Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9dPTA8XN9rjnXlL49UmzpXLyXtI.roa
File: 9dPTA8XN9rjnXlL49UmzpXLyXtI.roa (raw, json)
Hash identifier: T8tV2PqidZGjmO0C0Zq7Shap+TTLdMwraam7Ms5tfVU=
Subject key identifier: F5:D3:D3:03:C5:CD:F6:B8:E7:5E:52:F8:F5:49:B3:A5:72:F2:5E:D2
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0189640DC7A2FFD597EF55AA9E275875098D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9dPTA8XN9rjnXlL49UmzpXLyXtI.roa
Signing time: Mon 17 Jul 2023 13:32:51 +0000
ROA not before: Mon 17 Jul 2023 13:32:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 09:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:0d:c7:a2:ff:d5:97:ef:55:aa:9e:27:58:75:09:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 17 13:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5d3d303c5cdf6b8e75e52f8f549b3a572f25ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:e5:e0:c9:e3:1d:05:a4:e3:4f:7b:b2:9d:
3e:94:6a:02:c2:24:bf:53:c3:37:8c:1a:17:d6:19:
ed:d4:ed:2e:5a:a5:a7:4a:a0:7c:1b:0d:4a:44:c4:
2a:ce:31:97:b8:e7:1f:79:d1:c9:a8:9d:71:3b:22:
4b:09:2e:ba:7c:bf:f8:67:cb:17:52:48:1e:40:56:
12:09:c8:86:ec:02:74:2f:f2:86:08:3b:56:84:fc:
03:8c:aa:32:67:5c:3f:0d:14:d2:7c:02:30:ca:43:
00:24:a4:fb:21:25:76:54:04:33:6b:53:0e:fc:5c:
c4:4c:41:6e:c9:fe:05:cc:71:81:7d:61:21:ba:73:
92:9b:15:5a:28:3f:19:2f:78:2f:9e:7b:83:e0:a0:
eb:92:26:aa:04:42:b6:c9:8b:0b:1f:97:56:c3:a9:
57:9a:f1:43:56:9a:08:fc:02:9f:72:ab:e5:06:2a:
52:7d:e3:03:52:f4:90:48:ab:be:3b:02:a5:25:0d:
85:99:66:c6:f6:78:77:9c:40:03:3c:f2:55:08:bf:
d5:01:6e:61:39:9f:a5:63:65:6a:b5:eb:00:a8:b4:
6e:ce:98:0a:76:84:85:ef:73:58:fe:24:fe:cb:49:
65:67:c8:62:42:b7:2e:45:88:9a:95:13:bb:9a:36:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D3:D3:03:C5:CD:F6:B8:E7:5E:52:F8:F5:49:B3:A5:72:F2:5E:D2
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9dPTA8XN9rjnXlL49UmzpXLyXtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:60:b6:cc:37:7b:2e:05:41:14:27:b0:78:fb:a0:1d:d7:d4:
61:75:fd:ac:fa:3e:19:eb:76:6c:bb:18:62:84:62:1f:a8:66:
3f:84:fa:de:96:b3:91:bc:a4:ef:b6:a9:e5:35:19:35:c5:76:
14:1d:81:35:52:71:f7:79:52:bd:b8:11:c8:72:c9:59:35:c2:
b2:b6:99:03:bd:ab:22:4b:22:11:4a:b5:e5:5e:71:7b:e6:8f:
ef:3b:2d:04:97:3b:5e:59:66:52:c0:c9:1a:e9:28:03:27:f6:
59:49:1d:95:e6:10:6d:56:0c:7d:94:61:1f:fa:a5:99:14:ca:
b8:fe:b6:e6:08:ac:33:76:61:f2:ad:5a:a7:8e:4b:ed:7a:6d:
72:9b:c4:f8:f4:10:8b:01:36:27:1f:71:ed:e9:92:02:11:5b:
48:7c:0d:86:1b:29:e4:9c:91:08:0e:10:5e:db:86:e7:f3:13:
b6:78:c3:ae:8f:6d:b8:43:b1:23:49:d2:6a:4a:43:b9:40:ca:
b0:5e:43:8b:9e:ee:59:ff:f9:41:92:c6:4d:6b:27:91:bc:05:
38:0a:ae:a9:7c:37:4e:be:c9:9b:07:aa:42:51:0a:7e:6f:c6:
49:f0:41:f6:5c:42:aa:29:07:d8:65:c4:c5:b5:13:ba:d1:cc:
c0:c5:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org