Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DNhlv62yJ-hNRMh2lKWcCfuAkb4.roa
File: DNhlv62yJ-hNRMh2lKWcCfuAkb4.roa (raw, json)
Hash identifier: flI21OT3S1a/Q4mkaj7euXThVLr3H4TdfE0jfCleEDg=
Subject key identifier: 0C:D8:65:BF:AD:B2:27:E8:4D:44:C8:76:94:A5:9C:09:FB:80:91:BE
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01856CE63C2A35CDD5A11069B93ECBA6561C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DNhlv62yJ-hNRMh2lKWcCfuAkb4.roa
Signing time: Sun 01 Jan 2023 10:35:06 +0000
ROA not before: Sun 01 Jan 2023 10:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 17:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:3c:2a:35:cd:d5:a1:10:69:b9:3e:cb:a6:56:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 10:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cd865bfadb227e84d44c87694a59c09fb8091be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:e2:e6:f3:5f:2d:4a:de:6e:b3:c7:ab:33:
7a:7c:a1:f0:4d:9d:4b:80:77:c9:40:c3:21:42:d9:
23:57:08:11:42:be:f3:26:3b:fe:5f:61:c4:a6:a5:
f1:e7:d2:cf:21:26:b8:af:8d:de:e3:b6:60:01:0e:
6c:cc:49:35:e7:d6:5f:19:b0:a9:85:9a:9d:5b:7c:
d8:99:7b:40:ad:48:1c:d5:26:58:dd:a5:3d:82:0f:
88:0a:99:22:72:b8:e9:57:39:0e:43:af:b8:31:fa:
c6:15:d4:5d:be:70:58:33:68:60:90:f3:0e:68:8c:
0f:fa:9f:99:3e:3d:91:ff:2a:e8:ec:c2:ef:2d:a5:
44:e2:e5:23:95:c3:9f:04:9a:7d:ef:d1:b6:01:a8:
b9:a1:ed:64:c2:62:20:a5:68:f4:cc:e2:de:93:47:
2c:ee:16:13:59:f7:68:1a:d5:c2:eb:3c:13:fe:f7:
50:a0:81:48:e5:40:3e:f2:3c:76:5f:7b:cb:93:31:
b7:01:30:47:c4:f0:55:5a:61:f9:06:62:aa:cd:25:
c1:09:2b:c7:08:f3:8d:15:4d:80:76:42:eb:4a:dd:
0c:ff:f0:93:5a:99:06:8c:b0:45:a9:90:ce:58:31:
49:49:eb:36:2f:6e:28:24:29:36:a4:56:25:d8:7d:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:65:BF:AD:B2:27:E8:4D:44:C8:76:94:A5:9C:09:FB:80:91:BE
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DNhlv62yJ-hNRMh2lKWcCfuAkb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:90:41:39:92:8a:df:fe:d6:64:96:c3:8f:bb:e0:e5:3e:3d:
68:89:d8:4d:bb:bc:33:d9:e6:f4:5b:95:7c:a0:ce:24:50:1d:
42:4e:a8:57:54:69:00:d9:5e:09:9f:e5:c1:e9:7b:9e:79:de:
70:e0:cc:12:56:e9:a2:28:ce:40:d5:06:3c:ec:a7:a6:cf:6e:
b1:91:51:a9:d6:08:21:51:19:3e:16:c5:fd:f4:17:05:f2:84:
1e:0d:a6:2f:c2:84:14:44:91:b8:3f:7a:f7:a4:5c:63:f1:73:
a7:b2:f4:41:63:03:2e:65:b9:b0:c3:a4:ee:68:42:d8:82:96:
10:8b:04:bb:56:d9:fd:73:ba:79:b4:28:70:5c:6c:b1:6b:07:
f9:e4:eb:d6:02:f8:69:95:9c:c9:b6:19:3b:8e:60:af:5a:62:
6c:27:0a:ef:73:ae:71:e4:b9:86:f8:af:de:9b:82:00:f1:91:
9d:19:da:01:d1:45:d9:44:dd:81:77:e7:f8:37:4d:0a:ea:64:
49:c3:f3:c7:7e:7c:c3:25:58:e7:6a:66:9b:69:6d:6b:ba:31:
c5:a5:45:dc:84:5c:3e:f8:97:39:88:47:7b:1b:87:52:dc:0b:
6e:9a:8d:75:73:72:55:ff:41:44:ee:31:ac:d3:00:6a:fa:bd:
be:8b:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org