Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ZlELufFQ9tgSfKdVMGv6aWlhtlc.roa
File: ZlELufFQ9tgSfKdVMGv6aWlhtlc.roa (raw, json)
Hash identifier: M1r+VaF62UQ1PNF704JdPDS2QKudzgfDQ5WtXv8yhBc=
Subject key identifier: 66:51:0B:B9:F1:50:F6:D8:12:7C:A7:55:30:6B:FA:69:69:61:B6:57
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018B8436F50F90BD88FC2ECA810FCCCBBCBD
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ZlELufFQ9tgSfKdVMGv6aWlhtlc.roa
Signing time: Tue 31 Oct 2023 05:31:15 +0000
ROA not before: Tue 31 Oct 2023 05:31:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64073
IP address blocks: 83.147.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:36:f5:0f:90:bd:88:fc:2e:ca:81:0f:cc:cb:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 31 05:31:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66510bb9f150f6d8127ca755306bfa696961b657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:e1:dc:67:7e:93:a2:62:6c:5e:de:1d:43:
5c:75:95:44:0a:ca:2e:a0:77:2b:4d:7c:d5:3f:02:
16:21:f4:59:9c:53:62:a1:67:92:1b:56:46:25:17:
c1:c0:02:d4:36:3b:1c:ac:48:52:15:1c:40:65:66:
26:29:b9:f7:67:39:0d:f1:5e:51:97:a7:a1:f8:68:
f5:df:05:8b:13:11:9f:70:13:9e:4c:71:09:34:9a:
02:b8:c2:5f:9f:22:6f:b6:d9:07:d1:2e:02:49:88:
69:27:69:a0:96:20:55:e6:66:d0:17:32:ac:ee:01:
c7:e4:12:de:d7:41:1c:84:ad:25:03:9c:00:b1:93:
81:93:97:35:db:69:e9:b4:dd:72:ea:2e:1f:e3:c3:
ab:83:4e:d9:eb:37:ed:11:95:32:70:cd:83:99:08:
2a:ab:de:f4:47:4a:cc:75:ac:57:5a:2f:d1:de:40:
34:62:9b:57:60:de:ba:e2:96:85:90:d0:62:3d:d7:
c8:ef:d4:9d:ec:4a:f0:da:84:9c:cb:6d:c6:f1:d1:
27:0a:35:23:7d:27:99:88:7f:b2:fb:78:ba:b9:af:
22:2b:e7:6d:f7:0d:32:7e:e3:52:8e:55:25:32:d4:
a8:64:48:9f:ce:08:f7:24:e6:01:7f:4e:93:1f:15:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:0B:B9:F1:50:F6:D8:12:7C:A7:55:30:6B:FA:69:69:61:B6:57
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ZlELufFQ9tgSfKdVMGv6aWlhtlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:cb:1f:2a:67:89:15:23:fd:70:61:1f:07:f8:ef:50:59:2a:
7f:fb:57:97:3c:f9:aa:f1:e0:88:10:4e:be:66:90:c3:68:00:
80:d4:a8:38:65:5f:74:d1:1c:54:80:65:38:8b:93:61:de:66:
9e:8d:6f:01:41:14:56:42:30:4a:d5:9a:36:ec:b5:d1:d5:1a:
65:ce:8b:9f:de:f6:d4:65:5e:a9:58:c2:a1:3e:75:d1:0c:51:
23:2b:5c:4f:ab:ed:6a:25:39:1b:d5:7b:2d:ba:73:f2:a1:b8:
30:d7:cf:1f:ae:3d:55:ef:10:10:c8:c9:42:d8:04:26:d6:28:
e5:3a:93:40:59:81:46:d0:c5:50:0a:c0:e3:b6:03:66:6c:3a:
3c:f4:1e:70:61:e8:08:e5:a5:fe:3b:89:d8:e4:12:1b:08:25:
ff:8f:6f:65:b4:3b:60:ac:32:25:3d:bd:5e:02:5a:7e:81:4a:
1b:c0:0c:af:b0:70:8d:a4:f1:44:f0:05:c9:b1:52:78:a9:47:
7f:31:c1:33:5f:37:21:68:b9:d4:e0:fa:46:1f:d8:e1:4c:bc:
6a:98:f3:87:ce:87:8b:e6:f5:eb:26:6e:65:89:8f:78:78:b3:
fb:1f:b2:8c:93:f3:9d:de:c2:1d:45:d7:fa:e0:a4:40:3e:1f:
7d:6d:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org