Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GqGPmlcSj7YZrg8CF3KcOydnyRg.roa
File: GqGPmlcSj7YZrg8CF3KcOydnyRg.roa (raw, json)
Hash identifier: wPbiuiXGj2SBtq7cQrHIM/N70fDlN7C4Ye5/SPQJGEk=
Subject key identifier: 1A:A1:8F:9A:57:12:8F:B6:19:AE:0F:02:17:72:9C:3B:27:67:C9:18
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01879CF347006BEE665E282BA0348FE8BF3F
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GqGPmlcSj7YZrg8CF3KcOydnyRg.roa
Signing time: Thu 20 Apr 2023 04:36:41 +0000
ROA not before: Thu 20 Apr 2023 04:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.28.0/22 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9c:f3:47:00:6b:ee:66:5e:28:2b:a0:34:8f:e8:bf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 20 04:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aa18f9a57128fb619ae0f0217729c3b2767c918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:c7:07:f1:e0:02:c1:06:bb:f6:58:bb:8f:
e3:23:ed:e9:9d:df:1d:c9:5a:b8:ea:4c:e8:fc:98:
f8:f6:f9:67:40:36:71:b9:e4:d2:36:ee:84:14:c4:
e8:a8:56:d0:5c:87:f5:49:5a:96:0b:77:91:34:bc:
9b:7d:a7:a5:04:74:a4:05:b5:b0:ce:2b:52:3b:fa:
66:c2:07:dc:0f:2f:6b:77:03:bf:7a:47:8b:56:10:
7d:39:99:bd:39:b2:75:d1:40:3d:20:04:19:41:8c:
ea:fb:26:16:60:e8:91:76:a5:46:c8:20:d2:c4:1a:
37:06:29:3a:c2:cf:f8:c3:35:8e:01:72:3e:07:9c:
83:84:b3:a7:1f:ea:80:97:2d:3f:e7:ee:f6:f5:57:
b1:6b:e9:fc:23:8a:d5:ca:9e:3d:c5:3f:a2:6d:70:
08:46:9f:b4:10:42:4c:28:50:9a:1a:ee:2f:7d:34:
ff:80:b3:68:25:e5:e5:df:f2:cd:63:92:55:e9:da:
3f:8f:11:d1:37:59:cc:3d:12:bf:31:ef:3c:ce:10:
f1:00:bb:0e:c2:3b:e6:ba:bb:c6:45:4a:e5:f4:b9:
c2:29:9a:77:39:c0:73:43:76:f3:3c:df:3a:a4:1d:
1a:f1:76:5b:39:b6:8e:db:75:eb:c3:74:d4:20:1e:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:8F:9A:57:12:8F:B6:19:AE:0F:02:17:72:9C:3B:27:67:C9:18
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GqGPmlcSj7YZrg8CF3KcOydnyRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.28.0-83.147.35.255
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
66:47:ef:3b:2a:bd:bd:79:9f:3f:8e:94:39:4a:48:d5:f9:cd:
fb:75:50:e3:de:2d:e0:ee:18:5a:13:b8:7e:e5:8c:52:8a:e6:
52:76:ed:35:d5:18:92:9c:f9:21:ea:a4:51:1d:05:9b:3c:b8:
09:26:fe:28:10:59:35:05:ec:a5:c4:a2:9a:ba:4e:60:84:41:
73:81:cb:ee:e5:29:51:d3:6b:37:59:e5:fe:11:32:a6:c7:32:
89:62:54:0d:27:30:64:51:db:c6:67:9a:f9:d4:69:a1:63:22:
b9:8c:0f:65:1a:e7:16:9d:ab:24:11:f6:d7:43:29:72:22:e4:
0f:54:d3:72:3f:a8:cc:f7:db:01:dc:3d:3e:18:c6:7a:8d:60:
cd:16:b0:ee:7e:87:fc:04:67:0e:d0:2d:bd:0d:89:21:58:b6:
b2:bd:23:5e:e1:21:5f:93:90:af:1a:93:b4:dd:91:7e:6c:8c:
3e:15:b3:f4:a6:79:0c:fb:2e:20:fd:ae:44:a7:4b:23:b5:de:
95:46:81:0f:f4:d5:9b:74:ca:d9:09:f6:ad:9a:c5:31:db:6f:
f4:fa:7c:fe:6d:b0:94:b6:bd:a9:63:de:3c:4d:b3:e9:33:1b:
5e:b1:de:d0:3c:f7:46:e9:ca:a3:b3:25:11:7d:cf:cf:d9:29:
74:37:bb:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org