Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/HzFoZSlrEa4Egl8qPkQbUCwIkTE.roa
File: HzFoZSlrEa4Egl8qPkQbUCwIkTE.roa (raw, json)
Hash identifier: eI2/kZxd58bRjqz18usT/qoKGqonr4Ng2W+20Y45c3w=
Subject key identifier: 1F:31:68:65:29:6B:11:AE:04:82:5F:2A:3E:44:1B:50:2C:08:91:31
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0186376F54C388E9DC87D53F3C903FA38CF0
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/HzFoZSlrEa4Egl8qPkQbUCwIkTE.roa
Signing time: Thu 09 Feb 2023 18:28:08 +0000
ROA not before: Thu 09 Feb 2023 18:28:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 83.147.9.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:37:6f:54:c3:88:e9:dc:87:d5:3f:3c:90:3f:a3:8c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Feb 9 18:28:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f316865296b11ae04825f2a3e441b502c089131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:f8:dc:f8:be:5c:d3:4a:1a:d9:ab:05:c3:
5b:dd:e8:8d:9a:76:9f:18:3b:d9:cf:69:d0:98:96:
3c:a9:1d:78:29:a9:f8:33:8d:89:20:be:6a:7a:1f:
67:1e:7f:ab:39:6a:5d:4c:fb:e9:b9:a6:85:d3:f0:
0a:21:7f:d3:6b:3b:98:51:eb:cf:aa:f6:af:9a:3f:
52:48:e7:84:6e:8a:65:33:6f:68:ef:f8:45:3b:fd:
c9:26:e1:a1:78:3d:51:b4:f1:86:0a:ff:15:5e:78:
6e:44:ee:06:1e:8d:ac:4d:b9:06:c4:cd:9b:74:68:
a0:42:bb:d7:21:cb:53:f7:d1:88:c3:57:30:34:a5:
1b:72:53:66:c1:ff:9b:a5:0e:c0:3a:09:45:67:89:
e1:a7:b3:e2:6b:06:65:24:90:fb:53:49:c1:44:ef:
fc:c1:7c:0d:fb:0a:d3:9c:cf:07:c9:f0:6a:5d:0b:
d4:70:2a:78:98:47:90:cc:03:a6:62:7c:b5:37:fa:
58:b1:43:07:42:ad:28:44:e3:8e:37:bf:66:af:e8:
44:30:77:21:89:bf:b5:f6:61:1f:c1:e1:41:54:ee:
af:17:10:27:75:02:e1:67:34:1d:7b:d6:1a:54:d6:
77:65:6d:6a:a1:f4:f3:00:45:88:af:8f:b4:f5:66:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:31:68:65:29:6B:11:AE:04:82:5F:2A:3E:44:1B:50:2C:08:91:31
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/HzFoZSlrEa4Egl8qPkQbUCwIkTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
83.147.20.0/23
Signature Algorithm: sha256WithRSAEncryption
74:1f:e7:15:df:8b:b2:10:da:46:ed:89:13:20:9b:e1:db:17:
80:b4:39:1e:a7:da:78:29:bc:9b:36:0b:38:6e:6d:79:08:e9:
e0:53:bc:5e:01:59:ea:0e:e6:9f:4c:1d:19:84:36:9a:9f:3f:
75:25:59:a3:2c:7c:ce:b8:3d:bd:86:33:83:7d:e4:62:57:c8:
af:d2:56:8e:ea:c0:4e:3a:f8:fa:28:83:cc:8f:bb:95:07:4a:
30:5c:50:cc:a5:b3:18:82:41:96:e1:d2:38:8c:82:0d:fd:cc:
7b:98:5a:55:a4:73:ea:77:cd:d6:03:30:fe:c8:bc:e8:b6:40:
58:fe:e3:e8:fb:44:14:06:e5:01:01:cf:65:d1:41:60:22:05:
47:0b:06:27:ca:77:78:c3:95:d3:ec:fc:41:26:8a:0f:1d:1e:
44:4d:94:d9:2a:b3:4b:70:56:8e:c7:6f:30:47:1a:73:57:04:
32:5e:8c:e4:bb:57:77:79:80:98:dd:c1:c9:85:82:df:5b:92:
39:20:83:f6:5e:3d:c6:ee:ff:77:8e:77:c1:55:0a:a9:43:54:
df:1b:83:c4:b1:e9:c2:02:66:3d:54:53:fc:03:96:70:33:4a:
34:dd:4c:d2:be:f3:a7:1e:dc:ab:28:53:61:97:db:2b:64:9e:
44:c1:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org