Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gfb9V7JtISlkQ3i5zP6ISnp_hdE.roa
File: gfb9V7JtISlkQ3i5zP6ISnp_hdE.roa (raw, json)
Hash identifier: Bm4YUd0arupW/hR4beMsoABpdhcNsrGgqPY3Q5gbpac=
Subject key identifier: 81:F6:FD:57:B2:6D:21:29:64:43:78:B9:CC:FE:88:4A:7A:7F:85:D1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB4D76282327713286DF5B08F7E11
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gfb9V7JtISlkQ3i5zP6ISnp_hdE.roa
Signing time: Tue 02 Jan 2024 08:29:25 +0000
ROA not before: Tue 02 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 83.147.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 05:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b4:d7:62:82:32:77:13:28:6d:f5:b0:8f:7e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81f6fd57b26d2129644378b9ccfe884a7a7f85d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:ba:46:04:0e:d4:1a:7f:a7:10:01:b1:4d:
d6:ca:b7:5c:2f:6a:a2:9d:0b:05:65:32:09:1e:d1:
a9:c3:6f:92:79:83:57:1b:69:37:d6:ae:aa:ce:70:
f9:29:4e:b4:93:1c:9a:4a:b9:07:c0:92:4c:7b:bc:
49:b3:98:8a:ba:e7:89:5b:14:fa:4e:44:01:07:81:
83:0d:7d:0e:2d:51:60:46:01:d1:3f:67:44:25:0b:
09:ac:16:71:94:04:1a:9e:ae:a2:23:74:50:70:27:
c6:a5:72:73:34:39:72:3b:68:39:ee:cb:7c:e3:8e:
87:69:aa:fb:2b:d6:96:e8:4b:ad:94:82:d3:56:ed:
94:2b:67:c1:45:32:7f:49:f3:e7:7c:3f:9a:72:bc:
7f:ba:d6:58:22:a5:93:c3:25:2c:f9:7e:97:fe:99:
01:67:21:6b:e4:f9:4f:36:07:10:18:0b:d6:78:61:
b1:c6:47:cb:ee:8d:3f:49:fb:d2:0d:48:a1:b5:53:
b6:ea:bb:f1:16:17:fb:7f:9d:7a:94:dd:ad:ec:b1:
49:64:6a:26:dd:55:0f:25:3a:a8:d8:71:81:6a:ff:
45:08:bc:78:f6:99:60:79:e6:a1:47:be:52:91:32:
c0:c6:41:ca:81:cc:c9:50:1a:5d:1f:42:21:43:42:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F6:FD:57:B2:6D:21:29:64:43:78:B9:CC:FE:88:4A:7A:7F:85:D1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gfb9V7JtISlkQ3i5zP6ISnp_hdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0/22
Signature Algorithm: sha256WithRSAEncryption
16:65:6b:bb:d5:53:ba:8d:94:04:8e:8a:c5:0f:47:59:7e:4c:
b6:2f:e5:27:83:f1:8b:69:18:39:36:65:64:2f:a7:80:0f:24:
a5:3d:be:55:2c:c4:42:a1:9a:0e:bf:da:95:b2:d9:13:24:43:
70:a8:4f:fc:de:b4:b9:03:32:69:c6:69:d6:ab:64:86:c5:46:
e6:c0:f7:cb:49:2d:0d:1a:5b:5c:7b:9e:16:19:20:43:52:e6:
33:e7:e3:ac:b3:fc:3b:9d:17:35:d3:67:d6:f7:6c:32:43:c1:
e2:e8:d5:af:a2:c0:30:c8:2f:54:c8:20:e2:e5:9c:b1:81:92:
87:cc:c3:c0:5f:2f:f2:b6:3b:6b:f5:43:d7:c9:a9:de:c8:24:
80:75:2e:d7:df:27:e0:3b:cb:ef:76:b2:f0:5c:67:b5:90:c3:
2d:f0:5f:0a:f6:da:f8:62:5d:c5:ba:98:a2:29:92:91:5e:19:
ff:9a:f5:1a:e6:fb:c9:db:63:12:f3:22:1f:2c:9e:90:6e:3b:
ce:13:7c:d1:46:59:d9:e7:35:22:d3:71:91:80:4a:47:6c:fd:
e1:41:b2:e0:c3:6f:74:22:aa:57:43:5f:36:04:99:a7:64:d1:
f1:d4:3c:fd:21:07:98:2a:bb:c8:23:09:13:88:11:e5:3d:09:
59:33:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org