Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/TraPrs3BV2-i4O3cThDn1vt5q-E.roa
File: TraPrs3BV2-i4O3cThDn1vt5q-E.roa (raw, json)
Hash identifier: neRzWUu+DvAjvpyKKTlWciYYDhYPqfE/en9tiJIaxGw=
Subject key identifier: 4E:B6:8F:AE:CD:C1:57:6F:A2:E0:ED:DC:4E:10:E7:D6:FB:79:AB:E1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01891F118A712E5E8E75A38DC1FD717830DD
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/TraPrs3BV2-i4O3cThDn1vt5q-E.roa
Signing time: Tue 04 Jul 2023 04:03:10 +0000
ROA not before: Tue 04 Jul 2023 04:03:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 83.147.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:11:8a:71:2e:5e:8e:75:a3:8d:c1:fd:71:78:30:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 4 04:03:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb68faecdc1576fa2e0eddc4e10e7d6fb79abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:05:16:a7:62:4c:2a:b5:3a:09:59:8a:dc:
0e:66:f2:59:83:e3:3e:45:fa:f6:75:4d:22:8a:f1:
ad:20:16:3f:a4:84:51:16:c9:35:7c:0a:23:ae:f2:
06:b6:d6:9e:39:23:0e:b4:4f:8a:4e:49:04:ea:2f:
86:e6:35:7a:19:0e:5e:70:d4:60:48:72:55:bb:bd:
93:2d:22:f7:6d:e5:19:54:2a:9f:87:01:c7:44:84:
e6:34:b3:9d:01:c6:c1:6b:a4:56:bc:34:80:5d:37:
0c:aa:9e:b8:0b:85:a2:92:23:29:2f:d4:64:5b:7f:
a4:e0:de:de:3a:84:44:97:a1:30:17:32:b2:4b:b2:
9f:70:6a:5c:da:de:15:42:9b:47:9e:c0:88:4e:24:
03:12:ba:66:eb:ce:e8:83:29:89:1e:8f:44:83:3f:
1a:53:4b:e9:8c:cd:9b:ed:e6:0b:31:8d:3a:60:01:
93:44:7a:0e:5c:f4:22:02:57:49:98:43:e1:42:7b:
fc:df:88:d4:81:a3:81:4b:36:d0:1f:c7:74:22:96:
73:97:17:57:8f:b3:4b:1a:0e:b1:aa:a0:24:7e:0e:
cc:7e:99:5b:95:4c:23:96:fc:0c:e9:1b:35:61:ea:
b9:85:88:bd:49:fe:f8:68:d8:50:e4:70:8f:f2:9a:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:8F:AE:CD:C1:57:6F:A2:E0:ED:DC:4E:10:E7:D6:FB:79:AB:E1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/TraPrs3BV2-i4O3cThDn1vt5q-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:23:c6:58:a9:78:98:39:2b:46:da:ef:1b:12:01:a4:62:2a:
ce:a0:4b:d6:e4:50:b5:da:e7:30:dc:32:56:95:75:db:b8:4f:
38:c0:77:f0:95:bb:e6:de:23:fc:32:09:f8:d4:37:87:ab:4b:
9b:fd:03:df:ae:b0:32:02:27:ce:69:b9:4a:e4:78:d7:9d:39:
a0:34:85:6e:30:c3:a3:35:3b:d0:6c:f5:3c:7f:41:1a:b0:2f:
9d:f7:1e:3e:9f:c9:ab:00:d2:11:64:72:ea:b2:61:c9:3d:ca:
a0:b3:41:ca:18:fe:45:f5:0d:71:b8:58:22:4e:44:18:c9:4a:
33:9a:75:7e:a3:81:a1:77:b8:97:7b:4d:e7:30:c5:14:fa:69:
98:fe:1b:6c:f6:34:09:72:69:a5:81:3b:f6:94:7d:ff:71:05:
28:ce:84:8f:4f:a0:46:51:f8:c5:e2:52:ed:ab:2d:b9:1d:2f:
4e:6b:cc:de:d7:b7:11:5d:94:fb:6f:f4:c2:4b:bc:7b:0a:58:
e3:38:ca:b9:0c:c7:2f:d5:70:ff:78:93:55:94:6b:dc:0e:f3:
e1:d3:39:a1:07:4d:9c:b7:3a:04:41:22:06:2e:b7:ae:cd:55:
d3:28:73:3a:83:8b:97:5d:38:71:bc:45:f2:84:ed:e3:db:66:
ad:66:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 07:52:09 2023 by rpki-client on console-ams.rpki-client.org