Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/j0NeZPYM57rfOnylmJKYIbJ_3UI.roa
File: j0NeZPYM57rfOnylmJKYIbJ_3UI.roa (raw, json)
Hash identifier: 7B+6SRFEpfPd542tLUoeKeil4a6Pu8vxO6QzuoKlSDg=
Subject key identifier: 8F:43:5E:64:F6:0C:E7:BA:DF:3A:7C:A5:98:92:98:21:B2:7F:DD:42
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018967939580680DAFBF291499A5D8FA0537
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/j0NeZPYM57rfOnylmJKYIbJ_3UI.roa
Signing time: Tue 18 Jul 2023 05:57:52 +0000
ROA not before: Tue 18 Jul 2023 05:57:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.12.0/24 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 04:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:93:95:80:68:0d:af:bf:29:14:99:a5:d8:fa:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 18 05:57:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f435e64f60ce7badf3a7ca598929821b27fdd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:97:e9:35:f7:59:32:f6:98:94:28:03:75:
44:2d:6c:27:76:76:b7:42:2b:22:1b:c8:45:47:66:
e1:70:22:a3:5a:b8:ea:84:1f:df:bd:77:b4:07:1b:
bb:bf:8f:af:56:80:4b:57:ba:0f:82:fd:15:eb:1d:
8e:76:bd:71:9b:06:6e:b5:f5:6d:61:35:1c:b7:aa:
c9:16:8f:74:b1:61:7d:59:44:91:34:71:48:2a:fa:
a9:70:a2:b9:c7:95:df:72:ce:cc:f8:22:a3:c2:ec:
d9:e6:70:ae:64:f6:01:7b:1d:f9:d3:83:61:1d:e0:
b6:5f:ed:e4:59:3a:24:96:d2:96:0e:f9:7f:77:b6:
f2:16:6f:da:25:5a:fb:6f:fb:14:c0:5a:26:3e:63:
c1:91:ad:27:b5:5d:71:52:15:40:95:24:87:e7:30:
d1:14:c3:da:c4:ad:ac:ef:1a:c8:9a:0b:42:62:e9:
a6:03:46:e3:78:0a:85:84:fa:d3:21:1c:9e:73:45:
35:d0:ba:35:4f:1d:8e:7a:78:71:5a:4b:16:fc:ad:
4b:76:c3:bf:53:cc:24:c9:92:5e:66:a4:ae:39:b9:
f9:8d:3f:9d:62:7b:a0:a7:4f:8d:c9:6a:f4:4a:a4:
82:48:bf:ad:3a:fc:fb:aa:81:6a:d1:4b:4c:ee:88:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:5E:64:F6:0C:E7:BA:DF:3A:7C:A5:98:92:98:21:B2:7F:DD:42
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/j0NeZPYM57rfOnylmJKYIbJ_3UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.12.0/24
83.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
46:f8:75:3a:3d:39:2b:43:75:5f:75:c2:cd:db:24:53:41:12:
80:dd:e6:74:03:5c:5b:5a:be:0c:de:ca:4a:48:41:4d:01:f9:
ac:66:d9:ac:7c:d3:94:f3:61:fa:36:22:10:ab:e4:af:9f:55:
dc:cf:0f:bb:2e:84:84:6a:d9:25:ce:05:32:42:5c:7c:f7:22:
32:fa:ae:56:06:6a:e5:a7:b4:a1:42:45:0e:54:09:92:51:d2:
c1:f7:9a:8c:7f:08:c2:45:97:8f:d5:1a:db:60:c0:2a:36:4c:
e2:d0:53:08:4c:ea:e9:1f:ef:57:8a:18:37:c2:3c:b3:d6:a0:
ee:c7:3d:c1:18:42:f3:3d:a1:80:9a:ac:34:c1:13:63:40:51:
f8:52:0f:92:aa:28:ea:4b:bd:9a:96:02:1a:47:db:16:86:52:
71:16:42:bf:a2:8a:98:a2:6f:7c:a8:4f:45:49:88:cc:23:32:
a1:f7:c6:cd:62:d5:23:54:53:10:38:bd:39:b4:07:c6:14:e9:
8e:9e:7b:5a:27:92:c5:d2:85:db:60:5d:fd:83:57:d8:b3:b8:
b8:57:1d:cf:6a:02:20:a5:0a:0e:18:7e:ac:09:f1:05:eb:5b:
32:e0:dc:06:0a:20:ea:22:86:3c:ce:d3:04:ff:3c:3e:8c:c6:
93:b3:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org