Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gozpfivnaRmbVFxe3lWcssJ8mKc.roa
File: gozpfivnaRmbVFxe3lWcssJ8mKc.roa (raw, json)
Hash identifier: /7AXRROlrpZBGfAT4l2MMw0DQ6NxbqskO0qAbIb2OvE=
Subject key identifier: 82:8C:E9:7E:2B:E7:69:19:9B:54:5C:5E:DE:55:9C:B2:C2:7C:98:A7
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018C2AC411AE601352AF0D668947C171AF88
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gozpfivnaRmbVFxe3lWcssJ8mKc.roa
Signing time: Sat 02 Dec 2023 13:42:21 +0000
ROA not before: Sat 02 Dec 2023 13:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 83.147.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:c4:11:ae:60:13:52:af:0d:66:89:47:c1:71:af:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 2 13:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=828ce97e2be769199b545c5ede559cb2c27c98a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:42:22:50:db:b7:62:10:59:41:8c:4d:5d:
f0:ed:af:a9:dd:d3:1c:6a:bc:0d:05:0c:eb:d7:32:
3e:29:59:14:03:91:97:ac:1e:98:12:59:74:4b:48:
4f:dd:12:78:2c:4f:88:1b:14:77:49:96:fb:79:73:
57:07:b3:05:a5:4f:7b:b8:57:52:1d:c9:a3:b9:c8:
4d:3a:93:c7:88:1c:02:70:81:8e:78:b3:49:52:d1:
72:6e:9e:e9:85:6d:d4:53:db:cf:27:32:e0:95:79:
03:d8:77:a5:c8:5d:01:62:31:ed:07:80:17:8d:63:
8d:6f:d3:22:34:f5:2f:5f:e7:03:57:67:4b:1a:0c:
97:ec:e4:90:21:d3:61:90:ec:15:2b:b1:78:53:7b:
da:00:03:29:18:02:08:25:6a:67:fc:54:8f:22:88:
35:4c:ca:78:49:d4:d5:98:34:02:a1:b5:a6:27:45:
ef:0f:ec:dd:b6:0c:85:db:23:f4:93:56:af:73:9e:
7c:3c:32:96:67:4b:cf:51:ce:86:9c:a3:6c:1c:2f:
91:9d:57:be:ce:04:b8:66:b5:26:05:45:ed:5f:08:
2a:ed:0b:95:ca:89:88:3e:23:a6:b5:df:2e:4a:68:
17:ff:41:19:dc:0d:5c:77:68:a7:7e:e0:66:a2:33:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8C:E9:7E:2B:E7:69:19:9B:54:5C:5E:DE:55:9C:B2:C2:7C:98:A7
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gozpfivnaRmbVFxe3lWcssJ8mKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.20.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6b:6e:fa:05:fd:b5:e0:70:cd:5b:fb:0c:4a:35:53:a9:9e:
91:8a:8f:29:12:b6:0c:5b:8d:00:c6:65:10:47:be:e2:98:c5:
8b:29:a9:87:13:ca:81:80:81:bc:27:11:23:4c:e0:e6:9f:aa:
4e:a7:fc:e0:c8:3a:54:37:11:26:7b:ed:40:fb:b7:a5:6f:74:
c2:9f:b6:c7:71:07:93:f5:79:90:ad:f3:ba:8a:91:9a:c5:94:
84:0d:be:97:a3:45:6b:fa:7b:ac:6c:5d:c8:35:d3:b2:4d:cb:
30:72:06:59:7d:23:68:c9:98:9b:2e:bc:f0:43:36:34:9d:bf:
48:e8:09:d4:37:c1:d8:72:e8:65:49:ed:f1:da:3d:53:21:38:
b6:56:2a:79:48:8d:4c:b1:a5:9b:f6:26:a3:b7:9b:3e:47:ee:
4d:ec:3b:90:10:7c:21:7c:72:d4:60:1e:23:ad:9e:3e:72:70:
a2:c1:c5:5b:b1:a0:cc:1c:54:28:48:b2:dc:fa:24:29:49:37:
cb:48:67:9d:d8:c4:2c:27:07:92:86:c4:e4:e4:85:fe:09:17:
2a:51:13:63:aa:69:73:c3:b1:96:bc:9c:49:ec:86:2f:13:ff:
40:f0:af:d4:7a:41:f9:ad:b5:69:04:4e:ac:cc:ee:06:c2:a6:
0a:6a:ec:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org