Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/JFnnSqdUyg0qGTIvzBQPcXZbL3o.roa
File: JFnnSqdUyg0qGTIvzBQPcXZbL3o.roa (raw, json)
Hash identifier: EqgN9rjqXvXDowR/PrqlFHPA1OwjHobhOFVM6cxFnjM=
Subject key identifier: 24:59:E7:4A:A7:54:CA:0D:2A:19:32:2F:CC:14:0F:71:76:5B:2F:7A
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0187D0643890092CED32DF53598286FF0C40
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/JFnnSqdUyg0qGTIvzBQPcXZbL3o.roa
Signing time: Sun 30 Apr 2023 04:20:41 +0000
ROA not before: Sun 30 Apr 2023 04:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 03:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d0:64:38:90:09:2c:ed:32:df:53:59:82:86:ff:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 30 04:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2459e74aa754ca0d2a19322fcc140f71765b2f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:dd:f9:e6:9d:68:c3:2d:b1:f1:08:da:0f:
db:77:9f:ff:92:23:ee:cf:11:79:07:07:67:1d:03:
f8:fd:e5:a6:15:d7:8d:6f:54:fc:6a:27:ab:83:cf:
ec:cf:cb:26:c0:09:4d:23:5c:12:fc:ab:ea:67:e8:
e0:f9:5f:60:b8:17:e4:80:a4:28:19:64:ab:ac:15:
9c:41:50:c0:7f:74:71:4e:46:7b:1c:b8:c4:32:50:
13:d0:26:06:70:a7:1c:4f:b2:74:66:d6:41:a6:80:
3e:28:00:d1:b2:48:fc:48:df:7f:28:ec:44:90:bc:
38:04:78:a4:f9:10:8f:7e:fc:be:5c:68:c4:1f:ac:
c0:2a:ad:4f:c1:ae:39:16:38:44:a7:eb:5c:05:2d:
d9:f4:0d:6e:1a:71:83:7a:1f:e2:d5:69:67:06:e6:
95:16:4a:8b:ee:a3:a6:be:df:12:b6:6a:32:d4:11:
fa:8d:ff:d5:58:24:67:3b:36:67:c6:79:2e:b2:61:
95:b4:ba:03:73:1d:87:48:a7:ee:bc:41:ee:f5:72:
f9:e2:83:8b:5a:49:f5:89:54:fa:dd:82:f7:ea:f7:
4c:fb:82:18:d7:4a:16:7c:6b:fb:97:42:39:5e:da:
bd:ed:39:48:0a:a3:27:91:19:db:9e:61:2d:74:96:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:E7:4A:A7:54:CA:0D:2A:19:32:2F:CC:14:0F:71:76:5B:2F:7A
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/JFnnSqdUyg0qGTIvzBQPcXZbL3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.27.0/24
83.147.40.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:98:12:1d:04:c7:90:be:7c:2a:57:81:f1:05:e8:25:2c:24:
a2:0a:02:6c:b7:88:19:87:12:40:57:4c:aa:dc:9a:f6:fd:ed:
cb:a7:f0:98:e6:80:1e:44:fc:c4:d7:11:74:95:be:37:16:40:
ae:82:5e:8e:e7:b7:2c:cd:c3:21:c5:1b:7c:f4:96:69:33:f2:
4e:2b:90:96:85:8d:5c:da:26:01:ec:56:69:6e:05:76:cb:e5:
a0:46:56:6b:dd:df:8d:e2:95:48:c5:6e:79:40:41:20:7c:3b:
de:5f:0f:80:d3:c8:c9:b6:55:12:c4:cd:1d:4a:62:a4:21:eb:
44:38:62:0a:40:5f:d4:27:3f:dc:4b:27:15:bb:5f:13:c2:74:
38:72:ae:7d:5d:78:ec:0e:11:08:de:db:26:b3:c0:7f:0e:79:
a5:7d:6a:7f:8a:37:30:e8:ba:fb:a4:21:32:74:51:b0:5b:ed:
4d:7b:77:8b:51:ce:d9:5f:4c:eb:7e:7e:97:93:1a:2c:cb:77:
8f:ea:1c:66:96:7e:75:dd:ff:6b:65:5c:20:8d:d4:91:e7:ca:
41:55:76:22:31:2d:60:b2:fe:33:5b:d7:23:62:e8:93:8a:20:
90:d4:73:e4:73:e7:15:05:35:c0:bb:db:e6:c5:56:96:3c:03:
17:91:16:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org