Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5eanPRlcBZe4UeBbg9-8epoNJe8.roa
File: 5eanPRlcBZe4UeBbg9-8epoNJe8.roa (raw, json)
Hash identifier: 737gATWiM17PNQYOo5kaPb2U7Um45/SRJW8t0l33m2c=
Subject key identifier: E5:E6:A7:3D:19:5C:05:97:B8:51:E0:5B:83:DF:BC:7A:9A:0D:25:EF
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0187EA03D39313A59E3C698DBBD52EA5B8F3
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5eanPRlcBZe4UeBbg9-8epoNJe8.roa
Signing time: Fri 05 May 2023 03:45:31 +0000
ROA not before: Fri 05 May 2023 03:45:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.61.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 04:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:03:d3:93:13:a5:9e:3c:69:8d:bb:d5:2e:a5:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 5 03:45:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5e6a73d195c0597b851e05b83dfbc7a9a0d25ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:df:94:ff:40:62:6e:eb:20:76:44:b2:ff:
53:12:1d:70:94:4f:0a:31:8d:62:d6:c9:2a:a5:ce:
1b:b7:6b:02:65:85:f6:aa:45:31:05:33:1d:4a:b3:
65:b4:a2:76:56:92:64:9e:ca:ff:de:73:f8:44:c7:
d0:fa:60:7a:64:16:dd:66:9e:89:7a:d5:4d:94:0f:
48:6e:57:13:dd:58:e2:f5:39:0b:84:f3:91:7d:3d:
30:3f:87:63:be:5d:87:fc:88:5a:a4:e4:0d:e7:78:
37:10:74:8a:d8:46:18:81:3c:3d:39:2d:9e:86:19:
f9:30:d2:75:3b:e7:7a:78:ab:1a:98:94:7d:71:11:
66:11:5c:64:27:54:10:38:b5:3a:e0:1c:34:d5:95:
b9:37:eb:0e:78:1b:71:31:33:78:e1:72:4c:34:8a:
4b:08:30:b8:68:c3:a5:dc:8b:3b:85:34:90:90:4b:
78:31:22:d6:62:0c:d0:c4:3a:ca:3a:ad:87:58:6d:
29:24:b3:34:bb:75:97:30:57:ba:af:95:3d:a7:6c:
de:9d:78:73:26:f7:11:0c:4e:aa:3d:bf:64:f2:2d:
0f:8c:e1:e9:d7:e7:0e:07:14:10:e3:b5:52:30:01:
1c:3d:00:6c:32:b3:50:81:58:d8:e2:95:87:e1:48:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E6:A7:3D:19:5C:05:97:B8:51:E0:5B:83:DF:BC:7A:9A:0D:25:EF
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5eanPRlcBZe4UeBbg9-8epoNJe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.27.0/24
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
77:79:9e:1d:a6:32:31:97:2a:de:98:ae:c2:15:5d:f9:c7:a7:
36:f7:66:f5:72:34:c5:e4:59:07:f5:93:ff:bc:6a:24:ef:f0:
2c:7a:f7:ae:e5:d0:db:66:37:54:20:65:66:2d:c3:9f:f9:e6:
f9:ea:3e:02:94:47:66:fa:ca:e3:87:1c:fa:bb:90:3b:9e:cb:
4d:e3:71:d5:d7:40:cd:cf:88:2a:31:da:01:b6:a5:55:e7:07:
ec:f5:9b:5d:cb:03:aa:f6:07:73:6a:f7:f4:32:1b:b9:73:bc:
dc:e7:44:d4:dd:a0:86:a8:f3:d2:87:81:0d:ba:ee:63:54:88:
1e:23:f7:8c:44:e1:57:28:36:b1:ef:c8:1e:99:e8:7e:5c:c8:
9a:ed:e1:e3:d8:d2:d0:8c:ff:1b:ac:15:57:2c:fc:d9:be:8e:
08:fe:ca:64:d6:ed:31:40:a7:68:c3:51:9f:cb:46:7a:a7:1f:
ca:92:bf:dd:a6:16:32:68:e5:b9:6b:41:36:21:e7:1d:29:19:
da:15:34:6e:04:13:70:e0:b7:e9:8b:82:55:27:59:32:aa:9c:
74:dc:49:39:3f:1f:01:33:08:84:0e:fc:17:ce:f4:c4:cf:1e:
e6:69:13:34:f2:a4:8c:90:be:7f:79:e6:c1:a6:d7:5f:be:9a:
5d:c2:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org