Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/nbIcbvgMOGj56_SL7ThbyO8hsLU.roa
File: nbIcbvgMOGj56_SL7ThbyO8hsLU.roa (raw, json)
Hash identifier: CiDSn0AybDZTOq52LUXFQ4YUdHiNSGm9YROrHq1eTZg=
Subject key identifier: 9D:B2:1C:6E:F8:0C:38:68:F9:EB:F4:8B:ED:38:5B:C8:EF:21:B0:B5
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01856C813819FA98C6E8AB9A23827E628E15
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/nbIcbvgMOGj56_SL7ThbyO8hsLU.roa
Signing time: Sun 01 Jan 2023 08:44:45 +0000
ROA not before: Sun 01 Jan 2023 08:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30741
IP address blocks: 83.145.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:38:19:fa:98:c6:e8:ab:9a:23:82:7e:62:8e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 08:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db21c6ef80c3868f9ebf48bed385bc8ef21b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:13:ed:92:1e:cf:d0:17:34:86:51:1e:bb:
7d:67:ec:68:1e:d9:dc:d3:1c:1e:d0:b1:63:c4:e9:
02:b8:22:16:aa:27:ab:16:89:5c:89:b4:b8:d6:16:
e4:5e:63:76:66:65:ca:7f:31:ad:81:cd:0d:36:bf:
07:98:f5:b3:79:0e:35:0e:3a:ab:d5:59:da:f1:4e:
b8:4d:0e:41:45:00:c4:69:f1:95:16:ce:61:c7:d5:
cb:86:9f:b4:a6:01:71:2d:fb:a5:7a:60:3e:e6:b7:
fe:14:e1:f8:b7:34:0a:e2:c9:73:4f:de:3d:b6:81:
af:4f:c7:ac:ba:f8:07:a3:1c:b6:e1:eb:ec:c9:04:
f0:7c:23:ed:83:a6:8e:3f:27:19:f2:8a:88:c3:0a:
0b:5f:90:51:90:a8:e6:04:42:61:3f:47:0f:6f:08:
62:5e:25:f8:99:24:0b:9f:c1:60:55:66:c2:e8:61:
29:f9:41:96:2d:fb:4b:d0:ba:c9:75:69:c5:f7:26:
18:5b:c4:55:81:c6:6e:09:b0:0b:e1:69:c4:d2:28:
33:ca:8a:49:ae:cb:15:c9:ca:72:d7:23:15:7e:5a:
eb:3d:40:77:38:3d:3d:1a:1f:d5:75:b7:09:5e:f9:
7f:fb:91:e4:2f:52:33:37:91:a3:bb:12:2f:a0:85:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:1C:6E:F8:0C:38:68:F9:EB:F4:8B:ED:38:5B:C8:EF:21:B0:B5
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/nbIcbvgMOGj56_SL7ThbyO8hsLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.145.127.0/24
Signature Algorithm: sha256WithRSAEncryption
53:27:e7:49:42:dc:f3:c5:18:65:28:27:47:ff:33:c1:8d:89:
50:97:77:20:01:5e:34:0a:2e:70:9c:3d:6d:56:29:c0:c9:47:
7d:a6:a0:05:d8:80:b1:8d:32:3d:e9:89:07:28:22:d7:5c:a9:
e8:1e:b0:4d:ca:ce:71:41:ca:9e:11:73:44:01:10:2e:bc:09:
e2:0f:28:83:09:a8:78:58:c1:60:2b:87:6a:06:8e:4c:f5:70:
f1:4e:8f:28:77:72:8f:f8:c5:fe:4e:c9:55:1a:e6:98:8d:5b:
10:4a:d5:49:5a:96:95:66:ec:a0:e1:29:e6:e8:70:11:a0:87:
b6:53:74:23:cb:3e:ff:58:63:91:2e:6c:8e:70:b8:ab:b8:3f:
c1:6e:12:14:b2:97:96:2f:17:61:37:2f:d4:a1:8e:5b:2c:2d:
c5:db:4b:48:f8:92:41:d3:7f:d8:d6:1a:1f:cf:93:f1:62:8c:
18:0c:7e:7d:ce:18:60:33:6d:10:86:4f:48:a7:b0:65:51:84:
66:69:39:82:5c:86:aa:4f:9f:5f:65:b4:96:61:d5:bc:c4:cd:
71:21:0e:85:87:4b:a5:03:2c:43:aa:62:59:20:79:96:55:ed:
29:d7:ea:5b:de:87:00:50:a8:b9:4c:e5:03:3e:17:44:bd:25:
c5:ea:f3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:59 2024 by rpki-client on console-ams.rpki-client.org