Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/E2mP_7_6WVv4WiDm1Vk1Nxw3P5Q.roa
File: E2mP_7_6WVv4WiDm1Vk1Nxw3P5Q.roa (raw, json)
Hash identifier: qN7E/OWb757oMDOlp0WxmzWNIDC7QsHbF5Lp2mTa7wc=
Subject key identifier: 13:69:8F:FF:BF:FA:59:5B:F8:5A:20:E6:D5:59:35:37:1C:37:3F:94
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018C2E94EEE85AE57A63550EF56C45825182
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/E2mP_7_6WVv4WiDm1Vk1Nxw3P5Q.roa
Signing time: Sun 03 Dec 2023 07:29:21 +0000
ROA not before: Sun 03 Dec 2023 07:29:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.48.0/22 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 06:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2e:94:ee:e8:5a:e5:7a:63:55:0e:f5:6c:45:82:51:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 3 07:29:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13698fffbffa595bf85a20e6d55935371c373f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:63:24:49:ef:14:16:17:61:f4:30:40:92:
03:60:d7:16:9f:2a:57:1a:06:9b:9b:f8:f3:07:47:
ec:ce:f5:92:aa:4d:12:d0:2e:0a:6f:8c:4a:40:65:
ba:bd:c9:1f:32:a5:81:40:a8:0c:9c:3c:d6:81:a7:
84:62:f0:22:a7:bf:68:15:26:b2:ac:97:90:c0:26:
85:f6:3e:4e:52:ed:3c:ca:49:15:5f:a3:df:83:1d:
5c:e3:fb:3f:1e:3e:b0:bb:9d:c1:99:93:d0:62:06:
68:b9:b9:ce:44:84:31:a1:bb:47:52:9f:39:2a:5b:
24:67:64:3b:cb:74:5e:6e:a7:1d:7e:67:ec:da:c8:
0e:6f:28:0d:27:f6:64:b4:b6:24:e7:4f:e9:3c:1c:
ad:75:84:36:ea:01:97:6a:81:3c:cb:c1:34:2e:2d:
0e:af:95:80:38:60:53:61:5c:fd:0b:0a:9f:22:09:
cb:77:a6:5f:d1:a7:e5:c8:cd:86:14:35:15:39:8f:
1d:34:7d:09:e4:24:8f:87:2e:20:83:9a:8b:67:3a:
27:66:c2:78:7e:5f:c7:fe:2a:7a:d7:13:25:d8:a0:
4e:ff:7f:7e:ed:d3:be:3d:cc:9e:b5:9e:b0:b1:79:
be:02:f7:18:c1:49:84:d4:45:68:17:95:40:25:68:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:69:8F:FF:BF:FA:59:5B:F8:5A:20:E6:D5:59:35:37:1C:37:3F:94
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/E2mP_7_6WVv4WiDm1Vk1Nxw3P5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.28.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
02:4d:56:ec:34:7f:7e:0a:2f:a8:21:86:eb:0e:8e:c6:4c:62:
03:c7:6d:9a:43:35:da:89:41:7e:bf:83:6b:8b:6b:5a:38:dc:
a1:00:f9:93:87:a9:24:3f:1e:ed:e3:8e:21:9a:b3:6d:97:a4:
1d:5a:b1:f5:8b:9e:00:b1:c7:0d:49:2e:81:d1:b3:48:4e:ee:
fd:51:0a:22:ce:c2:81:d5:32:d5:b2:e7:7f:88:b3:94:94:2e:
1d:f0:c3:9a:73:37:48:52:20:c6:e1:63:c9:01:80:99:8e:be:
0a:65:cc:ec:f4:5e:a1:cf:56:83:48:df:d8:e8:91:06:74:02:
f4:80:7b:c8:08:16:2d:dd:c2:5b:2a:55:a3:ee:b3:47:d4:30:
96:bc:8d:21:99:34:93:5b:78:bc:e2:74:28:92:12:85:7a:6c:
fa:05:d3:8e:27:59:d0:89:b2:24:c2:49:4b:64:b2:2d:b3:81:
94:02:57:db:61:8c:9c:b0:6d:da:74:9d:de:ad:88:4d:a3:fa:
5c:e6:00:c1:7d:6a:cd:64:29:ff:f2:32:36:80:19:a4:73:c6:
90:24:6b:b2:8a:7a:4b:91:66:8c:3d:58:ff:23:a4:ad:63:71:
e3:9e:b2:54:a2:94:12:28:74:4e:6b:2b:8b:ae:91:92:89:c4:
24:5f:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org