Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4iGIiFvWLyIrNdQvK7sc1ZXHTxs.roa
File: 4iGIiFvWLyIrNdQvK7sc1ZXHTxs.roa (raw, json)
Hash identifier: o+a1He8PFIaAIetgQwBSVqjCI53Znr1XWj/pZgoBpUk=
Subject key identifier: E2:21:88:88:5B:D6:2F:22:2B:35:D4:2F:2B:BB:1C:D5:95:C7:4F:1B
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018C1FD1A3B75B531758FA15C0DA44C65123
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4iGIiFvWLyIrNdQvK7sc1ZXHTxs.roa
Signing time: Thu 30 Nov 2023 10:41:21 +0000
ROA not before: Thu 30 Nov 2023 10:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197789
IP address blocks: 83.147.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 17:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:d1:a3:b7:5b:53:17:58:fa:15:c0:da:44:c6:51:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 30 10:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e22188885bd62f222b35d42f2bbb1cd595c74f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:63:d9:e8:f6:88:ae:80:8c:39:e5:7d:a5:
a9:e0:ec:74:45:a9:11:9d:ef:0a:bd:29:b9:89:47:
23:1a:25:75:24:3a:74:ea:7a:0e:1d:a5:2a:c4:a5:
cf:ca:04:ed:b1:54:df:99:30:dc:a4:8d:01:39:c3:
e8:ea:f4:bf:0e:fb:24:f8:4c:5b:c0:14:8e:fc:3a:
c9:90:4f:96:df:a3:d3:f7:f9:63:7d:ba:fc:99:14:
e1:da:17:47:c5:b5:79:bf:de:0a:c6:7c:69:d2:fb:
63:a2:54:9f:2c:ce:6c:4f:0a:ac:7c:68:01:fa:ed:
96:6f:01:47:1c:83:5c:2e:ba:40:73:31:99:59:37:
45:e7:bf:71:0a:d0:b6:90:4e:ec:da:8d:c8:fb:8c:
31:d5:bc:f8:8f:1b:a7:a3:c2:d9:c1:b0:b2:66:e3:
f0:f7:88:01:6c:e1:f1:af:d4:39:1b:5d:ba:cf:2d:
ed:ee:26:1e:e8:30:5e:d8:c4:90:7a:2f:7a:fe:5c:
05:d3:f3:06:c4:ca:28:ca:10:09:70:13:c9:df:97:
4a:7d:b3:5b:e2:8d:60:80:42:07:08:4f:5d:f2:67:
bf:4c:46:9a:21:3d:7c:00:67:cd:30:26:b1:7b:1d:
1f:15:2d:af:dc:46:42:7c:aa:97:83:88:1d:c5:d9:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:21:88:88:5B:D6:2F:22:2B:35:D4:2F:2B:BB:1C:D5:95:C7:4F:1B
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4iGIiFvWLyIrNdQvK7sc1ZXHTxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:59:9d:0d:ef:7c:6b:6b:89:f4:ee:ea:ec:7e:bc:48:40:d9:
40:75:66:76:23:3d:c4:d2:55:aa:b8:4c:4f:af:c2:09:70:60:
af:ac:1b:73:ee:b2:21:9e:d8:4e:72:23:d2:78:2c:f4:7c:9b:
48:51:b3:1a:b9:ba:04:5d:8a:a8:18:21:d1:3a:ee:50:78:bf:
bd:93:79:4b:71:ac:bb:a0:24:9e:30:49:27:63:7e:50:f3:85:
15:0e:e0:d9:22:79:68:d2:e6:76:6b:eb:12:64:9b:18:96:75:
f3:46:2d:c3:dc:f7:78:f9:96:b1:1d:f3:b4:7f:45:92:c2:2b:
88:61:4c:31:f5:d9:91:91:27:59:be:fc:77:ae:e1:5d:37:04:
70:46:e8:82:18:15:53:46:ab:66:86:18:ed:29:1b:31:5e:a0:
7e:48:3d:06:4e:74:f9:8b:9a:63:a6:98:e5:96:69:1a:a2:b8:
1b:cc:c1:85:b8:7c:96:38:25:63:25:fb:03:ed:5c:e1:a5:aa:
42:fa:71:f4:6b:a8:57:3f:f5:dd:82:78:f1:c2:6c:30:43:7c:
35:79:0d:d4:80:44:e8:80:fc:5c:25:7d:25:10:59:ec:75:f2:
ea:02:87:8b:e0:30:b1:08:3f:a4:0f:0e:df:b8:12:48:2e:ba:
37:4f:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org