Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/f6wKMXVM8x7PzBFW4GvhD1MsRN8.roa
File: f6wKMXVM8x7PzBFW4GvhD1MsRN8.roa (raw, json)
Hash identifier: bO9eS7balwM9fnrW2i2C/ssV/Aev6V4xXZAW96iScG8=
Subject key identifier: 7F:AC:0A:31:75:4C:F3:1E:CF:CC:11:56:E0:6B:E1:0F:53:2C:44:DF
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018735648B022D72DA19794BE32C3E1642D5
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/f6wKMXVM8x7PzBFW4GvhD1MsRN8.roa
Signing time: Fri 31 Mar 2023 01:59:54 +0000
ROA not before: Fri 31 Mar 2023 01:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 16:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:35:64:8b:02:2d:72:da:19:79:4b:e3:2c:3e:16:42:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 31 01:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fac0a31754cf31ecfcc1156e06be10f532c44df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:7c:23:22:00:22:da:9a:f8:dd:2d:66:1a:
cb:9d:1a:1c:a4:a7:2f:29:31:71:0f:80:88:c6:e0:
d0:0e:9f:74:18:c1:11:7e:96:7c:5b:fb:55:ab:a7:
4f:91:66:cf:ee:66:ac:d6:07:62:06:5d:65:33:57:
6d:ab:53:e7:6c:07:0a:5f:6b:93:9f:f7:cc:aa:24:
c5:ea:69:4c:c9:c7:46:09:07:36:e0:50:89:b1:d8:
b6:ff:9d:30:bc:cb:63:89:67:ad:cd:f6:cc:53:6f:
6e:ed:5c:5d:d2:33:6a:bc:41:59:8f:be:ed:c7:d5:
72:be:95:6f:2a:43:24:0f:e0:70:7d:7a:96:d4:55:
0c:3f:08:e8:08:ce:91:69:6c:9e:f1:9d:8e:95:bb:
f3:ab:8d:17:bb:9f:77:b1:8d:ac:60:06:79:15:da:
09:ac:c5:1f:cc:73:f5:3a:17:65:56:d8:1e:6c:a9:
68:ce:c1:a9:4a:42:30:5e:e0:c1:9d:04:f3:41:ae:
2d:16:43:72:19:e2:bb:6c:c3:b3:96:8b:fc:30:36:
f1:b5:7a:85:7b:cf:be:fa:84:85:c6:70:25:69:fd:
97:dc:fe:89:52:63:0a:f9:56:61:c1:03:cc:d6:5d:
5f:91:12:13:68:6c:c4:77:b5:4e:c8:18:6d:ec:20:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:0A:31:75:4C:F3:1E:CF:CC:11:56:E0:6B:E1:0F:53:2C:44:DF
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/f6wKMXVM8x7PzBFW4GvhD1MsRN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
Signature Algorithm: sha256WithRSAEncryption
06:93:85:69:c6:49:21:66:9c:57:e5:3b:d0:9e:da:6e:b3:f2:
8a:6c:af:55:4c:1f:d7:e8:d5:3f:ce:8d:81:3e:85:26:0b:c0:
1e:1f:5d:da:f6:2c:f1:9a:74:ed:d9:38:2f:42:93:cc:cf:4f:
60:9c:87:d9:0c:18:a4:ad:0f:46:52:c0:aa:8f:fc:1d:f1:b3:
a1:59:c6:98:5a:68:f2:b7:03:69:d6:de:00:ed:20:27:07:df:
9a:f0:7a:64:31:c7:cf:1d:95:bf:5e:ee:a5:65:d1:d9:30:7b:
45:f4:5e:c1:7e:6c:db:b6:48:c7:be:1b:76:51:e2:56:cf:ce:
09:66:8a:85:6c:b0:96:37:a8:1c:04:8d:9c:22:1f:26:94:75:
07:54:2a:54:9f:58:33:3e:60:09:29:fb:24:88:c5:bc:6d:7a:
df:67:49:b8:4d:66:76:f3:19:e1:8a:28:d2:95:dc:6f:95:41:
f3:4d:9d:0f:08:e2:cf:bf:11:9e:99:96:67:ef:38:0a:79:38:
1b:ba:50:02:c5:2b:1d:27:7a:0a:34:a6:02:f8:7a:7c:68:9d:
19:d5:0d:97:78:2f:e7:0d:bf:26:ae:d3:1e:fd:80:8b:20:26:
23:98:cb:d1:79:5c:f9:7b:7f:a5:d0:e9:20:7f:50:87:dd:78:
92:88:59:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org