Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/PHp88CNB3X8PMGT3-QqHf0MRMeU.roa
File: PHp88CNB3X8PMGT3-QqHf0MRMeU.roa (raw, json)
Hash identifier: A4m482chun5nZY0Xp8BrQLFYgKe4zw3DOSh6UJ/HV0o=
Subject key identifier: 3C:7A:7C:F0:23:41:DD:7F:0F:30:64:F7:F9:0A:87:7F:43:11:31:E5
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018653BB0C45F909EE99BBEA20BFA7DA3A4C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/PHp88CNB3X8PMGT3-QqHf0MRMeU.roa
Signing time: Wed 15 Feb 2023 06:20:12 +0000
ROA not before: Wed 15 Feb 2023 06:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 06:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:bb:0c:45:f9:09:ee:99:bb:ea:20:bf:a7:da:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Feb 15 06:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c7a7cf02341dd7f0f3064f7f90a877f431131e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:73:b5:91:64:ff:04:ce:20:4b:1b:9b:31:
8f:69:05:f9:7a:34:2d:61:68:64:e8:b9:1c:b9:2a:
83:45:00:eb:7f:64:c4:1d:72:ee:c6:1f:81:a9:e8:
74:5d:32:81:90:3e:f4:e0:8f:d0:e9:a2:a5:cb:a7:
fc:19:5c:04:54:79:b1:c3:cb:c2:1a:2f:fc:60:43:
56:c8:f4:32:ac:2d:80:9f:39:44:a2:cd:bd:b5:c1:
73:97:f0:74:14:45:64:2c:61:6b:93:1a:ec:f0:ea:
98:12:87:f5:7a:7d:bc:3a:26:00:f0:13:fe:78:4f:
52:5f:ea:13:d9:c4:38:11:6b:11:c8:d2:b6:74:9b:
16:6d:e3:d8:ff:f5:36:af:08:08:8f:ef:c3:2a:57:
b1:7f:7d:63:dc:aa:51:ca:8d:4d:aa:0e:ad:77:de:
82:23:6c:e1:dd:19:ae:3a:d1:d5:48:2f:f1:f0:b3:
81:45:40:ff:24:92:44:35:69:ae:64:b4:04:01:f7:
41:f7:6d:f6:68:1e:7f:84:a7:24:f5:94:24:ce:1e:
04:38:51:ca:3e:19:d1:b7:e5:d3:01:45:64:1b:b8:
74:bd:9f:83:8b:ee:ac:82:88:b2:54:07:7c:29:1e:
28:56:6f:2e:3f:3f:bb:6a:48:67:1c:ef:8e:b5:ef:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:7C:F0:23:41:DD:7F:0F:30:64:F7:F9:0A:87:7F:43:11:31:E5
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/PHp88CNB3X8PMGT3-QqHf0MRMeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.28.0/22
Signature Algorithm: sha256WithRSAEncryption
71:b5:e1:91:f1:63:60:61:a5:92:89:a6:12:f2:2f:d1:e6:ad:
a0:bb:81:ee:49:49:2f:7e:63:1d:a6:91:88:0c:8d:dc:b1:db:
aa:16:f9:00:20:1b:e6:cd:5c:9b:0d:2e:cc:eb:f9:e1:e9:36:
62:45:f7:51:d4:6c:fe:66:02:d1:a2:03:32:55:23:a5:9f:d6:
50:d5:45:95:e6:09:80:19:23:51:4f:99:45:ae:3f:ec:d4:a3:
a1:62:18:36:ae:36:21:35:46:3d:a0:16:f5:6a:f0:d6:8a:50:
a4:fe:07:63:38:65:bb:fa:3e:b1:e2:93:c6:fb:df:ab:4b:bb:
b2:d5:fa:de:48:d5:52:e3:08:09:0d:fe:fa:06:36:a0:fc:72:
b3:5b:29:fb:da:55:bb:52:89:3c:80:67:3d:0e:b8:0a:a6:3f:
8d:a8:a3:0a:98:7b:99:5d:c3:11:78:16:18:5d:1e:7a:db:f4:
e6:02:19:ce:a5:58:e4:0f:65:d1:af:c0:c4:48:ef:6f:a3:68:
c3:85:5f:4d:1f:4c:ea:91:dc:4b:e4:c1:99:1f:ac:42:85:1f:
d1:4b:b5:77:3e:34:9e:6b:4b:4d:38:b1:15:eb:d9:89:8a:0c:
df:df:b6:af:15:6d:f2:2e:d8:27:89:02:59:98:bb:86:73:35:
b5:d3:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org