Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/3V1pOPeGcQ4lj9KxvWDObzVQyIc.roa
File: 3V1pOPeGcQ4lj9KxvWDObzVQyIc.roa (raw, json)
Hash identifier: IvFQWnCHis6U2GE+H8o4TDjs+ux7Nse+WOy2fcTqwfE=
Subject key identifier: DD:5D:69:38:F7:86:71:0E:25:8F:D2:B1:BD:60:CE:6F:35:50:C8:87
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB2E8F700659950B64E96C65526E1
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/3V1pOPeGcQ4lj9KxvWDObzVQyIc.roa
Signing time: Tue 02 Jan 2024 08:29:25 +0000
ROA not before: Tue 02 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 83.147.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 05:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b2:e8:f7:00:65:99:50:b6:4e:96:c6:55:26:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd5d6938f786710e258fd2b1bd60ce6f3550c887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:2e:c1:f7:01:f4:be:3c:96:81:80:c2:ca:
3e:b4:26:5c:ab:e4:48:c9:64:c4:ca:e7:05:9a:11:
11:75:8a:e6:03:6f:26:be:c9:e0:4a:c3:b5:c3:21:
1c:6d:3c:18:cf:1d:b0:5a:5a:bb:18:f8:ba:94:37:
58:4b:80:4a:e0:b8:ef:08:28:49:83:54:0d:8c:69:
29:45:57:f2:2e:50:4d:b9:ef:03:4d:2b:be:20:1b:
1b:85:7c:71:8e:12:d4:ec:56:5e:e5:91:8c:01:20:
41:3a:81:67:d1:7f:c3:3b:b8:47:fc:8d:b4:54:69:
33:77:e2:0d:1a:3c:95:14:7c:2a:f4:7e:ce:38:fa:
53:14:65:d5:e2:d5:7a:35:72:7d:35:12:0d:4f:f4:
3c:6e:35:e3:9e:40:6c:99:97:08:6c:f7:d4:55:cc:
0c:26:47:32:ee:ca:79:56:63:6a:6c:b6:8e:75:79:
7e:d3:40:f2:d7:92:29:93:e7:24:56:66:dd:c7:b3:
89:28:77:f5:e7:73:bd:78:f6:c4:ad:2f:db:0b:60:
46:17:be:bf:77:b2:4d:2d:93:19:38:d6:6b:a0:f6:
b1:89:61:62:87:37:0f:50:5c:a4:82:8d:2d:fb:da:
f9:58:35:38:9a:a2:a2:c1:a1:6b:66:a2:1d:88:5d:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:69:38:F7:86:71:0E:25:8F:D2:B1:BD:60:CE:6F:35:50:C8:87
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/3V1pOPeGcQ4lj9KxvWDObzVQyIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.36.0/22
Signature Algorithm: sha256WithRSAEncryption
01:d2:86:93:71:39:ba:de:cd:09:5a:20:92:e5:a2:90:40:1a:
00:33:7d:fa:da:0c:44:1b:82:fe:a4:31:ba:17:b2:a2:3b:97:
5e:16:06:a7:c0:d4:21:20:f9:7f:92:5b:e8:03:30:4e:96:9c:
85:01:87:7a:f7:a3:39:b8:c8:f2:d0:37:98:fa:5f:f8:16:94:
6f:ad:db:a7:1f:b3:60:74:c6:26:3a:d4:57:c1:23:55:69:c6:
9a:f5:0e:07:bc:6a:fe:71:eb:36:e2:56:84:f1:9f:2e:5a:3b:
9f:14:02:03:f7:2c:55:18:7e:d7:7b:01:37:7c:8a:7f:0e:bd:
bd:08:30:db:2b:5e:4c:b7:d3:16:14:49:57:e8:10:0b:da:70:
63:8e:e7:bb:bc:8c:55:db:48:30:67:85:47:db:38:c7:99:e0:
ef:d5:ff:1b:b8:30:7c:01:bf:2b:d5:88:90:cc:e3:04:e5:79:
bc:3d:6a:15:fb:d1:e0:f7:0f:50:8e:bf:cb:5e:24:7a:8f:97:
b9:2c:7c:e7:b7:ea:a9:10:04:7a:62:29:6e:5c:22:d7:60:26:
70:5d:45:5d:1f:d6:4d:85:db:00:76:62:c8:b1:32:e6:16:23:
84:a0:98:f0:54:09:65:eb:56:a4:db:70:0a:94:ef:6f:73:8d:
96:f0:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 06:18:31 2024 by rpki-client on console-fra.rpki-client.org