Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/em98yoJliYnsbApN8xpTni_ST3s.roa
File: em98yoJliYnsbApN8xpTni_ST3s.roa (raw, json)
Hash identifier: CbTWFRPj3Kjm16uDKE0YIIv8jwvQhG/CfSwsFhV5Ly8=
Subject key identifier: 7A:6F:7C:CA:82:65:89:89:EC:6C:0A:4D:F3:1A:53:9E:2F:D2:4F:7B
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018D5E5B03CDBC35D309F832F76EACA96749
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/em98yoJliYnsbApN8xpTni_ST3s.roa
Signing time: Wed 31 Jan 2024 07:10:39 +0000
ROA not before: Wed 31 Jan 2024 07:10:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272082
IP address blocks: 83.147.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 Feb 2024 05:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:5b:03:cd:bc:35:d3:09:f8:32:f7:6e:ac:a9:67:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 31 07:10:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a6f7cca82658989ec6c0a4df31a539e2fd24f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:7b:e4:b1:7d:38:fb:ad:57:56:2e:fa:61:
90:ca:67:1a:c3:ed:61:8a:cb:90:1d:f9:45:45:07:
b2:60:9a:65:64:1b:79:f6:f1:8d:7c:ac:0b:76:51:
ad:c7:10:df:60:21:5c:95:57:07:89:38:d9:08:c1:
af:3b:4b:6e:bc:05:c7:73:85:55:5e:ec:bb:d6:05:
68:5a:c8:d2:86:60:f9:53:21:a7:10:a5:e6:88:b0:
3a:ef:da:6d:c0:d8:5f:2e:b2:1c:cd:c8:b5:55:a8:
61:90:83:68:7b:2c:77:52:1e:50:68:94:05:58:05:
34:b4:93:24:81:83:84:e7:32:99:34:8a:be:ad:65:
e3:0c:6c:c6:93:98:e1:b4:01:a9:31:95:49:86:7f:
dd:16:da:86:ae:03:42:11:b5:36:18:e6:28:97:a0:
d1:9c:4a:71:ca:f5:46:d5:e0:90:2c:9a:04:f1:46:
41:b6:02:1a:cf:ea:19:e8:09:bd:26:0c:9e:5e:59:
5a:c3:8f:01:d1:16:07:34:3c:93:c6:b4:81:62:8a:
21:aa:37:99:2c:7a:21:08:7d:3f:19:ee:b0:7d:a0:
c2:6f:b0:32:09:35:43:eb:95:b7:a3:4c:e2:8d:b0:
26:44:62:46:63:f8:bd:3b:10:11:dc:e3:0e:c1:2f:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:7C:CA:82:65:89:89:EC:6C:0A:4D:F3:1A:53:9E:2F:D2:4F:7B
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/em98yoJliYnsbApN8xpTni_ST3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:43:b9:ba:0f:b9:c1:5c:27:a5:a8:6e:9e:8c:54:b8:87:ab:
ba:fe:63:1f:e3:bc:33:d5:81:0c:21:50:ae:85:62:cf:f8:2a:
71:6e:23:ac:bb:8b:a4:45:25:d9:5b:91:a1:dd:aa:27:f8:b6:
f5:ca:cd:87:0d:75:15:95:31:59:86:86:d3:58:a9:ba:3e:9c:
db:94:02:6d:69:35:17:04:eb:c9:60:e5:7f:55:7e:61:ba:0f:
00:21:d0:9f:79:d7:97:c5:a9:7f:10:fa:5d:c8:95:35:c7:8f:
e5:b7:77:dd:11:8b:2f:aa:de:3f:d6:e7:e7:a3:a0:de:ba:7f:
04:81:01:73:82:f9:93:f3:0f:8c:fe:e2:bb:e1:8a:25:e8:5c:
80:ee:ad:ca:54:67:51:bb:b3:29:80:c3:56:a3:68:b5:5e:2a:
1a:65:4b:95:7d:ac:21:7c:ae:c8:76:78:0d:be:52:8e:3d:b6:
eb:bd:78:0c:b8:de:1e:0d:a9:27:66:fa:24:97:e2:35:0b:f4:
c6:21:45:48:4e:6c:2a:00:83:c7:9e:20:03:d5:1d:e2:3b:8d:
94:db:10:94:32:dd:ab:6c:e8:40:85:5f:d1:21:0f:51:61:e3:
ad:df:d3:85:2a:af:25:72:c8:4b:36:50:7e:e6:23:11:f8:e9:
68:c4:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 09:42:55 2024 by rpki-client on console-fra.rpki-client.org