Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BdiLm6l5ySNCYO_plEvJ2tvTJRg.roa
File: BdiLm6l5ySNCYO_plEvJ2tvTJRg.roa (raw, json)
Hash identifier: ORLr8CLzHy85DJ/0bEKHxN066Q7LKh/X46EPSqth1FE=
Subject key identifier: 05:D8:8B:9B:A9:79:C9:23:42:60:EF:E9:94:4B:C9:DA:DB:D3:25:18
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018581D648BA4707E8260AEA69269798A2AF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BdiLm6l5ySNCYO_plEvJ2tvTJRg.roa
Signing time: Thu 05 Jan 2023 12:09:42 +0000
ROA not before: Thu 05 Jan 2023 12:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 83.137.159.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 13:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:d6:48:ba:47:07:e8:26:0a:ea:69:26:97:98:a2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 5 12:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05d88b9ba979c9234260efe9944bc9dadbd32518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:0f:27:0a:c5:ad:78:19:9e:00:af:a7:8b:
f0:2a:77:61:a4:a5:f6:1f:ee:66:08:0a:01:6c:41:
a9:af:47:d5:31:4d:78:83:b9:cb:96:31:1a:44:cb:
f9:e2:15:c6:07:3b:01:39:d3:89:b9:53:ca:05:d7:
aa:2c:f0:bb:d0:1f:18:5d:4c:2d:3a:f4:77:3a:d9:
c3:aa:ea:29:98:80:16:55:1e:dd:0e:3e:44:04:91:
8c:d4:00:42:56:91:d0:37:c6:6e:5a:71:c2:ad:d3:
22:ff:33:05:db:85:c0:0c:42:2c:30:36:ae:de:9d:
76:b6:01:80:cc:74:0d:93:2a:37:e2:20:78:34:98:
83:ed:31:2f:6e:79:7f:86:a9:51:c7:0a:15:3d:ad:
56:4a:6f:58:4c:51:15:2c:67:34:08:68:fc:a5:03:
da:9a:fe:7e:04:c1:bd:97:88:ad:17:e4:93:a3:e7:
4d:3e:5d:80:93:e2:c2:98:de:5f:78:6f:83:23:ff:
d3:74:cb:a4:12:a4:7e:7e:11:fb:c4:cb:f4:6d:0b:
3a:f1:0d:1d:8b:45:28:92:cc:3d:5f:62:75:01:b4:
88:a9:8a:fb:73:79:27:e4:76:25:21:b4:6e:5e:49:
a0:7b:18:24:cc:42:2b:8a:33:a6:8f:80:b6:7e:ab:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D8:8B:9B:A9:79:C9:23:42:60:EF:E9:94:4B:C9:DA:DB:D3:25:18
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BdiLm6l5ySNCYO_plEvJ2tvTJRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.158.0/23
Signature Algorithm: sha256WithRSAEncryption
76:a9:44:3c:1d:92:b0:a7:83:62:1b:a8:e8:5f:c4:e9:27:73:
b4:83:51:4e:97:8a:98:3f:aa:fa:09:2e:dd:76:d2:67:f8:26:
c2:1a:ea:59:d8:e0:47:c4:ce:31:02:e4:9d:59:32:91:99:16:
e8:ca:6a:c9:57:6a:da:70:38:5a:02:6b:87:b9:f1:71:dc:a0:
e8:a3:e0:49:98:c9:72:b7:13:bf:a4:8b:11:55:32:d8:38:ba:
c3:5d:aa:d8:03:ff:9c:a9:d4:79:ae:14:c1:16:a7:30:51:64:
93:65:78:cb:bf:f7:cc:5f:48:3c:b3:43:c8:60:89:0d:1a:dd:
e8:eb:7c:86:92:72:7f:70:92:92:25:5c:7d:ef:47:f9:7d:8a:
cf:b5:1c:ab:91:6b:3f:19:90:ab:6c:e8:88:d9:c2:42:69:b5:
fb:ca:00:91:84:1f:14:00:b9:79:41:e0:c2:a8:cf:bb:93:5d:
6f:8f:0f:dd:e6:93:dc:f3:41:ff:b7:44:b1:d4:24:bd:9d:ad:
2b:e0:60:bd:70:e0:15:bc:4b:35:56:f0:42:ae:8d:3b:a9:f4:
bd:84:24:7d:70:33:17:31:49:5d:ad:2a:da:e7:e3:ee:c8:8e:
15:01:c3:31:61:0f:f2:ff:fb:ec:37:a9:c8:db:7d:8e:46:95:
5b:11:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org