Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/PjjFHqqjEX7Lmz8kYz-Zx2FmxTw.roa
File: PjjFHqqjEX7Lmz8kYz-Zx2FmxTw.roa (raw, json)
Hash identifier: /cGDsZWe+paavne2Is7ZoKWSeSVM6TNDDtqMQOt8VnU=
Subject key identifier: 3E:38:C5:1E:AA:A3:11:7E:CB:9B:3F:24:63:3F:99:C7:61:66:C5:3C
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC9C23994815EB3C49387E266C42EEF2F
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/PjjFHqqjEX7Lmz8kYz-Zx2FmxTw.roa
Signing time: Tue 02 Jan 2024 10:39:58 +0000
ROA not before: Tue 02 Jan 2024 10:39:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:c2:39:94:81:5e:b3:c4:93:87:e2:66:c4:2e:ef:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 10:39:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e38c51eaaa3117ecb9b3f24633f99c76166c53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:12:ca:bf:2b:de:1d:95:38:20:a3:f4:71:06:
32:a2:ca:7a:cc:53:4e:38:80:a5:d6:9e:5e:5e:d7:
8e:7b:a1:71:c6:ab:28:2a:19:c8:40:60:62:32:b1:
65:68:e4:85:8d:90:f4:0a:04:c2:b8:1c:f0:b6:5f:
40:77:be:e2:d3:c1:b5:a4:52:64:07:6a:9e:12:2f:
91:a2:6a:a1:23:6d:18:dc:16:f0:6c:f8:e9:32:41:
60:8a:df:70:6d:eb:aa:9a:60:0f:4d:69:d3:4a:3d:
8d:53:64:2b:9d:3e:2e:35:a0:ee:a8:29:cb:fd:37:
5a:9e:0f:10:22:19:87:30:dd:61:d4:98:96:10:bb:
a5:ea:cb:c3:6f:a0:aa:6e:94:76:71:aa:86:10:4f:
50:04:03:cb:47:47:4e:d8:a1:5f:7b:12:21:d9:ba:
2f:4d:9a:36:73:a6:b9:68:31:ad:12:ee:86:28:b8:
6e:69:b8:b6:53:c4:3f:7a:a1:86:aa:46:f8:4f:20:
53:a4:2d:d5:77:5c:92:bd:b1:c7:71:f8:51:5b:78:
48:16:26:dd:00:ee:d8:9a:9b:7b:5f:65:5c:69:89:
d5:9e:99:da:2e:16:ea:04:d5:43:6b:e0:8c:ae:9a:
a7:a2:92:73:a6:3f:90:84:1c:4a:fd:fd:61:4b:cf:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:38:C5:1E:AA:A3:11:7E:CB:9B:3F:24:63:3F:99:C7:61:66:C5:3C
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/PjjFHqqjEX7Lmz8kYz-Zx2FmxTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.20.0/24
Signature Algorithm: sha256WithRSAEncryption
34:07:43:f4:88:04:ce:3d:0c:b2:20:af:4f:4f:19:20:af:e3:
cd:cf:34:db:d5:ae:3b:15:92:ec:62:45:74:62:6b:b6:36:6b:
3a:72:90:1a:ff:c0:44:c0:9a:35:eb:df:af:b0:af:e7:1f:5f:
58:aa:62:9f:d6:01:73:eb:54:7c:24:0f:e8:24:e2:8f:00:1e:
0b:79:ef:0d:86:a1:bb:94:fc:44:b8:15:46:48:1a:2f:de:2c:
d0:b9:93:e3:37:ea:dd:11:61:c9:73:f8:ad:dc:47:16:12:40:
92:8c:8a:de:f8:96:54:8f:c0:96:e5:4a:29:9d:04:c6:82:52:
14:a2:ff:b7:b7:92:50:f9:b1:8e:ab:56:2e:89:c1:37:23:22:
ee:94:d5:94:09:b4:e5:c4:37:d2:e4:14:ca:87:82:db:a5:64:
7a:a2:e0:58:d5:45:32:a8:b3:cd:9b:c0:73:7c:be:43:75:68:
b1:bd:37:9c:96:c1:c8:46:71:f9:0e:12:14:8b:16:7a:71:cb:
85:78:83:9c:3a:a9:5c:79:01:bb:56:62:37:e4:f7:59:50:2f:
b4:ef:3e:82:f7:4a:e1:40:7d:be:f9:c5:dc:c9:8e:99:2e:bb:
ca:c3:47:d9:d4:72:d7:21:81:59:56:44:48:d6:c3:c7:0a:a1:
d5:2e:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:10:01 2024 by rpki-client on console-fra.rpki-client.org