Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/X7piPEXWckkQXC_vfMVfC6M_edY.roa
File: X7piPEXWckkQXC_vfMVfC6M_edY.roa (raw, json)
Hash identifier: APSee31SugchX08mm8ZuB8iDCjdzkRwNjDXLD4GXF1w=
Subject key identifier: 5F:BA:62:3C:45:D6:72:49:10:5C:2F:EF:7C:C5:5F:0B:A3:3F:79:D6
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01876A09D6330E55B0BEE8D74AAA499C4EB4
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/X7piPEXWckkQXC_vfMVfC6M_edY.roa
Signing time: Mon 10 Apr 2023 07:20:42 +0000
ROA not before: Mon 10 Apr 2023 07:20:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 83.147.61.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 16:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:09:d6:33:0e:55:b0:be:e8:d7:4a:aa:49:9c:4e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 10 07:20:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fba623c45d67249105c2fef7cc55f0ba33f79d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:19:f1:6d:ca:62:5f:1e:f3:1a:fc:dd:2a:
9c:0b:4c:2d:77:53:b7:28:3b:3c:44:74:3a:b3:a8:
b3:4c:79:4c:11:dc:ed:84:83:a5:21:e6:0c:7f:fb:
41:3b:b0:ab:b2:a9:ab:8a:1e:27:97:ff:40:f6:1d:
8b:dc:9a:75:80:4b:45:e7:5b:3d:04:e6:fe:ef:28:
e8:48:fe:f5:e1:f9:61:f7:32:d8:4d:98:4c:5f:97:
af:66:b2:dd:44:0a:a8:81:59:78:5b:47:46:c9:7c:
3a:c9:ee:b3:2d:e5:3f:28:1c:b6:f6:56:42:d8:b3:
09:a4:e4:d0:69:e8:25:9a:a6:63:94:86:54:7b:89:
ad:61:7c:e6:b2:fc:d5:fb:83:cc:3e:10:b0:80:02:
fa:e8:eb:a3:28:30:37:73:8a:62:92:18:8c:85:be:
70:f1:15:5c:78:7a:fa:10:aa:d6:4c:ee:30:57:96:
f7:c1:79:f8:b7:07:53:3d:54:a0:82:6f:b0:2e:18:
ec:1a:5a:db:b9:a9:ec:33:13:5d:69:45:ce:15:68:
f4:44:33:85:51:54:7f:9f:87:1d:d6:a8:ba:99:42:
d9:1f:6a:07:48:a3:85:1a:38:7c:4e:5e:59:10:c1:
ad:cc:d1:11:cc:6d:45:89:a5:e6:d9:6f:db:30:5a:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:62:3C:45:D6:72:49:10:5C:2F:EF:7C:C5:5F:0B:A3:3F:79:D6
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/X7piPEXWckkQXC_vfMVfC6M_edY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.27.0/24
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b0:41:3e:81:ca:c4:6c:21:3e:93:c9:c3:56:b8:b1:3f:aa:
71:3d:90:fa:65:27:b8:30:5c:75:f1:c8:bc:59:6e:8d:92:f7:
8c:50:79:8e:ef:26:77:33:6d:17:65:90:f8:44:ca:b4:b4:c7:
ea:3c:f2:c3:bf:af:56:57:a9:98:35:ee:0b:47:8d:ae:f4:15:
77:61:e9:a1:10:62:32:1c:4b:d4:ef:9d:ca:3d:de:b0:9f:81:
b1:5a:50:41:6e:98:06:83:9c:b7:f2:0a:09:33:cc:52:b5:1f:
7c:95:33:3f:32:f6:a4:b1:3e:1a:e5:5d:2d:d8:c8:f5:4f:d8:
7a:ed:42:ae:c0:24:e4:de:72:26:28:cb:ef:23:0b:d8:4b:c8:
4b:a4:0f:6e:03:3f:18:ee:27:4c:60:d3:1e:6c:66:a1:0f:34:
e7:87:ef:e1:79:fe:0f:f0:24:fc:2b:67:a1:d3:42:b0:b0:b6:
5c:5e:0f:0f:fa:75:77:6c:68:96:4a:cb:ab:8c:0e:11:c3:bd:
ef:80:93:3a:bf:0d:12:6d:63:bf:05:6d:62:5a:a6:c4:27:c3:
08:9f:89:da:7c:a0:48:60:fd:dd:98:62:30:b7:6e:0d:c8:3d:
1d:56:48:aa:5c:c8:a1:f9:3c:e9:ce:b8:a6:1b:20:4d:f5:0e:
e0:56:30:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org