Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/_y9iJOMBumWnotNPDJWrhZkXNpQ.roa
File: _y9iJOMBumWnotNPDJWrhZkXNpQ.roa (raw, json)
Hash identifier: 1j/dng3QX55lGcRN2QzWOXqG1+/pAWgZIM8yqxTrzRw=
Subject key identifier: FF:2F:62:24:E3:01:BA:65:A7:A2:D3:4F:0C:95:AB:85:99:17:36:94
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018C80CF6BB5B67BCE1DFD4BD21862B4181D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/_y9iJOMBumWnotNPDJWrhZkXNpQ.roa
Signing time: Tue 19 Dec 2023 06:42:06 +0000
ROA not before: Tue 19 Dec 2023 06:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.48.0/22 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 14:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:cf:6b:b5:b6:7b:ce:1d:fd:4b:d2:18:62:b4:18:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 19 06:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff2f6224e301ba65a7a2d34f0c95ab8599173694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:2e:4e:f2:4f:18:0b:db:ec:c5:46:9f:44:
ca:f1:c3:f9:79:fe:70:9a:db:38:77:db:78:97:a8:
33:64:1b:e5:1e:65:86:f1:8e:bc:d3:ee:d1:c4:b2:
b7:57:a9:59:19:5d:8b:4b:1b:8e:fb:50:ec:a1:99:
02:9c:48:59:3a:7d:46:fd:ed:b9:69:58:5f:98:a4:
ad:6b:9e:b1:21:9f:4d:8f:aa:24:ff:4b:da:c6:6a:
c2:0c:3b:88:2e:79:c0:d0:92:df:f8:8d:59:b7:1c:
c5:cf:74:3b:c2:f7:67:da:2e:b3:d1:45:c0:9a:ae:
c7:39:53:ac:03:0c:6c:1b:55:74:b2:11:d4:54:c6:
a0:17:3f:a0:cf:95:65:3a:2f:b6:fa:4b:02:bf:6e:
29:45:f4:04:50:59:3f:e2:35:22:8b:3f:25:8a:bb:
b4:90:2e:fd:1f:31:8e:d2:af:e8:bd:c2:0d:d5:4d:
88:76:31:f7:57:f6:82:80:72:4e:56:57:26:6b:79:
20:f8:81:e8:a5:c0:bb:4e:d8:3a:be:4b:18:aa:96:
ce:e3:aa:76:95:5b:38:0a:3d:47:cd:ac:1a:4d:cb:
26:5a:c4:80:db:dd:04:80:1b:b0:69:99:7b:d2:9b:
31:be:ac:81:66:df:8f:a9:7b:d1:ab:e4:f6:96:54:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2F:62:24:E3:01:BA:65:A7:A2:D3:4F:0C:95:AB:85:99:17:36:94
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/_y9iJOMBumWnotNPDJWrhZkXNpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.28.0/22
83.147.40.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:5e:79:fc:3c:12:bc:39:06:21:b9:15:00:aa:0b:d8:70:af:
19:92:45:2e:13:0c:a2:1c:f8:68:f7:d1:fe:f5:90:ae:28:19:
e3:b2:9b:17:67:8a:e2:2f:e9:ba:fc:4d:ae:69:b2:c6:1a:1d:
11:9f:78:13:e6:29:62:14:ea:aa:94:17:3c:46:1c:dd:6d:fe:
d6:d4:8d:40:f1:08:0d:0f:30:a7:d4:4b:fa:cf:36:67:f4:81:
a9:86:53:b8:14:89:2b:2d:75:c8:26:38:8d:e1:7c:68:6c:3d:
74:41:dd:58:0e:ae:a3:2d:e4:d3:37:41:70:13:5b:b2:fa:ae:
b9:49:13:b7:6c:5a:32:21:b9:11:21:e7:fa:0c:29:58:1c:f1:
eb:e6:1d:b4:20:14:cd:ab:06:0a:c6:f3:d7:91:e4:c6:e7:3d:
8f:61:12:79:01:fd:37:f5:aa:04:1c:9c:5f:5e:03:62:b0:bd:
92:50:6b:69:53:eb:25:b8:f6:12:09:bc:67:f6:9c:25:f1:71:
bb:18:0e:8d:b4:86:68:c3:01:e0:08:aa:6e:7e:6b:90:4e:42:
fd:e7:76:45:09:28:6d:c7:a8:0f:a7:57:61:63:8f:e0:6e:37:
12:6a:6f:5d:47:74:7f:01:51:67:62:42:b2:9b:b9:1f:9e:1d:
77:16:7e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org