Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9_nOayfX9OI8XDym9Gu-OugqOmg.roa
File: 9_nOayfX9OI8XDym9Gu-OugqOmg.roa (raw, json)
Hash identifier: NHnDbj44uo7Z0GmgFH0yaVd6ee8ND3t9hCGt6gUA3qY=
Subject key identifier: F7:F9:CE:6B:27:D7:F4:E2:3C:5C:3C:A6:F4:6B:BE:3A:E8:2A:3A:68
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7AD1E46A99017D55DA2792025BDA7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9_nOayfX9OI8XDym9Gu-OugqOmg.roa
Signing time: Mon 02 Jan 2023 09:54:46 +0000
ROA not before: Mon 02 Jan 2023 09:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 83.137.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:ad:1e:46:a9:90:17:d5:5d:a2:79:20:25:bd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f9ce6b27d7f4e23c5c3ca6f46bbe3ae82a3a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:af:69:a9:bf:46:6f:c5:dc:f9:a3:8a:b1:
d9:e5:a2:49:19:2e:59:0f:d0:30:30:d2:2e:24:21:
83:30:cf:20:4a:21:51:43:f9:ce:65:b7:5f:94:01:
ea:5b:4c:02:6d:9a:c3:c5:c8:fd:de:dd:9b:17:54:
05:8c:32:31:e7:c4:88:71:0d:d0:ba:17:89:51:e8:
85:1a:81:56:03:ac:76:6b:42:d5:45:c5:b8:f5:34:
81:5c:dd:f4:af:3a:b7:76:4e:4c:9a:ca:07:67:10:
aa:42:9e:de:20:0c:bf:7e:9a:7b:bb:10:19:84:d0:
14:c8:92:2b:2d:d9:96:57:ea:82:6a:01:e3:f2:8d:
c0:a0:70:7e:6c:91:2e:53:f7:4f:f2:d2:e4:59:ce:
1a:ce:65:ab:b6:02:93:ef:f3:e5:84:36:56:27:b9:
99:41:48:c8:d9:8d:76:7b:27:7b:67:08:58:b1:5e:
fc:2c:a9:3e:7b:01:f2:00:8e:a2:09:39:3c:30:5b:
87:d8:d7:6d:45:5e:9c:2e:14:a1:30:25:8c:69:1b:
e8:63:5a:a1:ae:53:4a:38:22:1b:71:44:71:f2:0e:
e7:f0:37:2a:c0:89:7c:2c:88:63:e5:5e:2f:f6:c5:
7d:40:fd:d9:e4:38:61:10:75:0d:7d:f7:65:4d:c3:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F9:CE:6B:27:D7:F4:E2:3C:5C:3C:A6:F4:6B:BE:3A:E8:2A:3A:68
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9_nOayfX9OI8XDym9Gu-OugqOmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.155.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d8:0e:c9:3d:7f:50:82:c4:bb:6b:df:5d:7d:ae:2e:6d:d8:
8c:cf:33:16:2d:60:4d:db:ff:01:b3:73:1c:84:62:33:af:40:
26:af:87:5b:8f:c6:2b:dd:54:78:d0:18:c1:f5:e1:fc:a1:45:
92:4c:0d:10:83:62:35:f1:5a:0e:d0:32:ef:e7:50:eb:b2:14:
36:d5:d4:e4:9f:53:79:60:00:fe:69:e5:2c:dd:08:72:4e:ed:
38:48:60:d3:71:05:93:ac:d7:7e:66:64:b5:b9:5a:5c:50:05:
0b:f4:2e:a2:d3:08:1b:a3:d3:e5:3d:03:f8:30:a4:36:d9:49:
38:f1:8a:6b:41:68:4a:a2:a2:38:0a:f2:04:5c:f9:c5:ca:8e:
c2:fb:ac:61:57:d1:ab:3a:75:83:9c:e7:44:ba:20:e0:0b:41:
35:4d:c9:f1:39:ff:99:1c:fd:fd:88:59:ae:bc:a3:d9:6e:d5:
8f:02:ef:05:04:90:d5:d0:dd:cf:21:72:d8:68:0a:2c:1e:22:
2b:1c:bf:5e:6c:5f:e7:b9:bf:f0:e9:2a:20:39:ac:de:76:ff:
ea:c3:04:a9:f0:2e:ce:42:9f:cf:48:b5:db:e7:cb:4e:50:ae:
aa:c9:67:e3:d5:91:c3:a0:b4:ee:73:95:f0:7c:47:33:18:89:
1d:77:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org