Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/D0yMn_TfCHUpEZHfyv5qoonQmZI.roa
File: D0yMn_TfCHUpEZHfyv5qoonQmZI.roa (raw, json)
Hash identifier: D4SVEfL2K5YlZBtwyPg9pD4oJP7shpQjOGuwdkAvkcY=
Subject key identifier: 0F:4C:8C:9F:F4:DF:08:75:29:11:91:DF:CA:FE:6A:A2:89:D0:99:92
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018B17DC025DE8AFBFCDB1E614CFF7C7F0CD
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/D0yMn_TfCHUpEZHfyv5qoonQmZI.roa
Signing time: Tue 10 Oct 2023 04:32:56 +0000
ROA not before: Tue 10 Oct 2023 04:32:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.62.0/24 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 07:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:17:dc:02:5d:e8:af:bf:cd:b1:e6:14:cf:f7:c7:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 10 04:32:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f4c8c9ff4df0875291191dfcafe6aa289d09992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:a8:e7:33:90:f8:36:60:45:4b:4f:dc:e6:
8f:6c:ea:d8:34:a5:fe:98:d5:da:7a:0e:05:b6:18:
4e:d2:e4:d5:14:06:70:54:81:71:c7:b8:8f:ff:6e:
c4:09:2f:77:9d:99:40:eb:a9:87:cd:5c:56:c7:fa:
89:43:61:32:27:e3:8a:6c:58:87:a6:7d:81:31:74:
fc:1b:dd:0e:46:35:a0:a3:0e:67:b4:f0:79:bd:94:
37:23:16:31:8e:73:ee:c9:19:2b:d4:dc:97:7d:a4:
35:71:c1:16:78:b8:dc:e8:dd:1c:a1:67:11:50:44:
3f:61:62:d1:6e:28:c0:91:dd:e6:92:0e:2b:8b:1b:
44:29:d4:9d:4b:4b:10:f7:bd:1f:38:47:db:88:a2:
ef:26:4e:84:af:50:cc:d0:6e:c5:5d:ec:6a:c9:9b:
87:1b:79:4b:7c:26:b7:de:c1:c6:ab:38:a5:29:65:
8e:f8:37:8f:13:f7:b3:e1:23:1f:46:dc:4c:e3:2d:
fb:7a:09:0a:7f:29:02:8b:5f:c4:3f:1c:c0:72:61:
7b:a4:73:f7:6d:25:85:92:49:f6:49:f2:be:1e:00:
a3:23:b9:7d:32:cf:d8:e4:fa:a1:92:1a:58:7e:b7:
32:ac:46:c7:ff:d8:aa:e9:ed:69:b8:f4:3c:b1:aa:
91:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:8C:9F:F4:DF:08:75:29:11:91:DF:CA:FE:6A:A2:89:D0:99:92
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/D0yMn_TfCHUpEZHfyv5qoonQmZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
83.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:12:65:13:d9:f2:d8:48:30:19:91:11:4b:73:33:c3:36:09:
2d:d2:cd:c2:d3:61:c4:bd:a1:39:26:b0:c7:0b:74:6b:4f:98:
44:05:72:f9:f4:c1:ee:1f:b7:d7:50:50:1e:4c:02:4c:5b:8b:
30:9e:d6:68:23:9d:1c:68:54:d6:ab:5e:29:c3:f3:4a:4a:bd:
93:1e:7b:6d:4a:7c:22:b9:66:cc:9f:a6:e3:88:61:d7:5d:a4:
fb:e0:6a:d3:22:c7:f2:ec:23:c4:b0:0f:64:58:70:d8:a3:58:
cb:b4:6f:2f:01:e1:9f:e8:86:b5:bc:b7:53:1b:07:51:23:5a:
30:f9:3d:59:b5:bb:01:9b:90:81:08:9a:21:a7:30:c1:c5:70:
fb:11:b1:25:ff:56:14:63:8c:2a:69:95:4e:18:5f:2c:8c:92:
a1:f5:15:47:85:e7:ce:33:29:27:c7:4c:05:12:a9:b9:2a:50:
e9:0c:0e:d6:be:e0:60:5f:8e:fe:e7:ac:a7:38:27:aa:52:cd:
e0:47:ce:8f:09:2a:14:6f:69:36:96:c5:c0:c9:85:31:92:ac:
09:3a:2c:14:49:ab:83:8b:4d:03:91:50:8a:7e:46:14:eb:2d:
74:7d:59:e5:ce:02:8c:65:37:bc:4e:20:1d:7b:ea:8e:e0:b2:
15:9e:d0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org