Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/eu4m39L4BT4mZs2cBniREDGdQrg.roa
File: eu4m39L4BT4mZs2cBniREDGdQrg.roa (raw, json)
Hash identifier: 8wIXBdtGSAZfn1gnvRgyBN1yDlNr/FvLuMIpwgzji4E=
Subject key identifier: 7A:EE:26:DF:D2:F8:05:3E:26:66:CD:9C:06:78:91:10:31:9D:42:B8
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0187A2D1A71694D7055CCEEC7695C41DEF1F
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/eu4m39L4BT4mZs2cBniREDGdQrg.roa
Signing time: Fri 21 Apr 2023 07:57:41 +0000
ROA not before: Fri 21 Apr 2023 07:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Apr 2023 09:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:d1:a7:16:94:d7:05:5c:ce:ec:76:95:c4:1d:ef:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 21 07:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aee26dfd2f8053e2666cd9c06789110319d42b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:09:7e:c7:17:57:7b:46:5f:93:83:ae:03:
57:28:6a:1c:bc:3e:85:67:24:9f:c0:09:db:f6:8d:
43:45:54:f4:29:15:0f:b3:9a:7e:2d:ea:f7:97:09:
13:ca:58:e3:b8:77:8c:36:47:03:bc:8d:f4:a2:63:
b7:3b:aa:34:6a:8b:89:2e:91:f4:2d:82:3e:8e:6a:
27:f4:36:97:c5:c6:96:0b:37:32:05:2e:d4:ff:97:
c1:86:ed:b3:9b:89:cf:5f:ab:20:98:c3:b4:d1:c0:
e1:60:ed:eb:34:b8:2a:15:d6:8c:c0:09:5e:d9:f3:
c6:08:5d:d0:7a:6d:fb:ad:a2:b0:b7:fc:33:4f:1f:
72:2d:3d:5d:18:91:63:83:8f:a1:0d:f4:11:10:29:
2a:cb:79:b9:e2:7a:a5:cb:89:e1:29:c9:10:e2:fb:
8b:37:68:3a:0a:cd:17:23:97:ab:13:9c:12:24:a8:
01:c0:9e:9d:02:c1:99:14:1c:39:f2:29:0d:ac:07:
18:86:08:fd:17:8c:1f:b0:2d:6c:94:30:f4:27:0d:
b8:ea:33:42:64:52:d9:4e:54:31:a1:5b:db:ef:82:
43:99:01:81:aa:10:8b:72:5e:60:2f:d9:8b:ce:0b:
82:24:c6:70:9a:b1:bf:4c:7b:7f:d5:24:2e:a9:69:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:26:DF:D2:F8:05:3E:26:66:CD:9C:06:78:91:10:31:9D:42:B8
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/eu4m39L4BT4mZs2cBniREDGdQrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:63:64:01:ed:82:87:6c:28:ea:f1:e9:c9:75:7e:e0:d9:4b:
d6:c3:0b:ed:b1:ba:e5:ff:a1:26:a8:2c:d4:2e:0a:b1:65:2a:
c2:9c:fc:44:56:f0:ed:cb:72:fb:67:ff:18:13:ca:d9:34:fd:
e2:ec:d4:7a:13:e7:d1:0a:69:95:47:8f:bb:05:41:5f:3b:a1:
5d:f8:69:6f:f1:99:d6:54:72:ff:4a:16:ad:5c:fe:04:ba:cf:
97:f6:77:90:a4:5c:70:d6:b0:c5:95:79:ff:01:8e:5e:96:d7:
ad:d7:ea:46:ce:31:c2:9f:b7:59:10:e1:cd:09:30:ee:ca:8c:
9f:e3:de:7d:21:67:64:db:44:d5:4e:1a:49:9a:d1:ca:62:03:
65:5c:1c:81:0a:20:d4:aa:1c:ca:a9:78:da:19:d7:e8:87:d0:
10:de:b5:ed:5d:f9:3a:74:e2:aa:d3:99:5f:e7:6d:37:6e:74:
30:7c:0a:9b:8f:9e:6f:2b:98:65:dd:d1:0b:a9:fe:42:12:57:
51:4d:8e:e0:4c:86:0e:f3:9b:10:05:9c:e8:3c:59:50:e2:73:
77:5f:bd:77:7f:e8:02:e7:d7:69:c8:a8:cc:e7:12:b8:78:a7:
ad:93:82:59:4d:9f:e3:de:43:26:f3:50:a3:04:9d:68:fa:84:
5a:ee:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org