Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2KNjeSx6kOcJmJlmqMC1UfVTXQk.roa
File: 2KNjeSx6kOcJmJlmqMC1UfVTXQk.roa (raw, json)
Hash identifier: 686lyDWcNEb4VC7f2RV2/BvvyH3bbQw27n6ylq1aLsw=
Subject key identifier: D8:A3:63:79:2C:7A:90:E7:09:98:99:66:A8:C0:B5:51:F5:53:5D:09
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01889A74E4EEEF4F9EAC84FAC6F96458A119
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2KNjeSx6kOcJmJlmqMC1UfVTXQk.roa
Signing time: Thu 08 Jun 2023 10:02:11 +0000
ROA not before: Thu 08 Jun 2023 10:02:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 83.137.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:74:e4:ee:ef:4f:9e:ac:84:fa:c6:f9:64:58:a1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 8 10:02:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8a363792c7a90e709989966a8c0b551f5535d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:02:5c:c4:6b:c4:b0:77:0d:14:83:e6:15:
2e:4c:da:bb:f3:4b:68:a6:54:3b:fe:1c:10:bc:31:
1c:ef:ed:d4:40:5a:e1:93:cd:6c:3e:9c:77:07:e9:
7b:85:13:82:9f:1f:73:a9:b6:00:23:f4:39:12:2c:
bd:aa:25:82:1b:15:62:ba:a8:04:e8:31:0a:af:2f:
b5:20:b3:97:8b:00:7f:d7:4c:04:52:5e:96:3b:46:
46:8a:d3:ed:7c:71:43:11:3a:72:b8:e0:4f:b9:41:
51:dd:5a:6d:df:a4:3e:86:7e:c0:49:76:d9:1e:c7:
ff:bb:c5:df:9e:c2:cc:9a:f9:e9:68:7b:6e:d8:f3:
66:03:c2:bb:8f:e3:75:f2:55:b0:64:13:b5:28:1f:
18:33:c2:6e:6e:da:83:90:3d:e5:22:aa:b8:47:ae:
0b:11:b1:49:49:cb:41:ca:1c:c1:a3:31:b5:0e:8c:
49:67:59:72:86:8c:bf:56:c0:13:9e:8c:e9:39:a1:
62:50:33:3f:b6:90:54:93:83:91:f7:c8:b1:5b:85:
ba:49:f2:f3:20:89:d8:f4:80:41:1e:a4:93:66:20:
09:db:97:41:9b:b1:3c:d6:9f:7d:e8:22:49:a0:10:
0f:23:ad:67:11:e7:47:c7:c8:63:c9:54:af:18:d2:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A3:63:79:2C:7A:90:E7:09:98:99:66:A8:C0:B5:51:F5:53:5D:09
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2KNjeSx6kOcJmJlmqMC1UfVTXQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:06:7f:7e:f7:cd:83:36:5f:5c:df:43:b4:3f:33:6b:a6:c7:
e9:56:33:a2:93:40:ac:2b:9f:93:b1:0e:eb:73:55:d2:1f:72:
9b:2d:d1:c5:02:e9:7d:b9:22:57:df:7b:de:32:75:7a:4e:0d:
b9:48:97:6b:49:aa:2e:97:d4:79:95:4c:95:27:e8:d7:af:bd:
b8:87:5b:9a:20:7a:fb:74:ba:ea:b9:0f:88:e6:1a:53:ec:57:
cc:9f:0c:d4:e4:80:91:d0:0f:86:d7:1f:00:bc:e2:39:37:a0:
e4:29:47:b1:61:22:66:e9:5b:0b:b8:ce:d6:fd:cf:cf:b9:81:
4b:94:5d:0b:bb:c3:7f:b8:a7:b3:fe:61:14:ad:ad:f2:83:b2:
49:f2:c9:76:48:47:a4:a6:fe:40:2e:4f:f5:12:11:89:0d:ac:
92:6a:bf:10:e9:95:f7:98:d5:c3:9e:90:ca:e7:44:3e:72:e5:
d4:0b:fa:c0:12:a1:82:df:2c:5d:39:f7:b8:f0:2f:0e:be:df:
b6:2c:69:24:ca:cd:23:70:f6:9b:ad:96:e1:a3:bd:45:d8:ca:
b0:cb:a0:de:c9:f3:42:41:11:79:83:8a:c9:f4:9b:91:da:a4:
b6:4f:19:dd:3f:97:7a:87:08:e1:00:f9:a3:0f:f1:d1:28:fa:
73:17:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 11:46:22 2023 by rpki-client on console-fra.rpki-client.org