Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/fbDKJAYJQUWbegLRvKHJ1viRQAc.roa
File: fbDKJAYJQUWbegLRvKHJ1viRQAc.roa (raw, json)
Hash identifier: O4CEz5oYkQpiVm1RafRcbPgq7SB/FA4mgDShzzgB8xs=
Subject key identifier: 7D:B0:CA:24:06:09:41:45:9B:7A:02:D1:BC:A1:C9:D6:F8:91:40:07
Certificate issuer: /CN=285feec87d1959340872f8f79831202f24c80c9e
Certificate serial: 01856CE63081094788D11392423350D28A84
Authority key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/fbDKJAYJQUWbegLRvKHJ1viRQAc.roa
Signing time: Sun 01 Jan 2023 10:35:03 +0000
ROA not before: Sun 01 Jan 2023 10:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208910
IP address blocks: 83.171.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:30:81:09:47:88:d1:13:92:42:33:50:d2:8a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285feec87d1959340872f8f79831202f24c80c9e
Validity
Not Before: Jan 1 10:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7db0ca24060941459b7a02d1bca1c9d6f8914007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:e9:ea:73:5e:c2:24:b4:58:d6:a4:88:d4:
a8:31:2c:48:05:30:82:ec:d0:c8:19:ec:e4:7c:aa:
38:1e:0b:c6:60:28:1e:ed:70:2b:f9:50:36:10:47:
f6:58:62:b1:a0:dd:20:b7:73:59:90:a8:8d:9e:9e:
05:db:d8:0d:6c:15:dd:bf:52:0d:dc:18:2d:68:af:
ba:8a:75:8c:d2:e3:47:07:5e:db:23:9f:2c:65:70:
4c:d2:a2:e7:c2:9b:72:41:21:27:83:e4:b0:a0:2e:
da:96:af:16:73:72:7e:4b:a7:4f:5d:00:42:f0:6d:
b8:b3:74:c2:1e:28:c6:53:cb:a8:07:ac:f5:60:e3:
82:6b:1f:7b:40:51:71:02:15:b1:f2:8a:e4:bc:c8:
d7:db:15:08:41:67:90:13:7f:fc:3b:b1:d8:f1:13:
1e:da:cf:be:7b:85:00:a0:8c:37:66:37:ab:eb:6e:
98:b9:89:1a:4a:db:c8:98:df:e8:73:9e:f0:7c:43:
a6:d4:6d:4b:d3:59:b7:5d:2a:d8:d7:fe:69:72:33:
7d:f5:9d:98:c2:f7:62:39:8d:7c:9d:74:89:7f:a2:
19:2b:9c:81:34:9e:27:a2:51:e4:c6:b0:62:99:20:
47:ff:d3:90:31:98:bb:b4:de:4e:03:12:47:32:ef:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B0:CA:24:06:09:41:45:9B:7A:02:D1:BC:A1:C9:D6:F8:91:40:07
X509v3 Authority Key Identifier:
keyid:28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/fbDKJAYJQUWbegLRvKHJ1viRQAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:cf:6e:87:35:1b:97:36:f6:b0:06:18:91:24:c7:bb:4a:7d:
e1:39:ab:57:6a:a8:6d:ed:ad:cf:38:a4:85:0d:fe:ef:0a:61:
f8:7b:bd:1c:f2:c1:f7:52:46:d3:c9:68:97:7b:eb:8f:6e:24:
ce:7d:d3:ae:98:58:94:d2:02:87:af:cc:c1:59:98:d7:8e:80:
50:bf:3e:cf:5a:35:19:48:77:5e:b3:b8:41:31:a5:a8:3b:66:
a5:04:48:e7:0d:ff:28:d1:9a:76:02:96:d7:fb:da:f4:50:36:
f4:49:fd:bb:2f:93:d2:ab:a6:e7:79:69:6f:22:21:94:14:7b:
7f:6a:91:45:5c:80:03:cc:c0:42:65:60:17:2d:35:a3:ce:64:
89:76:4c:8a:9d:55:f1:fc:b3:ed:26:dc:39:8b:15:5e:6a:05:
6e:9f:92:a0:72:46:5e:db:09:81:28:1b:d5:cb:f4:ec:4b:91:
a4:98:50:34:ea:3a:5b:a0:ee:91:55:08:53:1e:63:89:b8:41:
62:21:38:7b:cb:5a:1b:d7:e3:22:78:b3:6b:1a:0e:17:e7:55:
c5:b6:d2:d1:4f:1f:69:09:6a:f1:e1:e8:0b:a6:49:2e:b7:30:
eb:07:dd:11:67:7d:ff:4a:7d:9e:5f:42:34:8b:1c:9b:de:7f:
56:c8:22:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:28 2024 by rpki-client on console.sobornost.net