Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/10DoBZX1DNLrYArMIyfx-BwbaM4.roa
File: 10DoBZX1DNLrYArMIyfx-BwbaM4.roa (raw, json)
Hash identifier: N8cnj2bi466gVtH40iTclcgkizsiVOyYL9kfRhd3bZE=
Subject key identifier: D7:40:E8:05:95:F5:0C:D2:EB:60:0A:CC:23:27:F1:F8:1C:1B:68:CE
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0187EA03D4750A6A2BD1E923026916528453
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/10DoBZX1DNLrYArMIyfx-BwbaM4.roa
Signing time: Fri 05 May 2023 03:45:32 +0000
ROA not before: Fri 05 May 2023 03:45:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 83.147.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 09:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:03:d4:75:0a:6a:2b:d1:e9:23:02:69:16:52:84:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 5 03:45:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d740e80595f50cd2eb600acc2327f1f81c1b68ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e2:6d:2b:93:9f:0f:ee:6b:6d:18:e2:ca:d1:
39:82:94:5a:b4:73:d6:87:e6:06:13:56:d2:3c:25:
4e:a4:ac:9c:20:e5:d8:55:81:49:bb:95:a9:6a:7e:
1d:2a:c1:cc:7c:b8:87:1d:de:4d:46:d4:9d:21:33:
83:a4:e9:7e:a4:45:37:03:6e:37:42:66:cc:3a:cf:
e8:bd:d3:4d:6a:78:db:7b:e9:d5:61:54:68:95:e2:
f9:01:84:b5:3e:ce:f5:2b:89:a6:4d:f2:cc:ef:d8:
2a:01:51:57:28:e9:5b:ee:2e:37:42:8a:3f:be:10:
70:0c:46:45:4b:79:9b:3b:5e:0f:a1:3d:76:44:c9:
8c:d2:46:44:12:19:6e:90:3b:77:e5:1c:78:18:3e:
b1:8f:23:17:14:6a:00:78:f6:d3:14:4d:8a:e6:82:
0b:df:7b:26:2b:9d:5f:b1:ad:26:fe:ec:a2:81:b8:
73:4a:9f:af:51:59:4c:39:75:5e:e5:79:3a:64:49:
51:50:08:d8:78:e4:c4:3e:52:ce:6b:58:99:ae:0f:
6f:01:fa:22:07:af:80:cf:09:65:c7:8f:6b:02:e2:
ec:89:c7:09:f6:a9:39:df:24:df:62:54:c6:82:52:
c1:50:33:fc:6d:c3:32:39:70:27:6e:e4:a3:43:81:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:40:E8:05:95:F5:0C:D2:EB:60:0A:CC:23:27:F1:F8:1C:1B:68:CE
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/10DoBZX1DNLrYArMIyfx-BwbaM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:14:d4:12:26:a3:e3:01:63:9a:c4:d9:bd:80:a5:56:8d:1c:
0b:f7:1f:08:ff:0b:f7:2e:b6:f5:58:a5:15:09:d6:94:69:52:
22:9c:61:51:fa:a2:45:e9:78:34:aa:1d:01:b9:69:a3:c8:18:
4c:d3:7e:ff:ee:c3:f8:7a:e0:f6:78:e1:ff:2a:b4:34:b0:ec:
70:69:a3:2c:72:61:cc:29:e9:b2:60:55:34:7d:1c:2b:9d:a5:
0a:10:41:04:b3:bf:6f:d6:88:c2:2d:d0:60:00:05:59:d2:d7:
77:a2:0a:fe:b4:6d:53:7c:55:b2:1c:28:98:f5:eb:88:e9:ab:
a3:c5:1f:de:2f:49:49:f6:76:ba:c9:3b:4e:1a:2d:05:20:a2:
82:8f:77:b9:a6:37:94:13:a5:54:ae:62:30:ec:a6:30:0b:73:
a7:ae:f9:19:15:6f:cb:0f:d1:1e:3e:48:29:f7:3d:e9:c8:e9:
48:dd:47:3e:25:63:f7:fc:73:6f:b8:ce:01:48:57:03:d5:e4:
af:4e:13:e6:f4:e6:c6:02:b3:93:ef:85:d6:58:ff:ad:13:da:
e8:49:e3:49:20:66:2d:2c:73:fc:38:eb:2a:8e:2e:76:95:fa:
b4:89:a0:95:6c:7e:0c:89:aa:28:54:00:b6:bc:4d:f8:2d:c4:
83:a9:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org