Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aaDh1tbmqtdeyzTTlYMgN3sZqnE.roa
File: aaDh1tbmqtdeyzTTlYMgN3sZqnE.roa (raw, json)
Hash identifier: ycV9s/KvSlcXb3Zpjm3muT9dEwNKO6h9K0iQ4IN6L1Y=
Subject key identifier: 69:A0:E1:D6:D6:E6:AA:D7:5E:CB:34:D3:95:83:20:37:7B:19:AA:71
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01856CE63EC8EB1A8B3C38A1B2E815BD8098
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aaDh1tbmqtdeyzTTlYMgN3sZqnE.roa
Signing time: Sun 01 Jan 2023 10:35:06 +0000
ROA not before: Sun 01 Jan 2023 10:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 83.147.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:3e:c8:eb:1a:8b:3c:38:a1:b2:e8:15:bd:80:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 10:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69a0e1d6d6e6aad75ecb34d3958320377b19aa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:bc:50:15:9e:49:7b:b7:db:a0:c3:ec:b1:
28:97:8b:84:ec:72:5d:ce:0f:08:9a:e9:9b:ef:11:
50:90:75:05:ed:a8:b1:a5:c9:c1:20:37:1d:0f:32:
91:be:2e:a3:a3:db:35:3a:8c:d3:07:34:6e:19:a0:
c1:2e:5f:cd:1f:9e:92:12:c4:d6:cf:67:9b:bf:51:
af:63:f7:1e:8d:ee:3f:bf:b5:ad:33:06:46:ff:40:
a2:cc:3a:1a:6a:ca:ad:73:8b:e2:88:2b:b1:d7:71:
e4:64:cd:b3:b5:cf:cb:0c:df:72:bc:4e:ee:3f:31:
b6:b8:14:52:3e:8c:96:31:08:57:50:6a:fd:c9:d0:
77:20:1d:b1:18:32:0b:89:00:4d:17:13:3b:26:72:
95:0f:26:b0:12:b6:fa:62:ac:96:ac:12:4a:0b:d0:
15:c2:c2:1e:69:c4:ba:17:aa:b8:51:0b:81:e4:c3:
51:7b:21:ef:42:ba:36:6a:e8:3e:7e:59:54:8a:2f:
e1:5d:f5:b8:68:8f:b0:5c:aa:ab:00:50:0d:63:1b:
b4:89:cd:49:b0:f9:e3:22:ae:b8:fd:ed:b6:4a:77:
c4:16:2d:ee:6d:7c:05:05:34:70:4a:da:d6:80:ff:
2c:c6:94:65:f5:fc:8e:cb:64:b1:5a:29:4d:1d:e8:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:E1:D6:D6:E6:AA:D7:5E:CB:34:D3:95:83:20:37:7B:19:AA:71
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aaDh1tbmqtdeyzTTlYMgN3sZqnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.24.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7b:f9:16:b2:12:0c:3f:e2:bc:f3:38:2f:c3:25:0a:67:de:
f7:90:c5:f1:c6:d9:be:cb:90:08:b3:c1:34:25:ac:ce:f7:9e:
9a:bf:cc:77:0c:be:56:3b:9d:29:f8:60:74:b5:7b:78:f9:80:
87:50:7b:bf:c8:2c:dc:34:b6:ee:d9:60:27:29:e8:be:a8:39:
f4:41:60:47:d8:82:81:93:50:53:d2:97:b9:19:91:3a:5a:cd:
20:cd:60:6a:61:fa:de:be:fb:4c:b5:07:b1:fa:29:00:61:2e:
89:69:2c:13:0f:a4:ed:ec:f0:1d:a5:0a:a5:8a:a0:de:15:59:
df:3a:90:b0:c2:44:15:2e:3d:2e:9b:96:70:b2:c5:35:b1:65:
7b:f7:55:9f:c0:d3:43:b0:ca:fe:06:07:53:84:2d:71:6c:d5:
6a:3e:ce:73:00:20:5f:1e:bf:69:65:1e:14:7d:ad:91:c4:d8:
6b:95:df:4f:60:51:69:72:e8:db:2b:f0:6a:5d:b2:73:57:53:
60:6a:e8:80:cd:b8:ce:28:41:5a:be:1a:cd:b7:1d:3d:20:bc:
36:72:2b:6e:00:40:bd:4d:ab:c2:1b:00:ff:cc:0b:87:af:82:
03:31:48:6a:63:9c:86:86:83:59:9c:83:e9:5c:c4:46:e0:b1:
41:1c:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org