Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/TyXLMDCsO1Yk_e3z63zmMJ9ON3Q.roa
File: TyXLMDCsO1Yk_e3z63zmMJ9ON3Q.roa (raw, json)
Hash identifier: l46mEmRpkE9v8uOqJ6kMwaRCELmCUQHcL00SvMFWfmo=
Subject key identifier: 4F:25:CB:30:30:AC:3B:56:24:FD:ED:F3:EB:7C:E6:30:9F:4E:37:74
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018875427FF3B535F73FAF802D667242DC87
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/TyXLMDCsO1Yk_e3z63zmMJ9ON3Q.roa
Signing time: Thu 01 Jun 2023 04:41:12 +0000
ROA not before: Thu 01 Jun 2023 04:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 83.147.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:42:7f:f3:b5:35:f7:3f:af:80:2d:66:72:42:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jun 1 04:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f25cb3030ac3b5624fdedf3eb7ce6309f4e3774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:72:06:a9:56:af:8b:0e:0d:d1:77:99:56:ca:
f5:c6:38:af:28:2e:f7:99:7c:4c:af:b4:59:3f:a6:
8c:b7:f8:25:0b:75:5b:79:3f:2b:e0:85:b5:18:70:
53:36:8c:11:1c:de:1b:c3:57:36:77:c2:31:2e:e1:
69:a7:ef:85:2e:ef:9d:56:ec:ea:c5:ab:97:21:05:
83:0f:54:f4:c8:18:00:06:23:6c:8c:84:44:1f:8a:
52:8b:ec:33:e2:b3:52:a8:88:73:bc:ed:f5:d3:a9:
dd:9d:38:39:1e:b1:eb:63:89:48:4f:47:4f:e6:0e:
8b:3b:22:0f:91:26:2c:60:ca:8b:4c:35:82:0c:76:
5a:c8:24:7c:46:08:af:72:a4:8c:ae:ff:ea:01:83:
6a:72:4a:7a:af:55:9b:d6:96:c2:1b:fb:55:5b:88:
5c:dc:b4:ca:3a:79:2e:f2:74:9c:6f:bb:9f:ac:90:
a5:97:ea:21:9c:5b:77:86:9a:93:43:6c:5e:31:5f:
a9:7b:7f:5b:58:67:2b:ed:a4:21:bf:91:aa:a6:1b:
da:d5:1e:ae:77:2f:ed:6e:3c:3b:13:83:a1:4b:10:
65:af:0c:5c:fb:93:24:3b:36:bf:6e:18:c7:89:88:
7e:a2:08:79:aa:81:f1:75:df:7f:d9:a9:4e:88:17:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:25:CB:30:30:AC:3B:56:24:FD:ED:F3:EB:7C:E6:30:9F:4E:37:74
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/TyXLMDCsO1Yk_e3z63zmMJ9ON3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:02:53:82:8d:ad:d2:df:3e:c7:74:32:83:98:eb:70:a5:90:
72:9b:e0:dc:75:51:49:bb:fd:70:d1:3a:61:b7:7b:e7:83:c1:
de:25:97:fc:c8:a9:22:c1:12:07:5d:eb:6d:ce:92:97:83:8e:
53:13:ff:fd:a1:99:f3:26:44:fd:92:75:91:a7:a2:0e:bb:63:
e4:2a:62:61:33:24:b1:6f:19:6d:12:00:10:12:a1:cc:11:9f:
b8:15:96:70:6a:10:5e:44:b1:de:ef:76:db:21:2c:f0:28:ab:
8a:ee:10:18:77:71:d0:78:b1:2c:45:db:41:2d:68:51:9f:3a:
fd:51:e1:1a:ee:93:16:46:e6:7a:01:85:3a:8a:ac:5b:8f:7b:
0c:1c:6e:c9:3b:6b:dd:fb:45:d9:7a:3b:f5:4a:57:02:84:cc:
41:a6:12:09:29:84:c8:1e:0a:27:fc:61:33:7a:50:f6:f2:40:
77:f8:97:fd:75:4f:ab:6e:ba:f1:f0:0d:ca:ab:95:c9:04:c9:
c2:ed:24:2c:1b:48:fc:61:fc:a0:ec:b8:57:bd:ff:e2:48:72:
73:85:0b:b5:1e:5b:8a:2b:19:ed:e9:01:b4:5d:ad:6b:c0:57:
99:c9:7c:9d:09:4c:e7:2b:dd:22:a8:74:6d:d6:ec:5f:60:c9:
24:d9:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org