Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/0KKnzUlWkffeHWWyrGuyVf_dmAI.roa
File: 0KKnzUlWkffeHWWyrGuyVf_dmAI.roa (raw, json)
Hash identifier: hFWtsMHNU7qIqJR/6GvQZLOEw6mu6yfkXRoPTQxUW/8=
Subject key identifier: D0:A2:A7:CD:49:56:91:F7:DE:1D:65:B2:AC:6B:B2:55:FF:DD:98:02
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0188774330E5B49549A5FF13F0AB51764BBF
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/0KKnzUlWkffeHWWyrGuyVf_dmAI.roa
Signing time: Thu 01 Jun 2023 14:01:12 +0000
ROA not before: Thu 01 Jun 2023 14:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 83.147.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:43:30:e5:b4:95:49:a5:ff:13:f0:ab:51:76:4b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jun 1 14:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0a2a7cd495691f7de1d65b2ac6bb255ffdd9802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:06:94:00:e7:c0:dd:92:71:bd:d6:14:c9:
d1:e5:2a:5e:bc:db:06:39:c2:5b:12:b2:c3:94:d2:
20:ce:1b:8b:6a:19:aa:0f:08:cb:e1:61:8a:d0:0f:
c1:37:88:e6:97:8e:f1:14:38:e7:19:4d:3c:2b:ee:
c4:ae:29:f5:24:8a:31:b8:b6:75:00:31:21:da:69:
9a:f3:5e:f6:2d:d6:d7:f8:aa:ca:14:80:3c:b7:37:
9a:ff:d1:b9:c6:13:0f:43:bd:ba:a7:4b:95:ac:4d:
e6:fe:aa:0e:dc:ad:c9:43:8f:26:73:30:ab:5a:76:
dd:16:00:7a:e5:c6:e9:b7:6b:53:bc:32:e2:5f:f3:
cd:dd:ca:00:4d:54:ab:68:c8:fc:35:80:fb:dc:c4:
86:fc:23:d5:af:fb:79:89:cb:fa:ad:d8:a4:72:33:
ab:32:f8:4e:08:ba:92:5c:b6:03:9b:6b:eb:bf:27:
cf:61:bc:e3:67:a7:84:8b:62:9f:55:e2:fa:eb:6b:
2d:10:2b:0d:14:19:c6:21:64:b1:38:fb:45:9b:ca:
a4:b4:64:b2:ea:96:8d:75:72:66:8b:93:89:20:d4:
3c:18:a9:83:0e:0d:d8:16:71:96:77:bb:1c:16:11:
1b:a7:2d:5c:61:e4:42:6b:c8:3b:db:33:3b:3e:60:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:A7:CD:49:56:91:F7:DE:1D:65:B2:AC:6B:B2:55:FF:DD:98:02
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/0KKnzUlWkffeHWWyrGuyVf_dmAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f2:92:cc:61:f9:e3:5b:b1:13:9d:95:65:3b:9c:ad:1e:61:
27:9a:56:7f:b4:3e:8d:22:73:92:e7:a5:07:fa:b6:90:68:2c:
39:fb:ac:e8:1b:a2:1d:77:21:71:55:20:12:00:f3:93:60:0d:
99:0f:51:c1:c8:99:2c:0e:b4:75:4b:89:c3:2e:c4:50:0e:69:
5d:61:91:bc:15:a7:02:6e:fc:ab:a9:9d:22:4c:2e:81:46:e3:
7b:a3:a9:12:35:4f:bf:54:7d:1d:21:06:71:eb:0f:0c:de:b1:
a7:bf:1c:45:9b:4d:b6:56:3e:57:2f:d3:77:28:98:5e:aa:28:
12:28:80:21:07:66:90:2d:16:ad:43:a0:3f:11:4f:f0:dc:83:
fe:f4:63:7f:52:ee:66:8e:6d:a5:7a:8a:e4:6b:48:f3:65:b2:
37:56:e2:9f:a8:20:c5:34:ec:2d:c6:38:cb:2d:b3:94:eb:af:
86:bd:2f:0c:24:fa:48:a1:f7:33:07:fe:0e:e9:5e:86:cc:21:
b3:89:3f:10:68:61:92:90:d6:58:43:0f:4d:ba:f7:73:1b:8f:
1f:44:a5:fb:67:87:d3:26:19:0e:c2:50:5f:ae:55:15:5a:e0:
5a:66:c9:99:b6:25:2d:e3:1d:1a:ec:02:83:93:3c:a6:73:a2:
9b:06:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org