY8mMmGa62HdgPPCVZPcCIiT+gmKBOCKqe0AKPi6
kuJkvWo3JKgNeUw78Okt2un+KbZ6nPVceRdIH6pT+5Rb6Alf3R9E1DLfc4GHBm06
HikXjtHlcJ7PihuH2EzQ0wi0RvV1MKx4vxzoZom+YuGDb7NldszfH3uqJ0j7Ay2J
OINiJwUuIWXfRUTQP/Bqg7FVQACS8GGDGDHiK3oeGqQZhkCnQU0FHFtavgF0BcZ3
Cpu5+26XFMdpAKI+iV3eoli7xm85SBAQMAbmUKF7t2Au
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:43 2024 by rpki-client on console-ams.rpki-client.org