Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g9QAT_fPMkoisG5W6meJp0mYZ2c.roa
File: g9QAT_fPMkoisG5W6meJp0mYZ2c.roa (raw, json)
Hash identifier: uWvAJ1IQ16SiYqE8G7yxDEukIf51w71yYwkC58AFqpY=
Subject key identifier: 83:D4:00:4F:F7:CF:32:4A:22:B0:6E:56:EA:67:89:A7:49:98:67:67
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 018B147D9238AB275D643629492F36F7B1B8
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g9QAT_fPMkoisG5W6meJp0mYZ2c.roa
Signing time: Mon 09 Oct 2023 12:50:55 +0000
ROA not before: Mon 09 Oct 2023 12:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 176.100.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:7d:92:38:ab:27:5d:64:36:29:49:2f:36:f7:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Oct 9 12:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83d4004ff7cf324a22b06e56ea6789a749986767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:61:72:6d:32:84:d0:46:0a:c6:ae:f9:45:
98:2f:3c:0c:2b:26:da:eb:07:bb:4f:00:7a:d4:88:
70:77:dc:6d:fe:4a:6c:43:a6:26:4f:be:96:03:c3:
13:50:b0:13:94:a3:30:19:85:3f:7f:00:02:9e:13:
b7:3c:fd:11:5d:ab:ce:f9:b2:29:74:88:d3:4d:2a:
c4:b1:bb:1e:05:14:79:44:21:33:36:17:a1:26:75:
f6:6f:b6:21:71:b5:a9:c2:fd:19:06:24:e3:dc:b7:
c3:76:1f:85:a9:9c:da:b5:2f:80:5b:22:03:ce:bf:
1c:9f:3d:30:11:c8:bd:38:99:c3:57:6f:b1:97:83:
00:da:c9:56:68:cd:8d:59:bf:5e:0f:e5:4e:5c:d5:
ee:01:32:77:6a:6f:66:62:2c:02:5e:24:53:9c:d0:
81:7f:9a:d8:75:ee:a1:8d:a4:87:5e:3b:b8:52:21:
d3:97:eb:89:1e:46:2c:65:54:69:26:a5:61:74:bd:
69:db:08:5d:38:54:49:54:13:4b:13:21:91:60:cd:
6f:0f:9a:5b:20:c0:f6:ee:99:db:10:04:2f:d4:48:
2e:b9:8d:7e:9c:d4:35:3d:12:b0:8d:87:2e:1f:52:
f7:c9:1d:b1:28:c2:0d:3b:71:13:4f:b9:51:10:43:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D4:00:4F:F7:CF:32:4A:22:B0:6E:56:EA:67:89:A7:49:98:67:67
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g9QAT_fPMkoisG5W6meJp0mYZ2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.147.0/24
Signature Algorithm: sha256WithRSAEncryption
26:28:f8:da:9b:b7:04:1f:b1:2f:63:2f:b6:1b:f8:a4:eb:a3:
a7:40:5f:1c:b1:56:41:62:9a:3f:f5:d6:15:6e:d8:a0:a8:67:
ab:73:79:48:02:1d:93:16:ae:f6:c4:3e:fb:c1:ae:b7:98:46:
4b:7d:56:43:c4:c1:80:9b:cf:36:b3:82:38:b8:b2:35:5f:79:
1f:2f:dc:f7:b1:d4:2d:67:1d:27:dc:a4:7d:19:f6:a5:ed:f3:
86:36:11:08:bc:4f:d4:8f:c3:34:80:f0:1f:83:3c:c4:83:fe:
7d:34:3e:f5:87:bb:37:88:99:95:ea:09:e4:38:ac:a7:7b:f5:
58:6d:e4:9d:15:14:2d:36:62:b2:ce:d6:5a:01:b2:b8:68:86:
b4:9e:f7:b4:e9:3c:e5:67:b1:8a:57:79:e5:f6:7f:43:a9:e8:
48:f8:88:94:2e:f4:6e:3c:3e:7d:7b:68:09:7c:ca:03:53:a7:
4a:61:5f:eb:ab:4e:46:9a:66:1e:82:81:ea:e1:9d:0a:5b:46:
b8:9c:58:80:32:d5:0c:26:8d:64:05:7a:53:25:9a:c1:35:ab:
dd:de:0d:a3:70:6d:bd:6e:3c:a6:94:a8:88:7e:eb:12:a5:40:
cf:78:7d:00:a6:bd:cf:34:3e:36:5b:47:5d:fc:bd:79:1a:d7:
e9:68:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:34 2024 by rpki-client on console-fra.rpki-client.org