Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GpbZFCrS2GYYLML1hPHy_NNG17s.roa
File: GpbZFCrS2GYYLML1hPHy_NNG17s.roa (raw, json)
Hash identifier: WrTMXIkw7eIOFfX9ToR/Mj59SPJ3G7AaE/Nj81k7Wmg=
Subject key identifier: 1A:96:D9:14:2A:D2:D8:66:18:2C:C2:F5:84:F1:F2:FC:D3:46:D7:BB
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0190DB367AF17FF2E23455BB6207EEF985CC
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GpbZFCrS2GYYLML1hPHy_NNG17s.roa
Signing time: Mon 22 Jul 2024 16:11:39 +0000
ROA not before: Mon 22 Jul 2024 16:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 83.147.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 04:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:db:36:7a:f1:7f:f2:e2:34:55:bb:62:07:ee:f9:85:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 22 16:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a96d9142ad2d866182cc2f584f1f2fcd346d7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:7e:e0:ee:b1:d8:b0:a5:38:12:ed:22:8c:
ac:93:cb:1e:b7:37:31:ac:df:fb:2b:c9:2f:6f:4c:
9b:88:40:6c:53:50:21:c3:2a:00:b0:a6:b5:54:47:
0a:12:12:80:28:86:3f:87:b7:ca:12:11:89:ce:65:
3c:a3:a4:79:47:7b:12:10:63:49:8c:a8:ed:5d:27:
7b:88:84:9e:a5:74:6d:54:71:0e:d3:4c:b2:c2:15:
f2:49:60:32:5d:58:5e:e1:8c:5f:79:e4:84:68:81:
4e:1c:78:52:92:61:d6:d4:88:d8:e8:04:bb:a4:35:
81:86:87:5e:ba:f5:6a:0f:ac:81:b8:58:9c:d9:71:
6a:c4:5e:98:6b:57:ed:ba:77:16:92:b9:80:ed:ba:
0d:3c:03:77:6d:e1:44:ee:9d:95:72:8b:a8:0c:76:
15:ee:16:7a:75:38:9d:27:79:ae:27:99:22:60:0f:
fc:04:48:ca:ad:98:0b:c7:d4:bf:4a:00:d5:31:89:
88:f2:22:e8:62:37:bf:2d:bc:4a:1e:35:f2:85:00:
6f:33:3a:06:00:ef:ae:0a:04:ae:8e:ee:22:bf:91:
9a:d4:69:ab:3d:0d:55:f3:36:22:c7:62:0d:5d:9c:
9f:a3:c0:99:d2:f6:d3:e6:90:c3:6e:a1:4a:e9:3e:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:D9:14:2A:D2:D8:66:18:2C:C2:F5:84:F1:F2:FC:D3:46:D7:BB
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GpbZFCrS2GYYLML1hPHy_NNG17s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.12.0/22
Signature Algorithm: sha256WithRSAEncryption
02:0f:cc:97:9d:95:dd:ab:d0:c6:9e:0f:85:01:56:7c:ed:da:
39:f8:b5:3a:4d:4b:82:2e:e0:7a:8b:f2:48:4c:27:0c:41:40:
09:6d:85:7d:72:cc:dd:92:26:08:e5:b0:6e:1b:f7:b4:a9:17:
2b:3d:2c:a6:84:16:b0:7b:d9:c9:8a:84:6e:a3:2d:f9:82:c4:
d0:52:ca:6e:68:c1:8f:c7:b6:b6:37:bf:ef:3e:87:e8:ed:d0:
04:09:3a:99:28:5e:33:cc:4c:0e:29:e7:02:90:39:f5:68:91:
8a:93:91:cf:ec:f1:61:f7:db:0c:97:1a:93:40:ac:2a:b2:5f:
05:8c:94:26:c2:c5:dd:ea:38:67:f2:a7:29:4e:61:5a:f2:0f:
3a:16:fe:c8:5b:58:a5:10:78:e6:47:3e:fa:42:f3:94:2e:5b:
10:83:e9:89:bb:ee:2c:c6:3d:90:42:5b:fd:df:76:78:e2:92:
f6:77:24:3a:a4:4e:e7:b8:6b:df:37:d6:7e:1c:cc:5f:af:5e:
cb:69:e5:40:03:96:07:0a:8f:11:9c:6e:44:ec:8a:14:28:eb:
aa:88:52:0b:12:71:05:a2:0f:c7:76:4e:84:f6:89:50:32:67:
ee:f9:80:b2:3f:2d:0d:f7:b8:62:5d:b9:72:1b:a9:c1:4f:98:
06:89:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 05:41:59 2024 by rpki-client on console-ams.rpki-client.org