Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8ZAsMi2HNZk8Fcmt5w9LmDChYKM.roa
File: 8ZAsMi2HNZk8Fcmt5w9LmDChYKM.roa (raw, json)
Hash identifier: bT5qKF/6c5VXJvzs0nXRsygnhg9b50Pa5zc/KbNntvM=
Subject key identifier: F1:90:2C:32:2D:87:35:99:3C:15:C9:AD:E7:0F:4B:98:30:A1:60:A3
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB3BBECB7BBDA578CBA39034EA35D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8ZAsMi2HNZk8Fcmt5w9LmDChYKM.roa
Signing time: Tue 02 Jan 2024 08:29:25 +0000
ROA not before: Tue 02 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 83.147.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 09:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b3:bb:ec:b7:bb:da:57:8c:ba:39:03:4e:a3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1902c322d8735993c15c9ade70f4b9830a160a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:d6:7b:ed:9c:98:c3:a9:3f:ef:b2:3b:47:
7d:f8:23:83:52:8d:1b:cb:70:4a:b9:ba:a5:5c:3f:
4e:57:5c:81:a5:39:ce:f9:da:99:f9:7b:14:7a:8c:
42:b3:d7:55:7d:73:87:b7:f3:1f:be:ec:bd:ea:e7:
c3:3e:9c:c9:1b:2d:c6:f1:51:91:68:dc:b1:f6:07:
fc:0a:cf:ca:84:7d:de:c3:0e:dc:ea:82:90:7e:bd:
c3:60:13:04:c4:b8:45:9d:d5:af:c8:34:d6:f3:48:
cd:7c:6d:22:8a:22:6e:08:35:c6:9d:77:51:6e:48:
22:da:cd:d7:b4:bd:18:84:4d:79:79:c8:ea:4d:cc:
63:50:90:58:ab:23:91:ee:3a:73:3b:25:b3:24:29:
8f:a2:ee:21:75:4b:59:c9:6e:65:53:47:73:03:ae:
d1:c2:88:65:fe:bd:92:33:f6:db:18:50:dd:02:fd:
9f:ed:a5:17:f1:0a:1a:74:33:ea:3c:71:bd:c0:5e:
c2:34:89:20:80:8e:99:b1:8b:e4:21:28:9b:c4:4f:
f0:92:94:0f:39:22:9d:b6:28:77:e3:5c:ef:8f:97:
b9:18:ff:e1:7c:e6:96:08:66:91:e0:7e:58:13:38:
9a:e5:0d:1d:a1:f7:05:64:e5:60:ce:4c:54:86:7b:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:90:2C:32:2D:87:35:99:3C:15:C9:AD:E7:0F:4B:98:30:A1:60:A3
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8ZAsMi2HNZk8Fcmt5w9LmDChYKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.21.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ea:3f:e7:14:8a:e1:3b:86:1f:02:3e:e3:4f:3b:97:58:82:
8e:4e:54:82:81:ff:e5:86:ea:3b:0a:f9:4b:c0:b5:c2:58:2d:
b9:05:1c:60:c7:3c:12:82:ed:d5:3d:ae:06:7b:dd:e4:cd:b7:
27:cc:84:38:1d:eb:6c:54:85:5d:78:f8:00:d2:3f:6f:46:e1:
24:46:bd:bb:35:39:79:87:c9:cb:95:ab:a7:70:a8:97:38:07:
d9:bb:64:d6:fc:c6:dc:34:3d:80:62:ea:7a:e8:03:cd:31:08:
27:48:ee:5d:e8:23:44:02:3f:56:53:13:8e:57:a4:05:ca:60:
72:28:79:e4:00:97:b2:17:f2:cb:a1:cf:28:bf:e1:1f:37:28:
29:da:11:f1:65:ed:0f:57:64:14:0a:93:6a:8d:e0:6e:ab:01:
24:44:19:48:10:db:dc:18:f1:0d:53:3e:fc:17:b8:ba:66:a9:
f6:93:45:8b:d6:7a:81:4f:5d:7c:e9:85:33:b9:ac:76:99:1f:
7e:dc:ea:42:9d:1a:29:05:36:ed:d0:18:ad:39:d8:3f:ca:8a:
50:55:a1:3d:fc:d9:1d:4b:cc:18:aa:ef:6f:bd:ff:53:a6:13:
5a:4b:71:10:fd:0d:66:27:9a:0f:22:a8:0c:ce:1e:7b:73:d3:
17:f2:26:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org