Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/P7bEfsoghfvORinoOUebl0FZyt8.roa
File: P7bEfsoghfvORinoOUebl0FZyt8.roa (raw, json)
Hash identifier: iFkakJt7690BhRas9MrGSMMbTrhJzirA/MYLOoxmzmY=
Subject key identifier: 3F:B6:C4:7E:CA:20:85:FB:CE:46:29:E8:39:47:9B:97:41:59:CA:DF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018894A613C94D532E20C1873F534BEF78E3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/P7bEfsoghfvORinoOUebl0FZyt8.roa
Signing time: Wed 07 Jun 2023 06:58:11 +0000
ROA not before: Wed 07 Jun 2023 06:58:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 83.137.155.0/24 maxlen: 24
88.209.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:a6:13:c9:4d:53:2e:20:c1:87:3f:53:4b:ef:78:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 7 06:58:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fb6c47eca2085fbce4629e839479b974159cadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:93:f5:55:1b:43:a4:a2:d0:ae:0e:ca:2e:
24:a1:01:cc:a0:03:6a:29:ce:3a:8c:07:87:3b:38:
f9:6b:7c:fe:e8:c3:92:ad:a7:63:d4:da:5d:22:c2:
47:84:a5:28:23:a3:1d:22:5e:66:5f:c1:97:cf:b3:
b7:72:8c:70:1a:88:78:06:a2:9a:0d:17:fb:93:bf:
1e:ab:23:45:cb:88:af:ea:8c:94:a6:1b:8f:2b:d1:
8e:d1:2c:7b:ba:8f:21:45:1d:7b:74:8f:84:f2:0a:
58:5c:64:dd:96:84:cd:b3:33:32:0f:71:38:ae:af:
86:ba:bf:b1:6c:0d:a3:af:14:15:be:aa:26:fe:f0:
12:b4:74:1e:7c:29:23:85:6c:e3:c4:7e:17:ab:b4:
0e:3f:df:f9:b5:54:1d:de:c2:d4:d5:d6:38:62:9e:
83:ca:46:01:8d:1d:bc:e9:0c:de:b7:63:7e:b5:df:
3f:3c:dc:ee:c2:88:22:59:66:41:ff:6b:19:68:ae:
ba:04:3c:72:bc:21:46:4f:db:aa:89:17:e1:bd:25:
74:90:7f:e7:37:59:fa:04:f0:85:75:f9:fb:bf:97:
de:32:2f:38:f9:1b:c2:a5:36:5a:f9:93:0b:e6:e6:
79:9c:12:13:de:79:fb:c5:a2:77:df:23:5c:10:88:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B6:C4:7E:CA:20:85:FB:CE:46:29:E8:39:47:9B:97:41:59:CA:DF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/P7bEfsoghfvORinoOUebl0FZyt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.155.0/24
88.209.202.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8c:78:23:2d:d0:7c:5f:46:98:45:3b:7e:fe:e9:d9:56:b2:
fe:78:1d:5d:f2:54:69:04:3f:30:5e:5c:96:fa:80:f5:49:2a:
1e:a9:68:d7:84:9b:35:78:24:07:18:ec:18:09:ad:78:0c:15:
9d:06:97:be:a0:ff:fb:ea:30:4e:d9:e9:2c:18:76:c8:a1:2a:
a2:cd:fd:cf:62:89:ad:3d:6e:a1:cb:d2:8a:f1:ee:67:ca:d1:
d5:1f:ca:25:3f:10:84:18:ca:9d:5a:de:f8:0b:b5:bc:35:5e:
3f:d9:37:0a:cd:b9:53:d4:e5:47:e7:46:25:44:27:0c:57:73:
a9:36:b8:08:05:0b:be:93:67:07:15:2c:fa:c4:3a:d4:5b:2b:
81:6b:c3:0e:8b:f3:9e:b6:43:5b:0e:39:23:3f:09:1f:71:41:
f6:d3:97:02:e3:b0:6e:6a:61:8c:36:98:72:50:4f:95:d2:58:
e6:d2:46:7d:17:9a:db:00:28:58:af:60:9f:71:dd:6e:a3:85:
fe:b6:0c:1b:9e:75:90:25:5c:21:c1:7f:40:5d:8f:3d:d2:85:
4a:8d:04:bb:b2:c3:a0:ea:42:6b:09:12:30:d2:53:d2:53:9e:
1f:9e:2e:4b:a7:96:e9:c2:72:51:f4:99:03:4f:2d:b4:a0:1c:
c6:83:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org