Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/VQ0lfmGa75FascDvFdoq_yTmFWk.roa
File: VQ0lfmGa75FascDvFdoq_yTmFWk.roa (raw, json)
Hash identifier: JOpiv2M4AJEakGKu/saXU0NI5jihU6H6+Vy8i1UtFuk=
Subject key identifier: 55:0D:25:7E:61:9A:EF:91:5A:B1:C0:EF:15:DA:2A:FF:24:E6:15:69
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0187B97D278B654687E4098727D6F74BDDB2
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/VQ0lfmGa75FascDvFdoq_yTmFWk.roa
Signing time: Tue 25 Apr 2023 17:36:39 +0000
ROA not before: Tue 25 Apr 2023 17:36:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Apr 2023 04:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:7d:27:8b:65:46:87:e4:09:87:27:d6:f7:4b:dd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 25 17:36:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=550d257e619aef915ab1c0ef15da2aff24e61569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:bd:ce:6b:76:1c:a5:2f:73:0b:ce:cd:4f:
23:44:22:ba:03:16:6d:80:c2:2e:30:99:cf:d1:e5:
40:5a:bc:b9:2a:e1:52:3b:25:30:60:78:24:8d:e4:
c5:a1:66:9a:6d:d2:8a:2a:aa:5e:ef:8a:30:84:73:
9e:3b:4f:66:86:7b:60:70:16:fa:46:75:b9:21:29:
b6:f9:3a:fc:41:28:fd:00:59:84:10:74:63:f0:9e:
05:ce:74:cf:eb:c1:f0:ad:6d:13:19:40:c4:d2:78:
6b:bc:ab:30:45:e9:24:33:33:85:0e:30:ae:aa:13:
9c:0f:62:43:17:b0:37:e0:d1:4d:18:61:10:14:b2:
8f:4f:b3:3e:34:af:2e:5e:b4:b5:45:15:b8:bb:13:
c4:7d:ac:e1:87:ea:0f:bc:f4:67:51:f3:18:b9:86:
9c:1a:1c:52:5e:d5:87:f9:20:81:d4:36:10:b9:d0:
d1:a7:83:a8:20:68:f7:71:d7:68:21:02:07:b0:89:
4e:b9:0b:12:d3:bb:24:c7:a9:cd:7d:b4:0b:18:ad:
ae:a5:a7:9a:95:84:43:4a:8b:2d:c6:6b:9e:e0:00:
3f:76:09:e4:88:c6:8d:b5:3d:f1:03:a0:82:bf:dd:
40:60:a8:05:c6:45:f1:85:64:c8:de:5f:78:8b:85:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:25:7E:61:9A:EF:91:5A:B1:C0:EF:15:DA:2A:FF:24:E6:15:69
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/VQ0lfmGa75FascDvFdoq_yTmFWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
72:7f:29:58:41:b2:53:4e:5a:79:31:73:86:2d:3f:02:16:d2:
4a:02:10:84:e9:53:d2:33:e0:0a:f2:e0:89:7c:97:e9:d3:58:
c2:70:3a:be:a1:85:31:11:a8:79:95:ac:1d:0e:2c:d8:31:83:
89:08:25:8c:60:5f:42:f5:d6:c9:e4:05:88:6c:4a:f1:74:cd:
88:68:90:1c:d9:ce:7d:9e:ed:1b:39:d4:ad:a5:8e:cc:c3:bb:
91:54:96:a6:0f:c0:b5:e5:34:ae:24:99:45:97:25:c0:5f:d0:
4c:22:93:1b:6d:6a:62:91:94:ae:1c:fc:81:57:52:f3:3f:b1:
96:4a:b7:3b:8f:0a:ff:2c:f2:71:a5:d8:15:aa:5c:7c:4e:c8:
63:e4:ef:0d:bf:32:e3:42:da:43:4c:c3:6d:3a:78:16:2d:6f:
88:bc:2a:7a:e5:24:97:3e:0e:40:bc:59:b5:34:ba:eb:2d:a5:
c7:32:7e:65:41:54:05:2f:9b:f2:02:95:c4:b1:86:77:a1:98:
88:67:a7:84:8d:14:1e:6a:27:8e:33:64:0b:0e:34:41:ab:58:
5a:bb:b2:b5:6c:f9:30:b1:a8:fb:ba:ca:9d:e1:5b:77:cb:0e:
e7:76:f0:28:10:72:5c:2d:96:14:67:fa:67:d6:7e:b9:e0:da:
2f:d8:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org