Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/g0f7yyrXjviAkg__OLBrmaDgV5I.roa
File: g0f7yyrXjviAkg__OLBrmaDgV5I.roa (raw, json)
Hash identifier: scBpgxnR3XL2kcdm0ttDTp9QwMDLMXB/avwEqnMl9lg=
Subject key identifier: 83:47:FB:CB:2A:D7:8E:F8:80:92:0F:FF:38:B0:6B:99:A0:E0:57:92
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 018AF0FB3D5A362226EAB96DC70C91A83D91
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/g0f7yyrXjviAkg__OLBrmaDgV5I.roa
Signing time: Mon 02 Oct 2023 15:21:51 +0000
ROA not before: Mon 02 Oct 2023 15:21:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 199.83.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:fb:3d:5a:36:22:26:ea:b9:6d:c7:0c:91:a8:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Oct 2 15:21:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8347fbcb2ad78ef880920fff38b06b99a0e05792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:71:ad:be:ed:23:f3:d9:71:6b:da:28:4d:
9f:1d:ac:59:e3:f9:38:4b:3b:71:c9:4f:d3:d0:b6:
37:85:78:c8:cb:67:8b:b3:cd:ac:d5:c5:f9:af:91:
fb:12:18:2d:45:b8:47:62:e6:61:b8:08:5b:26:5c:
6b:25:8a:1a:dc:22:3b:f1:de:6c:d4:cf:ea:df:df:
b8:12:3d:0f:2d:9d:16:54:48:34:1a:24:86:61:76:
4f:a7:6e:8f:32:e7:28:70:b9:97:81:77:cd:b5:b6:
5c:d8:16:12:74:1c:c4:b6:df:42:77:3e:34:27:c1:
5f:6d:79:a5:4a:c5:87:14:f3:32:b9:6a:73:82:c8:
7d:2f:8a:7a:31:e0:34:77:48:1e:21:59:ca:c2:96:
73:77:7c:36:d8:0e:4d:c6:09:1b:3c:62:94:ac:d2:
b1:3b:08:3b:bd:10:ff:10:a3:5e:3f:94:c1:50:e8:
9c:41:5b:aa:3b:61:cd:cf:42:2d:db:c7:22:7c:0d:
cd:2f:0e:67:61:17:da:04:23:1e:c8:98:1f:04:9a:
2b:13:9a:f6:4b:82:8b:a5:c7:94:44:ad:13:6a:3b:
49:b9:6b:99:b0:a1:3f:28:0f:16:33:60:2a:f7:f2:
ba:7d:1f:3f:d9:61:47:7e:dc:0c:6a:90:10:dd:30:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:FB:CB:2A:D7:8E:F8:80:92:0F:FF:38:B0:6B:99:A0:E0:57:92
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/g0f7yyrXjviAkg__OLBrmaDgV5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.83.103.0/24
Signature Algorithm: sha256WithRSAEncryption
29:06:72:93:19:41:5a:d6:45:ab:15:d2:c9:24:ac:85:9d:2d:
6f:85:45:ed:ab:2b:c3:94:89:47:e3:d2:e6:71:65:52:bc:b7:
94:ef:76:39:ab:28:b5:6f:39:b3:e0:5c:35:b8:50:64:ca:2c:
28:1b:fb:d8:82:83:29:08:f0:63:f7:ff:58:c2:bd:68:1a:96:
fd:bd:dc:d0:5d:95:f3:00:d7:02:00:91:9c:b2:bc:74:da:9e:
63:09:49:2f:a7:97:46:b4:8f:17:9e:72:ed:79:36:74:88:3c:
cd:47:df:fc:59:7c:31:8f:3a:ea:c5:08:64:18:4c:dd:9c:e3:
32:91:2f:5a:a8:6d:6e:78:6e:46:9c:34:cb:59:54:95:18:bd:
ac:fa:a7:39:84:81:18:16:db:8a:8e:9a:a5:46:6e:c1:e5:b3:
2f:15:7d:3f:d2:b0:87:a9:63:eb:10:a6:d1:41:08:e4:87:30:
97:3b:e9:3f:51:ab:e6:e3:b9:49:55:f8:63:f4:87:7c:3e:ee:
4c:8f:6a:6d:f2:f2:e8:13:ef:d0:8c:44:51:9a:1d:94:fc:17:
5c:86:bf:02:c2:70:e8:00:01:04:f0:f3:9d:b8:f0:5f:b4:b9:
36:ad:52:15:df:64:2d:96:1f:2c:3c:25:60:92:af:81:64:13:
2b:93:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 18:04:47 2023 by rpki-client on console-fra.rpki-client.org