Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/HFqav7P8KGcd3jiWdX41ib2DKfE.roa
File: HFqav7P8KGcd3jiWdX41ib2DKfE.roa (raw, json)
Hash identifier: YQ1oYOkcUGuUDtBWAZWoZdwFmIpzoxRsHWGIYcZow6M=
Subject key identifier: 1C:5A:9A:BF:B3:FC:28:67:1D:DE:38:96:75:7E:35:89:BD:83:29:F1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018625505FD3E86C513B903DE0879C4D5322
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/HFqav7P8KGcd3jiWdX41ib2DKfE.roa
Signing time: Mon 06 Feb 2023 06:01:09 +0000
ROA not before: Mon 06 Feb 2023 06:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 83.147.10.0/24 maxlen: 24
83.147.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 11:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:50:5f:d3:e8:6c:51:3b:90:3d:e0:87:9c:4d:53:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Feb 6 06:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c5a9abfb3fc28671dde3896757e3589bd8329f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:3e:36:b1:df:d6:43:b9:65:b5:49:34:5e:
63:25:e7:75:f0:e4:b0:ca:bf:74:ba:74:74:f3:f1:
1f:d1:59:89:f3:64:91:a6:69:ea:2a:37:ed:f2:b8:
08:6a:dc:a1:9f:64:5a:b5:a4:f2:6b:06:b8:f9:47:
06:ad:24:cc:a5:7a:67:30:82:cd:f1:8c:d2:2f:5e:
9b:fd:3d:60:ee:0e:ed:5a:4c:72:b6:f8:7b:86:4e:
ef:96:70:99:ce:25:d6:94:f1:6b:b2:a7:43:4c:63:
c7:aa:99:66:e5:56:6b:3f:18:e8:63:c9:13:fa:0c:
f3:72:0d:61:69:82:f6:17:fd:98:88:9a:bf:1e:5f:
f5:4b:6b:57:be:23:6b:2c:46:b3:1b:05:90:f6:39:
3e:b1:f4:be:76:42:21:32:4f:7b:58:56:20:38:8f:
9c:d2:3d:9c:b3:bc:12:ba:ce:8a:32:79:d2:21:b5:
eb:3c:16:3f:7e:8c:b9:0e:a6:0b:ee:36:ef:55:3d:
11:49:15:f2:31:06:b1:1b:25:49:4f:c6:4a:20:73:
8a:86:11:36:15:2b:e1:f5:0f:57:db:1e:2e:ce:ad:
15:c1:e2:2b:3a:39:1f:fa:f2:9e:e1:b1:2b:8d:df:
f9:3e:48:19:68:00:75:24:49:d2:e2:9e:00:a0:a7:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5A:9A:BF:B3:FC:28:67:1D:DE:38:96:75:7E:35:89:BD:83:29:F1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/HFqav7P8KGcd3jiWdX41ib2DKfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.10.0/24
83.147.25.0/24
Signature Algorithm: sha256WithRSAEncryption
17:de:f3:44:35:27:0e:87:71:89:bc:63:ab:9f:d9:2d:00:b7:
62:47:1b:a3:ac:cb:20:3a:e2:89:12:b2:4c:f1:1d:42:2a:e4:
f7:1b:ba:8f:ce:5d:7d:d7:4e:96:13:df:0b:9d:0f:a3:78:fa:
a1:a9:cc:c7:05:3a:cd:fd:e9:10:fe:8a:1a:f7:5c:76:a4:09:
a0:b9:b5:89:9b:9a:d6:51:7a:41:d7:7e:9c:c2:c8:86:8c:d6:
14:72:27:29:4d:ba:50:2d:3c:81:e4:4b:6a:90:ca:cd:6f:24:
67:ad:22:f6:0c:32:22:36:73:53:7b:80:2b:9c:30:ff:89:d2:
69:3b:8a:18:bd:18:5d:fb:5e:a7:11:71:7c:da:63:78:dd:3a:
d8:e1:76:4b:25:9e:83:28:08:97:08:f3:ae:ea:e4:ae:05:24:
9a:90:80:e9:48:16:5f:79:2d:e7:66:07:e3:fb:2b:e2:63:28:
a1:23:f3:25:7c:05:6d:6b:09:1f:03:9f:f8:90:cf:2e:7f:75:
5a:31:a3:39:db:cb:6d:80:4d:85:30:86:d5:a0:49:89:15:6a:
57:d7:f5:3b:d0:1c:41:71:00:df:c9:3c:ee:6b:fe:d7:38:be:
94:a7:7f:d9:50:eb:69:d1:3b:71:47:8a:1b:ad:12:93:82:0b:
ee:ac:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org