Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Gf9etb2nAe0T0Jeup-oEHK8cG38.roa
File: Gf9etb2nAe0T0Jeup-oEHK8cG38.roa (raw, json)
Hash identifier: 3dmXP0vo+6kMnZ3d2foNC+IA5Qgb+n54EJPZHO1EyeI=
Subject key identifier: 19:FF:5E:B5:BD:A7:01:ED:13:D0:97:AE:A7:EA:04:1C:AF:1C:1B:7F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018C01F98FC6DC5397F122CA838C82AD4EC6
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Gf9etb2nAe0T0Jeup-oEHK8cG38.roa
Signing time: Fri 24 Nov 2023 15:36:21 +0000
ROA not before: Fri 24 Nov 2023 15:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44658
IP address blocks: 83.147.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:f9:8f:c6:dc:53:97:f1:22:ca:83:8c:82:ad:4e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 24 15:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ff5eb5bda701ed13d097aea7ea041caf1c1b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:84:96:c4:47:ca:50:db:de:e8:94:30:85:
26:64:eb:84:cf:bf:45:ab:01:73:b7:88:91:d2:49:
b6:23:40:65:a7:72:0f:41:4a:30:e2:50:ea:e6:41:
41:a0:33:d2:bc:91:82:72:c8:3d:af:cc:37:0a:9f:
a5:fd:ea:e0:63:d4:b1:56:d7:5b:dc:07:08:c7:ef:
c3:41:8f:23:87:47:49:3d:db:4e:7e:34:71:6f:e7:
53:9b:da:c7:a2:ff:28:70:c4:62:e7:ba:77:fa:64:
58:d9:37:fe:76:b3:18:87:8c:c6:df:f0:2f:17:30:
59:03:be:ce:3c:9e:7c:15:23:06:50:02:26:74:2f:
c9:32:77:2a:bd:f2:4f:80:f5:87:56:9a:ec:e9:f7:
fe:c3:72:de:d0:8d:2b:d3:de:f4:7d:e7:bf:19:95:
13:f2:58:c6:15:cc:13:e3:86:d8:fb:e6:91:68:57:
d8:b9:20:7f:bd:05:7c:df:4d:db:ce:22:de:d1:f1:
64:47:98:6d:ae:e6:eb:06:d7:75:02:e7:c4:d5:59:
22:7c:1c:04:08:f0:ef:bd:c8:5f:6b:ce:5b:88:70:
28:01:e3:18:eb:db:49:77:2e:11:61:a9:c7:55:79:
ab:57:19:f9:74:cd:42:bd:d3:55:4b:8f:f0:4e:da:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:5E:B5:BD:A7:01:ED:13:D0:97:AE:A7:EA:04:1C:AF:1C:1B:7F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Gf9etb2nAe0T0Jeup-oEHK8cG38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5d:97:c0:d3:b2:cf:cd:d6:d3:f3:59:56:a1:8d:d3:01:26:
99:77:6a:fc:93:20:87:3b:d0:c0:e3:ea:5c:cb:db:82:a8:10:
0d:b0:b4:b6:b9:9d:19:f3:d7:87:fc:d0:09:20:18:80:86:1e:
6c:b0:11:f9:fb:be:5f:92:33:ed:a0:ef:d6:97:1a:af:28:98:
61:9b:8b:52:d0:50:09:5d:1a:05:66:03:ee:ac:a3:f7:1a:3a:
a4:48:b4:c0:b7:b5:f7:16:e2:d0:2e:b0:4d:24:3a:22:4f:50:
22:ad:fe:ad:d5:5e:b3:68:19:da:ce:3c:ce:aa:81:64:b1:2d:
85:eb:f8:d2:5c:5d:38:a4:0b:7c:62:c1:e0:12:5c:ca:0a:3b:
03:4b:88:4a:ce:c2:50:b5:6f:82:07:ef:3d:14:7f:17:4b:28:
4a:36:73:97:81:05:00:e2:b2:3a:9a:b6:9e:dc:db:be:7a:75:
54:c4:43:9c:75:d9:7a:76:db:21:3e:08:34:87:e2:b2:1b:a6:
ac:ba:53:c5:c5:7f:ad:27:c3:16:51:5c:cf:1e:e4:c2:7d:d2:
b5:5f:94:ba:35:27:fb:40:b6:df:d1:48:cb:a0:70:31:8b:c3:
43:2e:78:10:56:7d:4b:ae:49:25:a9:52:d4:41:24:6a:ee:6c:
e4:58:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org