Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/A9yI_MxbBJCVktoidFh3Wmmq6h0.roa
File: A9yI_MxbBJCVktoidFh3Wmmq6h0.roa (raw, json)
Hash identifier: JxccLjh4S3lZVC8BW4EtABoIZEsCL5YOvOk4o1zHAOc=
Subject key identifier: 03:DC:88:FC:CC:5B:04:90:95:92:DA:22:74:58:77:5A:69:AA:EA:1D
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB630BB7B884F3D1709FD3BFD6975
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/A9yI_MxbBJCVktoidFh3Wmmq6h0.roa
Signing time: Tue 02 Jan 2024 08:29:25 +0000
ROA not before: Tue 02 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 83.147.40.0/22 maxlen: 22
83.147.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 27 Jan 2024 19:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b6:30:bb:7b:88:4f:3d:17:09:fd:3b:fd:69:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03dc88fccc5b04909592da227458775a69aaea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:0c:8d:31:61:07:be:68:9d:28:81:13:a1:
4a:a4:4e:b9:a3:a7:16:f9:27:62:22:c5:8f:37:38:
8d:e0:cd:fd:1c:b1:8d:cb:38:5c:cc:4b:b8:0d:ce:
c4:d7:a0:92:1d:c7:00:ce:4f:3f:c3:89:61:93:8b:
89:82:79:3d:8d:85:f0:27:12:31:df:52:69:dc:41:
86:30:47:bb:c3:27:b1:14:ce:c9:ae:ea:6c:34:2a:
b0:35:6e:9c:e1:46:96:9e:74:56:aa:39:82:ae:17:
42:83:64:35:9c:67:ba:8a:30:be:cf:a5:ce:1c:3a:
0f:f4:31:60:17:9a:0f:c7:62:50:f8:70:bf:39:a3:
60:da:94:cd:36:2b:b7:04:ea:b9:29:27:eb:92:72:
d2:af:07:83:5b:6c:be:04:87:2c:91:0a:f0:ce:80:
63:5b:48:fa:8c:a4:6e:f9:88:78:1d:71:36:fa:86:
7f:7a:d7:d2:8c:ee:5c:38:49:28:f3:32:fd:dd:18:
87:be:f5:69:47:85:ce:92:e9:fb:03:63:99:6a:42:
9e:e8:94:5e:cd:55:cd:ab:27:5f:fd:74:b0:f8:3a:
dc:4a:1f:a6:f4:66:ff:b7:1e:f9:1f:ca:0b:ab:20:
6b:b5:4c:64:ea:b8:f9:40:f5:eb:c4:d3:c7:69:42:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:88:FC:CC:5B:04:90:95:92:DA:22:74:58:77:5A:69:AA:EA:1D
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/A9yI_MxbBJCVktoidFh3Wmmq6h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
81:5b:98:a9:bc:a7:b5:c9:93:d8:2c:79:a2:2a:00:68:b5:b5:
65:26:c6:8b:70:15:06:87:e2:d9:d1:72:62:12:80:fb:48:db:
5c:cf:17:8e:f9:d3:18:6a:45:cd:4d:bc:df:55:8e:7e:57:b1:
f9:1f:69:04:24:ac:f2:bc:24:d6:68:a2:6c:bd:56:c9:56:90:
e9:66:29:c6:5f:f5:71:b0:47:f0:bb:93:a2:51:0d:73:71:32:
a0:a9:64:31:51:47:af:6c:1a:74:2f:a3:8d:55:5a:a7:31:c9:
36:d8:0e:a6:68:04:fb:cc:6e:2e:f1:45:6a:68:4a:91:eb:27:
6d:f7:1d:c4:e8:e0:97:8e:6c:3f:8a:03:96:47:78:67:d3:00:
6c:d7:98:ff:a9:c8:0d:da:4e:bf:11:9e:10:4d:c1:99:ad:dd:
37:2d:63:c8:f2:84:f9:f5:56:41:04:59:0d:a4:f4:97:57:7e:
66:43:e5:46:25:a5:64:68:e0:a5:a1:ee:a5:02:70:e5:e7:b9:
45:65:55:41:43:08:29:29:a4:b6:9a:68:a9:d2:80:d3:d7:a9:
b9:f7:a8:21:f7:bf:95:0e:c5:a2:a5:7c:40:3e:b2:5d:6b:c3:
6c:ba:fc:73:92:c3:e6:c3:1d:fe:50:cf:f6:c1:29:a4:ee:7d:
f3:19:83:46
-----BEGIN CERTIFICATE-----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Generated at Sat Jan 27 23:04:53 2024 by rpki-client on console-ams.rpki-client.org