Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/XwQTzgpVwLkix-etZy6K1KX4__0.roa
File: XwQTzgpVwLkix-etZy6K1KX4__0.roa (raw, json)
Hash identifier: 3voKDdgilMRLA47nLWRBE1fKWVqYsoaLDFog6uayaJY=
Subject key identifier: 5F:04:13:CE:0A:55:C0:B9:22:C7:E7:AD:67:2E:8A:D4:A5:F8:FF:FD
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018C0F6CDBFD62FB3079D4A0E437EF5A2209
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/XwQTzgpVwLkix-etZy6K1KX4__0.roa
Signing time: Mon 27 Nov 2023 06:17:21 +0000
ROA not before: Mon 27 Nov 2023 06:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.12.0/22 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.28.0/22 maxlen: 24
83.147.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 05:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:6c:db:fd:62:fb:30:79:d4:a0:e4:37:ef:5a:22:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 27 06:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f0413ce0a55c0b922c7e7ad672e8ad4a5f8fffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:e0:d3:80:d0:f0:08:c4:c1:35:97:f5:bd:
46:f3:f2:ec:a4:77:2c:30:81:d3:6c:39:ea:77:e2:
31:db:3a:cd:fb:2d:71:e6:7c:97:0e:e5:30:8c:bd:
37:fc:b7:7e:c6:56:14:44:07:8d:35:99:d4:57:62:
20:e7:81:d4:52:9d:92:c4:39:cb:d8:3a:ed:97:d2:
78:d6:5e:49:c9:c2:1d:57:8f:58:21:a7:89:ec:35:
ac:9e:90:c4:b7:b5:8d:e8:47:46:a9:e0:59:4e:01:
82:00:a4:cd:9e:20:8b:d7:84:4b:be:e7:81:1a:dd:
6d:55:be:b8:c8:8e:26:e8:9c:b4:b8:9d:a8:75:46:
d6:cd:43:ba:6e:ef:70:8d:e3:14:39:59:cd:66:fb:
97:17:c1:1a:a3:2e:97:2b:28:5f:8e:43:ef:be:75:
5a:e5:d9:30:5a:49:9c:5a:e7:c2:4e:50:85:15:8e:
1d:00:b5:1a:a1:ae:f1:c0:9d:b3:73:b4:71:49:e2:
e7:84:e3:9e:c9:f1:a0:63:7a:e7:28:d3:74:54:58:
60:07:6d:44:55:4a:65:e4:d7:54:2c:cd:29:f5:69:
d9:76:ae:a3:3f:20:72:e9:a7:ba:2b:39:b5:5a:51:
0f:b4:b3:9c:5b:43:e0:aa:35:87:a4:7b:ab:47:75:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:13:CE:0A:55:C0:B9:22:C7:E7:AD:67:2E:8A:D4:A5:F8:FF:FD
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/XwQTzgpVwLkix-etZy6K1KX4__0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.12.0/22
83.147.20.0/23
83.147.26.0-83.147.31.255
Signature Algorithm: sha256WithRSAEncryption
8d:49:a4:b8:18:fd:b0:9f:55:45:1c:3f:02:71:14:20:5f:39:
9b:57:30:7a:21:a5:01:33:79:da:ed:aa:b2:61:4b:88:c9:dc:
99:c4:92:18:0a:c4:a0:b9:09:11:9c:d8:ed:11:ba:cc:f0:86:
ab:7d:00:6f:7e:47:96:01:75:bf:7e:22:57:ed:da:ff:9f:92:
a2:a3:82:f3:27:5d:f4:d1:cc:77:3c:04:44:5d:a5:9d:d9:11:
16:73:6d:0a:8c:ab:4a:7a:40:2c:62:20:ab:78:36:01:6b:fc:
37:5c:22:9d:b5:0a:38:e6:9f:62:ec:a6:fe:ac:3a:0a:7b:e1:
19:21:e7:8b:d3:0a:e6:7d:19:dd:cd:83:0a:7b:58:65:a5:4e:
1e:f8:59:f1:7c:5a:37:ce:b7:d2:1a:2a:db:6d:41:3c:a8:bc:
54:7d:f2:ef:0f:7f:2a:d9:f2:7f:32:bd:14:3f:9c:9e:bf:15:
a0:7e:b1:43:4d:12:04:16:cb:2d:66:d0:d9:99:89:89:9e:3b:
49:03:17:01:c8:d1:7b:55:c0:09:d4:19:a1:33:4e:87:70:6b:
8f:7d:ea:38:40:9b:5c:6e:23:be:ae:fd:12:c4:2e:ad:45:a5:
53:03:ca:73:7e:de:5d:3f:92:55:03:a1:6a:71:c5:4b:40:ca:
ab:d6:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org