Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6aTFiNWZDnpLm-wAFyMB96gMxpQ.roa
File: 6aTFiNWZDnpLm-wAFyMB96gMxpQ.roa (raw, json)
Hash identifier: D/1afhv3NPXya52X+sfpVJJktPAfMthunyGRjqRQMBA=
Subject key identifier: E9:A4:C5:88:D5:99:0E:7A:4B:9B:EC:00:17:23:01:F7:A8:0C:C6:94
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018AB5F8D22CF50B9EB711F514E7A2D55943
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6aTFiNWZDnpLm-wAFyMB96gMxpQ.roa
Signing time: Thu 21 Sep 2023 04:21:37 +0000
ROA not before: Thu 21 Sep 2023 04:21:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 83.147.52.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 08:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b5:f8:d2:2c:f5:0b:9e:b7:11:f5:14:e7:a2:d5:59:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 21 04:21:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9a4c588d5990e7a4b9bec00172301f7a80cc694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:c7:01:a2:dd:a1:43:51:86:c0:f3:c1:44:
76:56:37:6f:8d:b6:a0:32:37:2c:09:1e:b0:b6:6b:
f0:b0:82:d8:f1:2a:f5:11:86:04:26:c7:16:18:76:
39:67:ee:2e:cd:72:44:ea:4a:fc:53:8c:27:bd:9b:
5c:6a:14:39:71:28:92:9f:b8:d2:9c:8d:39:72:2c:
7d:6a:bd:0a:dd:57:4d:56:5c:c3:43:b4:24:14:f2:
b9:e9:83:c6:13:02:3d:69:b0:18:77:8e:9a:96:a7:
36:d1:97:ba:8c:3e:a6:a7:d5:4c:1a:13:82:ce:06:
14:5e:aa:a1:9a:14:17:62:a5:3f:f0:a1:f8:22:fc:
fe:d3:b4:84:9b:38:a3:4a:8c:a9:bd:6c:e0:b1:f7:
82:df:60:bb:6c:97:0f:5c:b3:4f:30:85:ec:d9:3b:
e1:d5:93:63:a4:a0:64:a2:bc:95:39:fb:2a:cc:16:
94:d3:28:87:ec:18:9a:63:56:7b:86:d1:db:1a:df:
7b:b0:60:f5:a5:7f:ca:50:12:47:83:cf:6f:96:0a:
af:05:66:a4:08:71:3e:29:2e:8e:ee:be:60:2e:ad:
5c:90:e9:3b:bd:ca:27:67:36:bc:73:c8:67:a6:9e:
29:df:9f:96:ab:ab:ad:65:66:81:a2:a8:40:37:04:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A4:C5:88:D5:99:0E:7A:4B:9B:EC:00:17:23:01:F7:A8:0C:C6:94
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6aTFiNWZDnpLm-wAFyMB96gMxpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.52.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:62:f6:ea:cf:fd:bc:a5:b6:5d:3e:dc:fd:60:f5:51:29:43:
00:37:88:0f:4f:b7:c0:86:60:ef:fe:ae:ae:91:31:83:97:1a:
0a:c8:b4:43:e2:9a:40:29:83:80:14:fc:17:0d:26:00:07:7f:
52:13:a8:f8:bd:ae:be:47:40:fa:7d:ef:27:e1:59:d6:a7:73:
e4:ca:04:59:0f:d1:60:0c:08:39:b1:47:d9:50:e8:bc:be:c6:
0c:03:5b:cc:ce:4e:c2:9b:42:71:e3:28:d0:ee:bf:22:09:fc:
0e:9a:e9:a3:0e:b3:e2:16:a2:d8:d1:12:13:58:71:26:6d:cd:
a6:8f:3b:2f:5f:11:f8:82:8e:45:fc:4b:ae:62:40:14:86:69:
e4:86:8b:10:b3:b9:22:61:49:c5:fc:8c:d5:87:46:52:0e:4a:
f2:cc:54:e7:f6:55:32:9b:65:7f:9a:6f:39:50:ae:eb:bd:93:
dc:c7:75:c4:75:45:5e:75:9c:1f:2e:64:07:14:6e:90:fe:bf:
3b:09:78:b2:e2:4b:a1:1d:2b:47:5c:2a:5c:e7:9d:8d:32:c7:
bb:e8:50:95:c5:76:e8:bc:5c:13:1e:2a:00:42:cd:6d:9c:67:
0f:ba:67:3b:49:15:3e:b7:eb:15:f9:83:36:f2:4f:8e:17:d8:
67:f3:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org