Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/bVDn95c8LbG2NC_loItAxVpfOjE.roa
File: bVDn95c8LbG2NC_loItAxVpfOjE.roa (raw, json)
Hash identifier: ANu+xHw3LnTj+F+xs6/whIpRaOvSdHahhXph1solsVs=
Subject key identifier: 6D:50:E7:F7:97:3C:2D:B1:B6:34:2F:E5:A0:8B:40:C5:5A:5F:3A:31
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0186A2EE92024063D6F0AF6D1FDBB0CD12EF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/bVDn95c8LbG2NC_loItAxVpfOjE.roa
Signing time: Thu 02 Mar 2023 15:26:29 +0000
ROA not before: Thu 02 Mar 2023 15:26:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208476
IP address blocks: 83.137.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 06:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:ee:92:02:40:63:d6:f0:af:6d:1f:db:b0:cd:12:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 2 15:26:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d50e7f7973c2db1b6342fe5a08b40c55a5f3a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:d3:c8:fd:d6:49:c0:98:bf:35:0f:f0:ee:
25:1b:cf:25:64:f9:e9:e3:22:80:b9:9f:15:c6:f6:
3e:46:88:8a:74:bf:b8:3f:c2:00:36:39:ca:b0:f6:
1b:d6:3f:ff:12:4e:e4:cd:dd:f5:fa:3f:2e:a3:3c:
cf:90:a1:a4:18:23:4c:7d:99:85:91:b2:57:6f:c5:
77:cc:8c:9d:94:ab:c2:35:44:d8:69:e7:41:22:ac:
86:52:ed:cb:7b:47:7b:50:0f:b7:ab:40:7e:ed:bf:
22:8a:d5:ec:07:d7:56:1b:4a:83:c2:a5:a8:f6:17:
cc:07:db:d3:4d:aa:79:25:43:5f:8b:e5:48:6b:df:
a9:f5:c6:b2:ff:79:ad:36:b2:a0:41:9f:99:2f:c1:
0c:a4:12:07:38:ee:f0:f7:5f:8e:67:bb:6b:fe:d6:
53:2d:3d:13:c9:cd:6f:65:43:28:88:a6:35:ba:76:
e4:6f:ba:d8:a1:45:9e:14:2c:2d:eb:74:09:fe:34:
b9:45:89:9e:3c:3a:ac:60:a4:28:45:41:26:6f:8d:
bc:9e:6d:ef:e9:c1:ff:36:4d:e6:f9:33:da:3b:61:
f2:52:04:ef:a7:01:a7:65:25:f0:d6:f5:e7:c4:7f:
37:aa:8c:fb:07:b4:d6:12:09:f6:78:61:00:66:f2:
ef:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:50:E7:F7:97:3C:2D:B1:B6:34:2F:E5:A0:8B:40:C5:5A:5F:3A:31
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/bVDn95c8LbG2NC_loItAxVpfOjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.158.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4d:eb:5c:5a:e7:68:8f:dd:5e:91:c6:64:a5:c9:0c:f9:1a:
ae:72:74:8f:46:2b:8d:83:eb:89:03:c4:02:4e:0d:5c:80:ef:
49:a8:88:ad:c0:ce:03:e3:0e:11:0e:40:a2:de:b1:a0:4a:a9:
7b:e2:6c:cc:4e:47:50:99:49:24:77:8b:ac:14:13:d6:96:f0:
0d:54:f0:80:07:6d:3d:e1:3c:a1:57:d5:f5:c7:b0:fc:3a:c1:
23:38:82:c5:ec:ef:38:32:a1:b0:ad:24:2f:6d:99:a3:1d:d7:
36:44:8e:4d:de:f6:a6:ef:73:b3:cb:b0:f4:18:6d:49:87:15:
5b:76:a8:8a:a0:59:9e:97:f5:f7:2a:06:af:19:63:54:70:ea:
57:74:75:fa:48:de:c8:70:d3:99:6d:6b:5e:88:33:ec:98:55:
3a:ee:2e:66:8a:28:f5:6c:fd:67:eb:6d:ae:92:15:14:2a:fc:
cb:aa:65:ca:df:b8:e8:a4:f4:c9:0b:ca:08:96:07:3e:06:20:
2d:08:d7:78:a2:a0:11:9b:31:32:16:e7:68:ff:28:00:e3:b3:
cd:75:9f:79:8a:6c:7c:36:14:6c:a6:b2:0c:9e:de:87:44:af:
17:47:39:79:cd:5d:5f:7b:a0:f9:64:b5:f3:51:ff:a0:2c:dd:
ac:76:d2:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYai7pICQGPW8K9tH9uwzRLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwMzAyMTUyNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDUwZTdmNzk3M2MyZGIxYjYzNDJmZTVhMDhiNDBjNTVhNWYzYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH3TyP3WScCYvzUP8O4lG88lZPnp
4yKAuZ8VxvY+RoiKdL+4P8IANjnKsPYb1j//Ek7kzd31+j8uozzPkKGkGCNMfZmF
kbJXb8V3zIydlKvCNUTYaedBIqyGUu3Le0d7UA+3q0B+7b8iitXsB9dWG0qDwqWo
9hfMB9vTTap5JUNfi+VIa9+p9cay/3mtNrKgQZ+ZL8EMpBIHOO7w91+OZ7tr/tZT
LT0Tyc1vZUMoiKY1unbkb7rYoUWeFCwt63QJ/jS5RYmePDqsYKQoRUEmb428nm3v
6cH/Nk3m+TPaO2HyUgTvpwGnZSXw1vXnxH83qoz7B7TWEgn2eGEAZvLv5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG1Q5/eXPC2xtjQv5aCLQMVaXzoxMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvYlZEbjk1YzhMYkcyTkNfbG9JdEF4VnBmT2pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4meMA0G
CSqGSIb3DQEBCwUAA4IBAQB2TetcWudoj91ekcZkpckM+RqucnSPRiuNg+uJA8QC
Tg1cgO9JqIitwM4D4w4RDkCi3rGgSql74mzMTkdQmUkkd4usFBPWlvANVPCAB209
4TyhV9X1x7D8OsEjOILF7O84MqGwrSQvbZmjHdc2RI5N3vam73Ozy7D0GG1JhxVb
dqiKoFmel/X3KgavGWNUcOpXdHX6SN7IcNOZbWteiDPsmFU67i5miij1bP1n622u
khUUKvzLqmXK37jopPTJC8oIlgc+BiAtCNd4oqARmzEyFudo/ygA47PNdZ95imx8
NhRsprIMnt6HRK8XRzl5zV1fe6D5ZLXzUf+gLN2sdtJU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org