Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5LDgM0sECrKw4GyoWgN4t76xLZo.roa
File: 5LDgM0sECrKw4GyoWgN4t76xLZo.roa (raw, json)
Hash identifier: QfV3WSBpsE6JML/JQx6G9so01q4WX4tBGUJiuJ69Zzw=
Subject key identifier: E4:B0:E0:33:4B:04:0A:B2:B0:E0:6C:A8:5A:03:78:B7:BE:B1:2D:9A
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01871132611EE4EE0D9D1B383C8DCADF40D3
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5LDgM0sECrKw4GyoWgN4t76xLZo.roa
Signing time: Fri 24 Mar 2023 01:18:46 +0000
ROA not before: Fri 24 Mar 2023 01:18:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 83.147.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Apr 2023 09:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:11:32:61:1e:e4:ee:0d:9d:1b:38:3c:8d:ca:df:40:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 24 01:18:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4b0e0334b040ab2b0e06ca85a0378b7beb12d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:23:a8:4a:59:de:8b:03:f6:b1:df:67:b1:29:
44:62:1b:83:61:e4:11:0c:2e:1b:83:46:e0:db:1d:
fd:4d:3d:b5:42:3c:e9:77:ea:99:ab:f8:68:0c:89:
0f:07:b3:4f:af:34:c6:5b:78:54:c5:51:97:7c:50:
6b:c4:08:93:3d:04:32:95:41:ba:e7:59:4d:cf:95:
ef:31:87:58:ff:60:85:fb:93:4f:ba:70:a8:8b:e3:
2e:f7:9f:28:7c:3f:1d:62:c9:14:42:93:a2:58:9b:
c7:fa:ac:e6:34:55:67:0d:d8:bd:a1:b6:2d:1e:be:
eb:05:e0:9a:51:d1:89:21:94:ce:12:bd:76:14:84:
28:5a:25:00:50:f5:a1:11:0a:a3:36:d4:08:55:23:
52:8d:25:32:3b:8b:7f:3c:62:86:64:91:30:ab:df:
0c:cb:5b:29:21:27:37:1b:a1:28:b3:b4:5f:6d:97:
95:e2:ed:a2:b3:c5:c5:44:05:07:1a:aa:08:f8:2e:
26:e3:66:c5:ba:8f:0b:b8:08:91:87:55:ee:bd:0e:
29:f4:50:2d:10:ec:04:59:79:ce:12:9c:4e:a4:53:
b2:16:b6:ba:50:43:ab:b5:3b:95:fc:b7:00:ec:9f:
58:8d:53:7b:1b:e8:58:3e:a0:79:b2:12:7d:fc:38:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B0:E0:33:4B:04:0A:B2:B0:E0:6C:A8:5A:03:78:B7:BE:B1:2D:9A
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5LDgM0sECrKw4GyoWgN4t76xLZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:57:ec:f2:75:3b:76:ed:1b:76:19:91:7f:83:7f:2f:8b:bb:
88:5c:b8:ca:7a:a6:82:f8:d6:3d:aa:23:c7:07:7d:93:3e:52:
62:d1:61:02:ef:cc:09:f7:11:ce:80:47:d0:8c:d2:c0:7e:f2:
87:3a:d9:02:12:91:51:c9:e3:65:3b:69:02:2b:8c:dc:d7:4c:
e0:d6:4f:4f:6b:98:cc:dd:ae:30:55:d5:85:46:1c:ba:29:36:
92:43:32:91:c0:da:f7:2a:f4:13:bb:ea:f0:86:bc:16:58:87:
b5:fc:b1:cb:c4:07:98:f9:06:d0:8c:be:64:3f:67:37:29:f0:
d6:14:ad:f8:73:10:1d:53:2a:7c:81:df:39:3d:c0:78:d7:75:
db:da:27:d3:8b:ce:88:44:f9:9f:01:69:35:54:ea:b5:09:32:
7d:7e:2c:67:7c:a3:bd:6c:d7:c3:5b:cc:e1:71:8b:56:f1:4c:
57:d0:ca:89:23:f5:45:1f:48:c2:9d:04:13:3f:1d:1b:7c:aa:
71:18:e0:cc:b4:c6:a2:e8:2a:3b:8f:74:73:f2:8c:36:c0:f9:
d2:b1:44:6b:33:af:4d:9a:ce:eb:84:0b:80:7f:e2:9e:36:3c:
c4:a2:b0:c4:17:3e:c0:03:3f:e1:ec:7b:90:c6:75:f4:a7:6c:
9c:49:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org