Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/QbcnVchoyN0cVG4t-Cpcz1RY6Os.roa
File: QbcnVchoyN0cVG4t-Cpcz1RY6Os.roa (raw, json)
Hash identifier: ou7oLUzujfaRRRMQxXRzv0UIRNClcI3a4LrJARbCbno=
Subject key identifier: 41:B7:27:55:C8:68:C8:DD:1C:54:6E:2D:F8:2A:5C:CF:54:58:E8:EB
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0188B82CCD36F39D4B9299C0C5AB2CCB2304
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/QbcnVchoyN0cVG4t-Cpcz1RY6Os.roa
Signing time: Wed 14 Jun 2023 04:32:03 +0000
ROA not before: Wed 14 Jun 2023 04:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 05:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:2c:cd:36:f3:9d:4b:92:99:c0:c5:ab:2c:cb:23:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jun 14 04:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41b72755c868c8dd1c546e2df82a5ccf5458e8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:85:c7:78:59:e0:db:59:a0:f9:0e:70:c5:
19:b2:c2:5f:e9:0c:7b:2a:5f:6c:c8:e9:39:20:a3:
f1:28:4c:53:85:9a:1f:c5:1f:17:02:c2:a5:c0:1f:
a3:27:e7:d2:ae:77:8f:33:f5:0b:05:05:3a:db:a4:
15:3e:1e:4e:03:2c:bd:23:63:5b:70:a7:69:42:7c:
ca:87:24:7f:d5:69:8b:9f:0f:7c:b0:c4:9b:04:d0:
b3:c2:c3:f9:e8:de:d5:00:ea:fc:ed:5d:12:53:31:
0e:cb:86:bd:27:8d:79:95:92:ad:13:6b:68:47:b8:
cc:c2:fd:8a:b4:39:84:06:90:91:9e:12:a7:f5:17:
8f:d5:0f:cc:99:15:e6:15:6b:db:e6:11:48:09:08:
de:9f:eb:4a:1d:9c:1b:15:e1:6e:dd:da:8b:9a:dd:
98:89:72:6a:fa:68:6a:f9:73:f7:50:ff:8e:df:b5:
b1:60:03:78:60:22:7b:64:3d:d5:f3:ff:80:69:1c:
8c:91:6c:82:dd:eb:b0:f4:f6:ea:f6:7f:93:71:64:
c7:dc:4d:95:3f:13:0c:ba:0f:33:d2:9c:38:09:52:
37:8d:58:7e:c3:67:0d:14:53:3e:32:0e:0e:67:94:
bf:bc:15:cf:63:de:b4:20:f1:e6:1d:72:77:67:77:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:27:55:C8:68:C8:DD:1C:54:6E:2D:F8:2A:5C:CF:54:58:E8:EB
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/QbcnVchoyN0cVG4t-Cpcz1RY6Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
24:af:dd:a1:e7:d5:f3:05:48:6d:57:ca:70:9d:05:f0:ed:a0:
af:f5:7b:25:3a:ee:25:38:b7:47:92:e2:8a:98:dd:f2:51:1c:
54:b5:c6:c5:3a:92:ee:19:18:c3:5e:25:d6:86:5a:5e:8b:76:
f4:2e:7f:f4:3b:b3:a7:ab:47:81:50:3e:c9:a9:f9:43:0f:a1:
44:0e:68:21:ea:c5:69:06:b2:c5:d8:dc:c3:3a:33:90:bd:e1:
23:d8:8d:a5:55:21:1d:c0:a1:f7:40:db:21:49:27:ff:6e:70:
a9:28:83:03:4a:6b:62:28:67:72:04:8c:5c:e6:d2:bb:4d:e2:
0b:cc:57:fd:5c:81:1f:ce:00:c2:4c:18:fc:42:b7:c4:5f:4b:
bd:22:cd:59:c0:f7:52:5a:47:61:ff:6b:15:e3:e2:07:12:a0:
d0:9b:e1:08:5a:77:0f:5b:e5:3f:8c:d4:29:d6:ce:43:e8:9b:
e5:a5:8c:43:b5:1e:7c:98:37:10:c7:37:c2:ea:6f:61:f9:6d:
3f:a9:15:a2:3f:53:d7:be:fd:5c:6d:06:61:c3:13:7e:6c:ab:
f2:e2:eb:28:ed:ab:cf:6b:41:5b:dc:cb:36:3a:22:71:9c:74:
e0:31:f2:f7:e5:ae:80:9a:55:98:40:d7:10:43:27:3b:b5:c4:
6e:1d:49:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org