Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yZ4TYxhgVblt4CnM5zpfEeNuPKM.roa
File: yZ4TYxhgVblt4CnM5zpfEeNuPKM.roa (raw, json)
Hash identifier: hbRknI99zjVF5p76zEcOiaHpxPs7j/ss5EZTEhnlZqc=
Subject key identifier: C9:9E:13:63:18:60:55:B9:6D:E0:29:CC:E7:3A:5F:11:E3:6E:3C:A3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A927B53EFCD6EAD5133DFCFAF7C780CA6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yZ4TYxhgVblt4CnM5zpfEeNuPKM.roa
Signing time: Thu 14 Sep 2023 06:57:50 +0000
ROA not before: Thu 14 Sep 2023 06:57:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216326
IP address blocks: 83.137.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 12:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:7b:53:ef:cd:6e:ad:51:33:df:cf:af:7c:78:0c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 14 06:57:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c99e1363186055b96de029cce73a5f11e36e3ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:ae:6c:49:fd:37:2f:02:04:ac:d6:de:f9:
d6:9b:c8:dc:c2:12:c3:a2:96:b2:e7:4b:ac:f6:8d:
e0:ee:4f:da:75:94:76:46:86:b5:cd:eb:28:c4:d0:
3b:62:cb:da:d0:67:8c:d1:48:60:d6:e0:82:e9:cc:
b4:ec:e2:0c:02:5d:4b:a3:0d:ca:77:94:1a:38:f7:
80:f1:53:f6:f7:83:9a:d5:c4:54:3b:07:ef:e6:c1:
7d:7a:08:99:3e:8c:1a:34:cc:d9:3a:b1:55:65:b7:
be:b0:c8:69:fb:6f:6b:24:3d:db:b0:5f:a8:a6:95:
51:09:cc:2b:25:a6:4e:79:7f:81:54:cc:20:1c:e3:
f0:4a:6f:2d:bd:ee:e3:ba:ce:a0:03:e7:43:14:ee:
f5:6a:fe:ca:37:23:9b:25:2f:37:02:03:e4:2c:5a:
9f:6b:0c:8f:d0:83:97:19:f9:ad:1b:55:24:ef:c6:
5b:15:d5:01:76:b2:9e:b8:29:5e:82:2d:83:40:ca:
84:37:cc:ac:a4:cb:09:8d:a4:93:c6:f8:43:0f:37:
3d:32:bf:13:f5:61:56:60:27:9d:14:26:48:fb:9b:
a0:9c:f6:99:f9:34:d3:d8:87:64:7d:37:2a:62:23:
81:32:53:d6:5c:3c:c4:d0:4c:a2:75:68:56:c9:38:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:13:63:18:60:55:B9:6D:E0:29:CC:E7:3A:5F:11:E3:6E:3C:A3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yZ4TYxhgVblt4CnM5zpfEeNuPKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.153.0/24
Signature Algorithm: sha256WithRSAEncryption
58:84:0b:5d:c8:29:d5:b6:b2:87:e1:30:ea:d6:72:c9:64:e3:
df:85:83:06:37:ca:4e:a0:bb:f3:f9:f9:75:79:b7:ee:c1:55:
8a:3f:9b:5c:30:3d:5f:0f:ef:53:1f:cc:ed:11:b7:0f:d3:b9:
66:60:ce:e4:d1:7e:93:9b:2d:90:1b:73:53:07:6e:21:fe:0b:
97:9f:e2:d1:85:c0:f8:6b:51:f2:0a:5f:2b:b9:1a:be:dc:c0:
4d:e3:ea:9d:b6:2c:21:63:bc:4a:67:32:b4:70:85:47:fa:c6:
b4:31:ee:d4:7f:d0:00:2c:92:71:c2:7d:23:5f:71:25:e2:6d:
4d:e7:ee:af:41:3c:c4:8f:69:d1:a7:fc:3d:a4:43:e0:bf:db:
f7:b7:b9:6a:21:83:86:39:bf:41:38:48:f7:58:68:7f:92:9a:
4a:d0:d5:b6:59:e5:1f:33:58:7e:b3:51:09:a2:1a:5b:5f:a4:
96:39:e0:0b:cb:73:01:21:8f:ba:a5:c9:e1:bf:f5:73:09:d2:
43:6e:bf:e8:8d:0d:7c:a2:0f:eb:02:c1:7c:e3:59:0b:28:2c:
fe:ca:92:01:af:43:28:0b:a4:86:90:db:a7:40:1b:b8:58:f6:
c9:6c:69:82:d4:38:d2:2d:16:d3:53:f8:30:f9:3f:31:95:e8:
f5:22:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org