Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/iWbW_cZSVwFrcJzqyYC_5vHJ_18.roa
File: iWbW_cZSVwFrcJzqyYC_5vHJ_18.roa (raw, json)
Hash identifier: NxFYoIuGCqv/vr0msXmQOkew6tadjsecr9fnE0IpQh8=
Subject key identifier: 89:66:D6:FD:C6:52:57:01:6B:70:9C:EA:C9:80:BF:E6:F1:C9:FF:5F
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01939A8866D2E8E7C06F648186B0CD5C0438
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/iWbW_cZSVwFrcJzqyYC_5vHJ_18.roa
Signing time: Fri 06 Dec 2024 05:54:10 +0000
ROA not before: Fri 06 Dec 2024 05:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 83.147.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9a:88:66:d2:e8:e7:c0:6f:64:81:86:b0:cd:5c:04:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 6 05:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8966d6fdc65257016b709ceac980bfe6f1c9ff5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:0d:11:23:47:cc:0b:ca:99:d2:41:dc:9a:
7f:34:78:2d:31:d6:5c:d9:42:70:64:9e:5d:dd:07:
f9:c6:b9:dc:aa:6e:86:1e:ef:e6:91:27:2e:1c:d6:
b2:46:61:76:86:36:1d:41:77:55:eb:04:93:fb:8b:
e8:3f:ba:81:a7:3a:bb:a6:a4:51:5f:3b:2d:6c:ac:
b5:69:3e:52:12:53:68:a5:23:15:15:a4:ac:c1:d9:
15:e0:16:a7:04:e5:eb:4a:fa:f5:10:8b:9e:48:8e:
f8:6e:55:d7:75:13:6f:f3:57:96:a3:fb:5e:6a:4b:
fb:6d:e3:7a:eb:b1:be:6f:14:8e:a5:c4:75:be:5a:
7c:55:69:44:82:53:82:e1:0d:99:49:b4:aa:dd:fe:
bf:e7:77:b8:45:4c:54:89:20:70:11:22:cb:f2:54:
b5:80:00:cc:eb:32:6d:3d:7e:16:a1:14:d9:78:13:
db:8e:26:be:55:29:87:16:03:25:01:ad:a5:b6:80:
9f:e2:65:97:ed:3b:68:af:45:ea:fc:b1:dd:d2:a9:
a9:0e:c0:a2:59:ab:e1:68:7a:9c:6a:40:b8:00:a4:
ac:a4:20:91:e8:04:03:8e:4b:77:b5:dd:4f:ee:8c:
fb:3a:6c:ad:1f:2c:fe:0d:76:06:86:3f:a7:6f:c0:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:D6:FD:C6:52:57:01:6B:70:9C:EA:C9:80:BF:E6:F1:C9:FF:5F
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/iWbW_cZSVwFrcJzqyYC_5vHJ_18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
83:34:5a:af:73:42:f1:7e:51:61:59:6a:e7:48:76:6d:3c:90:
de:60:b9:2e:9b:eb:38:2f:a8:c3:7f:33:ab:55:30:61:cb:c1:
6b:90:53:a3:99:9d:3e:0d:63:75:e2:a4:0f:32:ac:29:35:e9:
ea:d6:87:61:f8:7e:3d:3d:9c:57:ee:88:1d:ec:0c:74:66:67:
90:43:f5:4d:3f:22:fe:1a:16:b2:f2:34:a3:f4:2f:8d:e0:64:
77:73:1b:43:15:b8:89:8e:7a:ed:fb:46:e1:17:f0:58:54:71:
7e:fd:05:13:21:0f:77:40:ed:11:40:d2:be:df:e9:c7:c1:7e:
2c:1b:41:95:07:7a:56:04:ab:4b:7d:4d:7e:c0:b8:50:12:c9:
2f:eb:fe:c7:5c:c3:0e:a4:10:5c:f9:89:7f:e7:79:0a:22:8a:
07:59:10:49:76:34:9c:a4:46:54:9a:94:6b:24:76:3c:64:b3:
39:93:fb:c1:c2:8c:b5:6c:b3:32:f3:3e:9c:b1:e7:ba:87:30:
be:61:79:91:f0:f5:30:46:d2:d3:bf:31:90:af:76:4a:95:c1:
63:1b:db:22:0f:68:cd:e1:c1:ef:89:1c:07:2f:4a:86:50:d1:
ad:e8:b7:32:70:9a:3c:85:77:ac:46:64:60:a3:ad:a2:08:6a:
86:29:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:17:34 2025 by rpki-client