Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LetN2-TlY2ObNJ0tGx6wbpo9L4M.roa
File: LetN2-TlY2ObNJ0tGx6wbpo9L4M.roa (raw, json)
Hash identifier: gMlaC0swX6ZTleWO0dGROvyQrzpzTNHO/SvfJTmk9EY=
Subject key identifier: 2D:EB:4D:DB:E4:E5:63:63:9B:34:9D:2D:1B:1E:B0:6E:9A:3D:2F:83
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01870390163F597EFACB10776546EC2DE4C8
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LetN2-TlY2ObNJ0tGx6wbpo9L4M.roa
Signing time: Tue 21 Mar 2023 09:46:27 +0000
ROA not before: Tue 21 Mar 2023 09:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22822
IP address blocks: 83.147.61.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:90:16:3f:59:7e:fa:cb:10:77:65:46:ec:2d:e4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 21 09:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2deb4ddbe4e563639b349d2d1b1eb06e9a3d2f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:58:e1:98:56:71:dd:0e:9e:cc:19:d7:7c:
16:71:3d:b5:d9:de:5a:6f:32:6f:1c:8a:5e:74:ba:
9a:fd:06:27:ca:a5:8c:ce:5d:b2:ea:02:c8:ab:fe:
d0:56:f3:44:ff:9d:ca:e1:b9:f8:32:55:d4:4d:4e:
40:6d:66:d3:e8:91:bf:fb:85:1c:36:a1:e8:28:ce:
de:8c:a4:c8:94:bc:9c:13:29:ab:14:7c:b8:6c:f5:
d6:a3:63:a2:2d:e6:91:33:03:6e:d1:48:de:9f:e6:
e8:8e:cd:a3:c3:29:4d:c0:ff:94:48:40:66:72:26:
e9:79:83:3a:ea:71:0a:38:ef:1f:74:08:5e:d4:ee:
4d:c2:dd:62:99:5b:c0:c0:57:56:ff:6d:e2:12:cd:
7f:80:cc:d5:aa:a4:39:bf:57:06:e6:95:a6:0c:24:
e2:e3:6b:bf:17:f3:4c:47:6f:b4:0f:5e:8c:23:dc:
4b:dc:91:2d:3d:91:c9:39:4f:ef:57:3a:1a:0d:20:
63:4d:73:3d:58:36:5a:b4:c4:67:2d:c9:46:d7:3c:
a5:92:1d:ce:3d:8d:1b:95:93:36:87:16:62:50:32:
f3:22:47:95:11:c2:f1:c3:95:8c:d7:8b:28:ac:58:
51:f0:be:4f:b4:da:97:d4:0a:0c:36:b1:64:0a:c4:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EB:4D:DB:E4:E5:63:63:9B:34:9D:2D:1B:1E:B0:6E:9A:3D:2F:83
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LetN2-TlY2ObNJ0tGx6wbpo9L4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.27.0/24
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9c:97:fc:7c:63:dc:3c:60:22:b2:f1:6c:19:8f:fa:4c:ce:
ec:be:7a:16:21:ab:ba:24:f8:2f:90:95:6e:4f:ea:d1:be:d0:
82:f3:fc:45:38:10:7b:9a:fe:4c:2c:d1:9d:0a:30:5f:54:86:
34:7c:c6:2a:19:55:97:a3:d5:5b:84:2a:d6:67:ca:7c:0e:c1:
20:82:1f:95:4d:e8:b8:a7:9c:75:93:1a:e2:9e:2c:c4:94:33:
66:8f:66:17:af:15:06:cb:89:b4:e7:bb:49:74:66:93:83:c0:
25:0c:bf:e2:c8:72:40:2b:8b:11:cc:f1:38:59:cb:e2:52:53:
2a:6d:f8:1c:2d:7d:19:7f:87:6f:ec:23:5b:47:68:01:17:cc:
7b:fe:73:cc:52:45:16:85:cf:9a:03:8c:64:4c:6b:05:02:9c:
11:67:f9:72:c9:34:2d:e6:e3:9d:db:bc:76:b3:8e:8a:24:7b:
7b:22:2a:c5:d6:f8:1d:ea:04:39:e7:e7:69:9b:23:8c:01:fd:
40:77:00:61:f7:cf:bd:40:bc:8c:71:58:7c:ac:bf:8b:fa:01:
a0:11:c5:8d:f0:b9:33:2c:45:15:02:c9:a5:d4:73:c8:0e:c7:
69:d3:f5:36:a8:aa:a0:ce:5d:53:2d:c6:b7:37:43:76:39:63:
dc:da:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:32 2023 by rpki-client on console-ams.rpki-client.org