Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RnjcBTT32zZ8rjUB2xeRPxef8eQ.roa
File: RnjcBTT32zZ8rjUB2xeRPxef8eQ.roa (raw, json)
Hash identifier: jRG7FC59CHOsG7HRT/DJWfM4Ajwz18Ix30ppBF3h4Tc=
Subject key identifier: 46:78:DC:05:34:F7:DB:36:7C:AE:35:01:DB:17:91:3F:17:9F:F1:E4
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018D6A61944D0E5DD5F874ADF7414530437E
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RnjcBTT32zZ8rjUB2xeRPxef8eQ.roa
Signing time: Fri 02 Feb 2024 15:13:16 +0000
ROA not before: Fri 02 Feb 2024 15:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203758
IP address blocks: 83.147.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:61:94:4d:0e:5d:d5:f8:74:ad:f7:41:45:30:43:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Feb 2 15:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4678dc0534f7db367cae3501db17913f179ff1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:1a:1d:c9:f9:1f:85:6a:ef:a8:2a:a8:3e:
a2:f0:a5:e7:d2:ab:34:8b:99:26:29:0a:09:82:a3:
c5:67:cd:2a:3c:50:3a:af:4e:0c:00:37:d6:e9:16:
ed:a6:da:06:37:0d:52:20:e7:2d:bc:b6:4b:96:53:
55:e3:a5:a6:26:a9:ca:95:b5:8b:d1:3a:a6:db:1e:
24:03:b6:27:40:93:bc:07:42:75:c6:7d:cc:08:9e:
7c:06:a9:b1:81:bb:7a:ec:8d:fe:40:ca:b4:19:52:
fe:f5:17:42:cb:12:b0:d8:a5:81:f6:96:c7:d1:2e:
b0:98:6f:5d:9f:54:cd:0e:69:f2:d7:47:33:de:74:
6e:32:03:63:8f:6e:6b:8e:17:bc:76:ba:1d:68:60:
15:ab:1d:95:5e:37:ff:04:e2:d5:ed:f1:ff:29:4c:
d0:7e:6f:93:b0:38:6e:95:92:9c:1c:de:31:60:ae:
68:03:9e:2a:44:4d:3d:1a:6d:48:4a:e9:87:4a:d2:
1a:51:0c:59:55:34:5a:19:f8:f0:15:fd:8b:45:1c:
b2:ed:a0:4c:65:6c:04:73:5c:63:f0:47:57:0d:fe:
b9:e9:f4:36:5a:00:39:e3:75:0a:ce:12:5f:ef:fc:
16:44:f8:51:3c:70:9d:c7:f5:4b:fc:8c:f1:09:59:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:78:DC:05:34:F7:DB:36:7C:AE:35:01:DB:17:91:3F:17:9F:F1:E4
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RnjcBTT32zZ8rjUB2xeRPxef8eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d3:c5:f0:63:7b:3d:00:95:21:cb:74:58:9d:c2:53:86:8c:
18:8d:e9:90:83:53:4e:f5:d8:04:73:5d:bf:7e:4c:70:3b:77:
ad:6b:29:af:4c:40:0b:0e:26:d8:3d:7e:2f:59:86:95:a4:74:
9a:2c:3c:33:e3:f8:02:d0:d1:a7:83:4e:df:5d:90:81:c7:f0:
a9:20:b7:e2:ca:d6:41:60:d9:d7:42:d2:7f:f5:6c:08:3b:63:
ee:68:af:dd:81:d1:de:a0:a1:a5:a6:e4:70:90:68:1a:75:f0:
b8:a8:b1:7b:a1:8b:00:67:4a:52:57:7e:e9:43:d2:03:8d:5b:
fc:9b:bd:27:e9:ec:6e:cf:af:e2:19:0c:68:bd:2b:4a:7c:17:
c3:b2:cb:29:81:58:d9:8b:d4:d6:93:5b:ba:6b:0c:95:f2:8d:
59:40:e7:ae:27:a4:0a:eb:28:f2:be:5a:8e:10:c6:c2:d8:76:
41:dc:90:0f:80:fc:e7:a5:00:ab:65:53:b4:88:e2:25:d7:3a:
8f:f3:b0:16:d1:f9:de:63:23:04:32:f8:d0:3f:fa:81:0f:5b:
2f:a1:87:48:e0:af:ac:fd:21:0e:17:9f:e5:1a:04:b3:60:f0:
42:c7:5c:92:37:2f:fb:0a:a3:b3:99:c4:ef:cc:af:c3:34:d7:
cb:0a:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:25 2025 by rpki-client