Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4hvbdfpoGsVoC1TKOQhKBmPkF9E.roa
File: 4hvbdfpoGsVoC1TKOQhKBmPkF9E.roa (raw, json)
Hash identifier: 1hG13+oyQeFlUp7bVqIi94DFeHAU0qZ4bcg8S9KuPPk=
Subject key identifier: E2:1B:DB:75:FA:68:1A:C5:68:0B:54:CA:39:08:4A:06:63:E4:17:D1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CCE6955417522A0A0E5D9834CBEF3BA3C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4hvbdfpoGsVoC1TKOQhKBmPkF9E.roa
Signing time: Wed 03 Jan 2024 08:20:58 +0000
ROA not before: Wed 03 Jan 2024 08:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 83.147.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 05:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:69:55:41:75:22:a0:a0:e5:d9:83:4c:be:f3:ba:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 3 08:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e21bdb75fa681ac5680b54ca39084a0663e417d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:32:c6:1a:7f:24:a8:80:89:38:61:f6:7c:
14:38:53:e4:a4:3d:ad:1b:a8:58:2f:0a:66:9b:47:
50:4e:9a:d7:92:de:64:45:4c:54:f3:03:97:93:2e:
33:79:5d:03:0b:a4:07:31:b5:9d:5b:6c:31:87:b7:
11:c6:3c:75:0e:75:95:e9:5b:28:ad:aa:38:54:5f:
1e:3f:e3:d5:e5:a5:ac:86:2f:f9:43:a5:0f:3e:ed:
d3:98:df:2e:d1:52:4b:ed:df:b9:67:66:2c:ba:cf:
c7:c6:bb:3d:cb:b0:ad:a2:96:16:33:02:e3:fc:eb:
1f:be:2c:89:18:41:24:b4:ce:f6:e5:31:30:87:d7:
5a:24:0e:bb:7a:49:bc:ad:8d:ea:57:72:c3:26:44:
da:16:fa:ce:6d:f6:f2:43:d7:d7:f0:57:a1:77:16:
78:5a:49:90:cc:4a:43:51:ae:13:c4:50:d8:6b:2f:
e3:72:80:e7:3c:11:ee:c1:34:6b:bc:77:0d:82:1c:
31:e9:ef:7c:31:14:ae:9b:cd:45:ed:31:17:b1:4e:
b4:c6:3c:1f:94:c9:3c:9b:79:dd:6f:6d:dd:89:48:
88:d3:c5:c1:69:21:41:f9:7f:e7:b2:c8:9b:70:ec:
ff:98:02:58:e5:41:f6:65:1d:7b:cc:d3:96:0c:5a:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:DB:75:FA:68:1A:C5:68:0B:54:CA:39:08:4A:06:63:E4:17:D1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4hvbdfpoGsVoC1TKOQhKBmPkF9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.29.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:21:ae:fe:2b:39:aa:ae:8b:00:e8:29:b6:a9:e1:c5:65:e2:
b4:44:3e:e1:6e:9b:1f:45:9c:55:07:02:db:f7:ca:c0:19:bc:
be:75:3f:50:e6:c6:f3:80:8d:33:ea:45:c1:d4:90:51:de:58:
d9:09:8d:21:ce:8c:b7:e7:c9:5a:b6:58:ec:a0:6f:75:7e:a5:
9c:d3:49:b4:ca:98:e5:89:a6:45:39:14:36:35:8f:e5:f6:07:
3f:91:2d:d6:96:f6:3b:8f:80:44:a0:71:d7:18:73:b4:fa:ad:
a1:7a:47:ef:21:cb:8e:a6:72:8c:41:ed:c8:59:82:32:01:0c:
f4:c6:cb:ee:59:ef:66:f9:11:0d:84:fb:06:15:f1:58:ec:2f:
5f:a6:8d:88:9b:5c:a8:af:f7:b7:21:2e:64:9b:b5:8f:73:13:
0d:80:55:fd:1a:46:c1:83:29:98:3d:05:d8:32:b9:8d:06:e6:
60:33:3b:63:00:42:89:9c:94:14:b9:ff:f0:fa:cf:8e:f8:3c:
ef:08:32:2d:1b:3f:dd:37:c6:aa:48:53:01:bf:5b:50:9b:d7:
3c:25:6a:1c:ff:6f:1e:ef:b4:ec:4b:f1:99:39:27:6d:70:e0:
c4:1d:57:37:27:17:7f:4e:9f:77:c0:d8:e6:c4:2e:70:03:32:
e8:99:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org