Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9y_7yoa3pRdT9s9VXzk_bajXFDU.roa
File: 9y_7yoa3pRdT9s9VXzk_bajXFDU.roa (raw, json)
Hash identifier: nuuT+zfYnNu8yQ3+eZvzWkw8sijyMpnff6h+czAS8Q4=
Subject key identifier: F7:2F:FB:CA:86:B7:A5:17:53:F6:CF:55:5F:39:3F:6D:A8:D7:14:35
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018B1F6F1712EB4C5BBD5FCEFE96147270EF
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9y_7yoa3pRdT9s9VXzk_bajXFDU.roa
Signing time: Wed 11 Oct 2023 15:50:55 +0000
ROA not before: Wed 11 Oct 2023 15:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39600
IP address blocks: 83.147.8.0/22 maxlen: 24
83.147.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 05:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:6f:17:12:eb:4c:5b:bd:5f:ce:fe:96:14:72:70:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 11 15:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f72ffbca86b7a51753f6cf555f393f6da8d71435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:87:2b:8e:a4:4c:27:1d:19:47:58:4e:c9:
a0:79:c0:c4:4d:39:f9:75:fd:dd:3a:1f:32:13:c6:
1d:e5:7c:a8:b5:b4:11:1c:b8:16:36:96:f4:3f:3b:
da:79:f7:48:69:b2:20:f7:43:2d:11:ac:8a:62:48:
c9:15:2a:ab:a4:cb:f1:e4:74:6c:fa:ff:81:db:f2:
0e:fe:08:d3:da:8b:04:1c:7b:91:62:0a:3d:65:40:
ed:67:24:c6:81:2d:82:33:fa:06:23:a4:00:61:d3:
28:74:82:78:3c:38:a7:32:73:61:4f:77:01:1f:30:
4f:6f:e5:53:fb:a2:79:af:f0:2f:de:f5:b1:5b:f1:
81:15:38:c6:51:52:9d:f2:a5:4e:7f:8c:13:21:a4:
06:e6:53:6a:f2:9f:fc:80:d0:20:6f:c9:80:a5:a7:
7e:5b:9b:1d:7e:e6:1f:ca:c9:3e:1a:78:41:77:66:
31:dd:fe:82:5a:e6:77:e7:6b:49:2e:11:57:a4:69:
53:88:a0:32:99:a3:cd:ff:84:4c:50:9e:49:8d:72:
4c:d0:e9:34:83:9e:a1:f4:a7:10:15:d9:4b:72:29:
4a:45:3b:64:35:92:d9:47:4f:c4:93:e1:00:0b:c0:
b3:22:c7:70:65:61:eb:45:95:44:aa:95:23:d1:fc:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2F:FB:CA:86:B7:A5:17:53:F6:CF:55:5F:39:3F:6D:A8:D7:14:35
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9y_7yoa3pRdT9s9VXzk_bajXFDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.8.0/21
Signature Algorithm: sha256WithRSAEncryption
63:05:db:7d:fa:11:0d:ab:67:92:89:b4:b3:ae:fe:ce:65:3f:
14:ab:79:5d:81:99:3e:e8:a8:ad:d8:4d:6a:03:b1:53:3d:54:
e2:12:68:e8:19:a0:3a:ae:b8:db:b9:c7:54:3a:34:c5:01:24:
d7:36:9e:aa:49:e4:b1:22:46:4c:af:d6:24:53:43:7b:f5:73:
28:fd:dd:ae:20:dc:77:55:d8:f9:2a:c8:5e:fd:a3:90:d3:aa:
79:26:94:e2:1e:48:b0:65:f6:17:e3:e5:9e:38:00:9e:75:e8:
b7:99:72:a8:fb:4f:25:b0:d1:fb:3b:c1:5e:8c:bc:de:65:89:
b3:2b:7c:b2:e6:a2:d7:ab:78:f0:56:63:c7:4f:dc:21:16:96:
c9:88:9f:47:c6:c1:b4:00:73:af:da:6f:68:b9:08:06:1f:70:
53:8e:f8:bd:64:f5:f9:68:2c:ac:e3:1b:9f:39:76:f9:79:a5:
14:15:13:df:04:1c:12:35:03:a8:f7:ee:82:22:96:0b:af:0c:
58:69:75:19:72:9c:72:0f:97:00:d2:c2:34:63:95:1b:4e:27:
15:42:87:54:d7:df:98:72:8f:f0:7a:f0:33:4a:88:24:1a:8e:
cf:63:cf:ce:c9:47:0f:e9:d6:d9:b8:80:21:e9:d0:97:26:54:
03:9c:8f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org