Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7fxhitf37Z5bkovcB7E3HzecMOA.roa
File: 7fxhitf37Z5bkovcB7E3HzecMOA.roa (raw, json)
Hash identifier: 1bGUUR5yyMRxMRf5tqZSkszapoukT49nY2To47CWsHQ=
Subject key identifier: ED:FC:61:8A:D7:F7:ED:9E:5B:92:8B:DC:07:B1:37:1F:37:9C:30:E0
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018865ABED159641E354295612E9919BFE60
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7fxhitf37Z5bkovcB7E3HzecMOA.roa
Signing time: Mon 29 May 2023 04:02:26 +0000
ROA not before: Mon 29 May 2023 04:02:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:65:ab:ed:15:96:41:e3:54:29:56:12:e9:91:9b:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 29 04:02:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edfc618ad7f7ed9e5b928bdc07b1371f379c30e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fa:23:12:93:ab:61:15:1c:1a:ea:24:78:12:
0e:7f:a1:21:5e:a6:9f:21:f6:92:b5:d6:17:8a:ba:
fc:a6:e8:54:e0:e8:35:3f:f8:37:ea:3f:7c:36:52:
6f:be:a1:3a:13:14:ed:e9:14:a0:ab:0a:12:15:3e:
ec:e9:bc:f9:9a:69:da:0f:48:a5:9a:f6:a4:e8:2f:
a2:2a:4b:f9:04:58:d3:08:55:12:42:da:f4:6c:ef:
0d:0f:fc:3f:75:c5:61:54:ea:1d:d5:fe:1c:3b:6e:
86:0d:5f:25:46:28:33:e5:c3:ff:c0:43:47:93:b9:
6e:e2:66:18:87:a0:dd:a8:02:36:f4:31:e6:08:e0:
b3:3d:e7:18:67:cf:60:24:85:21:32:6c:cc:bc:ec:
7c:2b:75:87:a8:03:f8:3f:08:05:64:8f:73:91:d3:
e3:c2:c4:bd:f5:74:2c:96:56:fd:08:78:31:db:04:
23:22:7e:f2:ed:73:2f:84:28:96:69:4f:98:16:c5:
5f:99:9b:bd:d6:53:2d:40:3c:00:7e:f9:85:ef:20:
84:c3:65:49:f9:94:e6:c6:c2:46:05:34:f9:d4:d7:
55:fc:81:3a:04:9c:02:e3:70:31:56:e0:68:59:d7:
76:8c:fd:93:f8:1c:85:6c:62:73:e9:e7:07:9c:ca:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FC:61:8A:D7:F7:ED:9E:5B:92:8B:DC:07:B1:37:1F:37:9C:30:E0
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7fxhitf37Z5bkovcB7E3HzecMOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
68:2f:81:ef:87:ff:56:29:ce:0f:9c:04:c0:b6:43:10:59:26:
eb:21:be:f7:cc:f9:a9:f9:27:c5:8a:d5:c1:0c:54:e1:7f:e8:
c3:bb:a3:3e:1e:44:ff:d7:14:53:1c:b7:22:f2:44:4e:83:f4:
73:a5:47:8a:c1:c9:2f:6e:38:b5:00:23:1f:fd:34:6f:58:46:
f5:13:0a:79:13:f6:a7:f3:7a:8f:2f:2c:a6:c7:69:36:eb:79:
c0:8e:1d:45:49:e8:63:f0:6f:62:dc:c6:21:9e:6e:e7:a3:cd:
43:3e:a6:b0:66:1b:98:5e:70:32:3b:50:41:2b:9e:c5:ba:bf:
4a:81:25:3b:9b:6c:f4:7d:b9:a6:be:fc:3b:84:9b:5b:12:b4:
0e:9e:03:55:77:54:85:00:8d:ed:95:51:70:73:4b:4c:60:31:
64:c1:ae:6b:f0:91:ae:f6:c1:76:90:d8:1b:ec:4c:3b:0a:64:
99:cf:d7:4d:be:6f:4b:51:7b:30:e6:08:95:68:0e:25:a4:0a:
01:7b:94:ae:c2:9f:89:10:d4:94:68:9f:34:33:18:2c:28:81:
28:75:41:3f:04:4e:c0:d3:02:c6:97:5a:6e:87:9e:5d:3e:2c:
f4:43:6f:de:78:73:7f:70:d4:21:31:e2:97:d4:da:f5:1b:59:
de:99:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:32 2023 by rpki-client on console-ams.rpki-client.org