Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/P8Bf7QxTb4yLWmAuiV0nuS4Nd8A.roa
File: P8Bf7QxTb4yLWmAuiV0nuS4Nd8A.roa (raw, json)
Hash identifier: TJc3bHUIp1Iof97E7rXZHk5rJ4bUENtkmAoYq6jcMyc=
Subject key identifier: 3F:C0:5F:ED:0C:53:6F:8C:8B:5A:60:2E:89:5D:27:B9:2E:0D:77:C0
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CA99623F52F46C534BE3851C0316D5E84
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/P8Bf7QxTb4yLWmAuiV0nuS4Nd8A.roa
Signing time: Wed 27 Dec 2023 04:43:58 +0000
ROA not before: Wed 27 Dec 2023 04:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.48.0/22 maxlen: 24
83.147.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 11:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:96:23:f5:2f:46:c5:34:be:38:51:c0:31:6d:5e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 27 04:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fc05fed0c536f8c8b5a602e895d27b92e0d77c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:b9:61:ab:79:80:33:96:93:65:34:64:a2:
a4:fd:0b:c7:91:3a:0d:c0:6d:8d:c2:1c:78:a5:d6:
8e:1c:98:61:0a:1b:94:a7:21:56:1c:14:2a:88:30:
d3:77:62:46:58:66:b7:a0:c8:ec:6e:8b:09:79:20:
76:b0:79:ef:71:41:e8:67:f6:f5:6d:5a:af:3f:2f:
05:14:3a:3d:e5:17:fe:54:33:05:65:e0:72:dd:d0:
9a:a0:76:8a:e3:1f:d9:16:e6:09:84:a0:5e:ee:8a:
90:39:5e:e6:3f:86:d1:3e:f2:4c:26:7e:34:d6:6d:
91:46:c4:49:46:22:da:9b:bb:8c:87:79:69:b8:02:
74:27:c1:a5:27:f7:f4:c0:a4:cd:a8:e1:f7:84:77:
b7:69:26:70:e3:d3:4b:df:f9:65:03:c2:7a:37:10:
33:06:20:da:03:8f:ec:fb:68:06:69:69:68:e7:64:
56:00:51:fe:84:31:22:87:d0:4a:23:2c:fe:9d:e8:
87:d1:8c:67:98:a9:bf:0c:00:90:37:cd:e4:3b:fe:
ab:75:92:31:61:22:3a:04:c9:4b:ca:02:69:ab:ee:
07:cf:32:f7:e9:b0:a0:02:2c:5b:44:f5:e0:b4:00:
c8:04:43:b4:ec:1c:0d:0c:0b:b3:eb:29:3b:58:fa:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C0:5F:ED:0C:53:6F:8C:8B:5A:60:2E:89:5D:27:B9:2E:0D:77:C0
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/P8Bf7QxTb4yLWmAuiV0nuS4Nd8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
98:97:4b:d2:e2:9e:e7:5b:e6:b3:3f:06:22:e7:72:2c:f6:6d:
b5:bb:42:18:ac:3a:d7:ce:ad:b7:14:83:0e:1e:33:ce:77:ac:
63:f7:e4:3f:7d:5a:cd:75:10:d4:54:53:9b:d8:c6:d5:39:d8:
0c:89:8e:e2:dd:e3:25:5f:72:df:1d:0d:82:01:f2:6a:19:81:
76:b1:70:f5:81:91:b5:b8:71:cb:80:30:7f:b1:a7:cf:c9:a3:
93:49:1f:5f:95:30:69:a7:26:67:3e:7d:b9:2d:86:e6:64:9e:
c0:88:26:08:3a:f5:af:9c:c1:32:f5:94:30:67:08:40:76:2f:
94:f1:0a:3b:c1:33:7e:84:1f:d8:2e:82:08:e1:7c:1a:c5:e4:
85:db:09:84:56:aa:05:4e:8e:71:bf:95:ee:d0:28:12:e1:4d:
1c:fe:a5:38:d4:0e:ec:3e:c2:36:2a:df:07:4f:f6:a7:c8:78:
13:a9:73:6d:92:a8:09:b6:c8:8f:f3:ec:20:3d:85:b3:87:4c:
35:8d:2b:d2:c1:34:75:bc:f5:13:12:cf:02:11:44:a8:70:94:
9d:9e:68:01:97:78:33:53:02:dd:02:47:24:f6:7d:5c:79:0d:
b8:5a:d6:cb:5a:1e:55:c9:32:1a:cc:48:5c:1b:47:58:b0:c3:
7a:17:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org