Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Rm9Paxq9SlEJ51txofllCryJGqs.roa
File: Rm9Paxq9SlEJ51txofllCryJGqs.roa (raw, json)
Hash identifier: Mu1e5ZIDCRVGK8sZvJQj5hUYnZ0kPAN96A+aCvaSxVg=
Subject key identifier: 46:6F:4F:6B:1A:BD:4A:51:09:E7:5B:71:A1:F9:65:0A:BC:89:1A:AB
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01856CE63CDFD4BC3C521AD9441D77E8F6FD
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Rm9Paxq9SlEJ51txofllCryJGqs.roa
Signing time: Sun 01 Jan 2023 10:35:06 +0000
ROA not before: Sun 01 Jan 2023 10:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 83.147.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:3c:df:d4:bc:3c:52:1a:d9:44:1d:77:e8:f6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 10:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=466f4f6b1abd4a5109e75b71a1f9650abc891aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:a6:71:eb:fe:c9:80:f6:94:30:20:50:17:
b5:81:f4:8f:fc:93:72:2e:e5:56:a6:f2:d8:ce:45:
0a:a9:87:24:37:55:3d:57:1d:89:50:b6:df:76:e1:
e0:4f:4f:23:49:cc:67:0b:c0:2e:94:27:cf:7b:f1:
4e:95:2d:cb:95:3a:b6:81:a6:58:e6:f1:81:40:1a:
92:f8:a9:3b:6d:2f:09:eb:2a:e5:57:f6:1b:5c:58:
9b:82:77:24:5b:11:9e:1f:b7:1b:2c:38:ca:30:43:
8c:34:ed:8c:04:18:78:4b:90:3f:31:26:f2:9b:18:
f6:cb:fe:39:82:53:60:f8:8b:01:5a:be:87:fd:a2:
12:96:6e:07:12:29:a8:84:8c:cb:8a:94:71:30:6a:
4a:9f:da:17:32:18:f8:42:36:e1:ec:a3:06:23:15:
ae:c7:f5:54:56:1e:a8:52:18:44:e4:96:1b:cd:79:
a2:68:b2:a9:89:13:5b:d7:04:00:f9:5f:05:e2:77:
4a:ab:6c:c5:9c:bb:7e:87:87:32:e3:b8:d9:fc:53:
4b:c0:74:7d:da:44:fd:af:64:37:ae:75:94:fd:6c:
ae:02:44:33:ca:b6:67:a0:a2:28:b3:9f:c9:bc:30:
63:fd:28:7e:f2:c3:ce:d7:e3:2c:e9:e2:4e:f6:c4:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6F:4F:6B:1A:BD:4A:51:09:E7:5B:71:A1:F9:65:0A:BC:89:1A:AB
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Rm9Paxq9SlEJ51txofllCryJGqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
48:01:c9:75:05:75:73:8f:a0:7d:dd:76:03:85:fe:46:ea:e1:
e7:3f:93:bd:92:a0:6b:fc:dc:bb:08:75:a9:47:c8:0d:91:6c:
8b:a8:60:15:c1:d7:5f:79:41:e0:b1:10:36:5e:e8:1e:bf:fe:
36:59:c7:e4:95:12:1c:70:68:b0:b8:c7:b7:57:dc:27:fe:8f:
8b:e5:48:b3:60:25:b3:56:73:26:da:83:fb:63:40:18:ca:02:
a9:ff:61:ba:6b:55:72:c9:6a:66:fa:95:45:73:0b:7c:30:a5:
b6:01:1e:fb:7f:7d:a5:8c:98:8e:67:e4:ec:d2:e2:18:a4:1e:
d3:1d:62:a4:f0:b0:ea:e3:08:a1:5e:6a:aa:5f:3d:18:b3:d4:
4f:01:d9:7b:d0:4b:b7:1f:08:92:32:24:8d:11:e1:3c:a6:00:
ac:80:e2:c2:41:16:1b:b6:a6:82:56:cc:30:1b:2f:dd:08:96:
24:51:29:82:96:87:cf:80:8c:ee:90:9b:c3:5a:72:8a:6b:55:
04:e6:74:c3:51:3a:ab:a8:ea:05:a9:72:de:14:fc:56:38:db:
28:e1:0f:57:84:3a:13:3f:fc:c1:f4:29:ca:5e:a7:ea:cc:b1:
96:17:5b:86:5f:1a:ed:c8:0c:ac:11:37:ef:85:b9:d1:9f:e4:
3c:36:ee:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org