Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2KpksMuVYE6N9bYhvXh-dlODYBA.roa
File: 2KpksMuVYE6N9bYhvXh-dlODYBA.roa (raw, json)
Hash identifier: j85n1v6HbBYOe/lmzUf8AId1WDArPTg4LWCEfGhIbGM=
Subject key identifier: D8:AA:64:B0:CB:95:60:4E:8D:F5:B6:21:BD:78:7E:76:53:83:60:10
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CA9962487E7A8F763A1C6D6B2201AA657
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2KpksMuVYE6N9bYhvXh-dlODYBA.roa
Signing time: Wed 27 Dec 2023 04:43:58 +0000
ROA not before: Wed 27 Dec 2023 04:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 83.147.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 31 Dec 2023 12:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:96:24:87:e7:a8:f7:63:a1:c6:d6:b2:20:1a:a6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 27 04:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8aa64b0cb95604e8df5b621bd787e7653836010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:19:4d:13:74:ec:fa:68:32:f6:b5:80:06:
f8:a3:bc:fa:c5:1f:6c:dc:78:fb:9d:3b:39:56:b7:
86:fd:fe:24:5f:a0:b7:05:21:89:19:1e:92:f2:11:
a8:95:76:f1:da:19:e7:50:92:75:6e:96:07:c8:03:
df:ec:9b:15:31:a3:56:ac:72:32:5f:c1:49:57:e7:
fb:1c:b0:48:a2:0e:70:0f:19:fb:04:4c:dd:e8:b3:
7e:ab:67:07:8a:1e:82:aa:df:96:7e:44:0f:54:7e:
ec:e5:32:7f:95:3b:f2:2f:40:e9:fc:53:2f:4c:c6:
99:fe:2f:b8:69:51:1b:88:0f:cd:5e:fc:73:41:14:
43:96:07:38:ae:68:89:d9:b9:e4:4e:86:41:b2:5b:
17:ea:01:d0:26:ce:bc:da:7c:71:c2:f4:cb:16:8d:
f9:22:30:bc:c1:a5:da:2b:66:bb:7f:10:0b:35:35:
a1:eb:3c:94:d0:ad:c8:16:9b:27:fe:ae:19:9a:4a:
24:c8:4d:53:ce:8e:9c:22:75:ac:fc:d7:2f:83:7e:
67:4e:05:cf:f8:d3:86:cd:29:4f:03:f0:60:02:51:
4a:54:5c:32:d8:4c:97:db:b8:43:0e:67:f8:9b:87:
0a:08:6f:65:ad:7b:48:5d:b8:ac:c6:f6:81:5c:3b:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AA:64:B0:CB:95:60:4E:8D:F5:B6:21:BD:78:7E:76:53:83:60:10
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2KpksMuVYE6N9bYhvXh-dlODYBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:d6:ae:88:b5:a2:72:f0:39:71:6c:0d:6b:92:16:0a:c8:77:
86:57:42:b3:36:6d:4f:90:20:fc:47:9b:7b:2a:06:63:44:f2:
e5:b4:b2:9e:35:7b:3e:4e:44:01:b3:f2:32:b0:af:31:00:65:
af:31:e7:81:e6:cd:19:7b:e6:f6:34:d4:e2:bf:50:3a:36:b5:
f2:9b:2d:97:b1:de:17:01:6f:e7:74:95:30:2c:57:99:62:0a:
41:21:4f:a2:92:3a:ca:90:ce:75:93:7f:d1:6e:cb:7e:c1:dc:
85:3a:7d:ba:2c:47:80:3c:fb:fc:aa:9e:be:52:94:ec:ef:6e:
3f:3d:9c:03:17:17:f9:40:96:08:42:78:6b:c2:f0:4c:9d:be:
ce:a3:3c:1f:5a:af:9c:8c:0d:02:91:e0:79:84:10:50:21:d9:
9d:02:ea:b5:6c:7e:ba:38:4f:a1:33:4f:a8:4b:b9:9d:09:12:
e2:97:97:0c:46:a6:89:28:eb:66:84:fd:11:d0:08:cc:8c:fc:
69:3e:b3:21:ef:19:6c:e2:5e:84:4d:5d:f3:76:ff:c3:b4:70:
fe:74:b4:e0:f6:70:41:ec:ad:0e:84:96:f2:33:85:48:8c:c2:
70:5e:ce:f7:53:44:cb:48:0e:d5:a3:c3:29:8d:01:2b:e6:f4:
56:dc:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org