Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ei7AlGLJh2SW8NIFoFeqww5CRak.roa
File: ei7AlGLJh2SW8NIFoFeqww5CRak.roa (raw, json)
Hash identifier: AMjgJQdGuAWEjxPMNhWCreN5t5kaucXSqMSY0+LiaQ0=
Subject key identifier: 7A:2E:C0:94:62:C9:87:64:96:F0:D2:05:A0:57:AA:C3:0E:42:45:A9
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB1DD18F8265AF034D27A0515006C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ei7AlGLJh2SW8NIFoFeqww5CRak.roa
Signing time: Tue 02 Jan 2024 08:29:24 +0000
ROA not before: Tue 02 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 83.147.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 05:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b1:dd:18:f8:26:5a:f0:34:d2:7a:05:15:00:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a2ec09462c9876496f0d205a057aac30e4245a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:fd:29:08:04:c4:b2:42:7f:a2:b8:e8:0b:
84:2a:ef:18:bc:93:bd:5b:22:e1:72:c1:cf:62:f8:
fa:22:85:a3:b6:81:c8:60:7f:a1:10:73:22:cc:a4:
2f:0d:e6:fe:2f:63:ad:b4:bb:6f:f4:d0:7e:26:f9:
ac:a5:06:f0:a6:71:bf:af:3b:01:96:e3:45:98:59:
21:2a:2f:fc:4d:e2:4a:e1:22:11:be:82:0a:dd:de:
dd:2c:61:9e:25:53:9d:65:90:a6:4e:69:6a:b2:f2:
3c:b7:9e:f9:08:8f:1e:46:e0:78:d9:61:2d:90:ba:
23:fe:cc:e7:00:be:f8:33:d8:b0:e4:7d:2f:35:aa:
84:46:6d:b4:94:fa:03:3f:91:ad:44:f7:85:9e:46:
83:fa:af:f4:01:3f:02:c1:d9:da:46:28:c3:04:45:
b1:de:9d:af:66:79:c7:76:de:9f:1d:4b:14:af:62:
19:63:2d:18:d1:2e:1c:9e:46:3f:20:ba:5b:7a:6f:
86:0a:f3:bd:f0:c5:3f:90:9f:49:ce:ca:5d:bf:4b:
29:23:78:35:50:f1:f8:5d:a6:a3:88:2f:ba:0b:8d:
1a:a8:8f:0f:92:f5:39:cc:7d:45:30:76:f4:4a:4d:
89:ac:be:af:03:8c:9f:f9:75:27:c0:26:f1:a9:78:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2E:C0:94:62:C9:87:64:96:F0:D2:05:A0:57:AA:C3:0E:42:45:A9
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ei7AlGLJh2SW8NIFoFeqww5CRak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.36.0/22
Signature Algorithm: sha256WithRSAEncryption
39:f8:d0:bc:42:cd:9a:c5:2d:64:b8:26:87:c3:05:87:19:50:
c4:f4:7c:5c:2a:23:a0:86:19:c4:b2:80:ad:eb:63:74:16:0f:
e7:31:c7:aa:69:9f:d1:06:e0:0b:f6:6e:de:41:a9:7d:b7:60:
a3:eb:b6:9e:5a:5f:67:4c:3c:c2:49:04:f7:0f:86:af:48:3b:
f0:f4:51:cd:9d:14:a9:03:84:a6:f3:5e:79:9f:4f:23:97:42:
74:11:b6:2b:48:2e:b3:91:29:c7:44:61:0b:e2:86:6f:b2:04:
98:9c:15:9a:d2:7c:49:3e:b5:ec:7c:9e:5d:f5:2a:2b:94:d2:
f2:71:61:3d:b3:e1:56:f9:db:33:95:11:01:47:0e:4b:b3:72:
ba:ea:7f:ad:55:d9:a9:10:58:66:ab:3c:62:5c:f8:52:85:a3:
b1:53:20:9f:20:f9:d7:e6:53:dd:e6:8c:b0:fd:b2:e6:13:21:
ce:84:a8:95:57:91:36:e7:34:70:18:91:78:bd:ad:3e:0e:90:
c3:14:b5:0f:5f:a2:8b:29:6f:ff:3b:7a:ca:39:1a:49:f2:cf:
7e:40:95:92:4f:2d:9d:e4:ba:1f:1c:b3:64:46:08:9f:53:a3:
e2:a3:15:0b:71:10:4a:d1:e4:97:6c:4d:a9:88:e9:27:4b:84:
50:5e:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org