Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/kH_GFg8wu2I1jxSzSKrkq7NdhrE.roa
File: kH_GFg8wu2I1jxSzSKrkq7NdhrE.roa (raw, json)
Hash identifier: 9ThFQp+m/NZjtxw1fZAhZmoqlcs6mFeW8egdXEA74BA=
Subject key identifier: 90:7F:C6:16:0F:30:BB:62:35:8F:14:B3:48:AA:E4:AB:B3:5D:86:B1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94ABA8A41BD7DAC76C88B9172A86F55
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/kH_GFg8wu2I1jxSzSKrkq7NdhrE.roa
Signing time: Tue 02 Jan 2024 08:29:27 +0000
ROA not before: Tue 02 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393427
IP address blocks: 83.147.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 05:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:ba:8a:41:bd:7d:ac:76:c8:8b:91:72:a8:6f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=907fc6160f30bb62358f14b348aae4abb35d86b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:3a:a7:13:37:c7:16:62:14:b8:a6:4d:e5:
8c:32:46:42:76:5c:55:3e:a8:8b:b5:66:38:f8:1d:
35:c2:fa:89:73:44:d0:a9:d6:e9:2a:92:51:82:a5:
2b:ec:ce:d3:9b:ed:b9:3a:34:0f:d5:1b:0a:9f:20:
57:3c:9c:32:9a:40:f0:33:96:60:c6:ca:47:d1:c9:
a1:32:7a:8d:bc:0b:5b:fd:8d:dc:1c:e5:c5:bc:31:
d8:c5:f9:28:e9:1f:53:02:93:28:56:37:94:26:f3:
94:9d:e2:4f:f3:51:50:66:83:bc:76:8e:1b:46:94:
29:16:f6:ae:fa:16:7b:fd:7a:dd:d9:3c:02:32:6d:
01:75:67:67:ef:9e:ed:48:d2:1d:bf:a0:f8:31:7c:
58:af:a6:b1:a0:90:a1:22:36:5e:a9:06:9e:26:66:
aa:63:01:81:53:b7:1c:7b:a9:e7:9f:9e:2e:69:51:
17:77:fd:9f:0e:99:53:54:f6:56:ec:62:18:41:95:
90:a9:27:da:f7:1a:d3:dd:01:04:fb:ad:95:dd:31:
24:06:11:2c:f3:75:5b:eb:c3:51:cb:fb:ce:54:c5:
d0:f3:41:12:5a:d1:9f:c9:68:30:e7:e6:aa:39:10:
de:94:43:51:c0:e8:38:71:c3:70:d4:81:37:45:b3:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7F:C6:16:0F:30:BB:62:35:8F:14:B3:48:AA:E4:AB:B3:5D:86:B1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/kH_GFg8wu2I1jxSzSKrkq7NdhrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:0f:91:73:2d:11:ec:ac:41:0b:a0:c2:f9:69:a0:f2:6d:b5:
0a:13:ef:04:97:00:3d:f0:90:17:14:b1:05:c7:73:36:d3:9e:
9e:c0:45:62:44:a0:a3:a9:52:d4:0d:ec:7e:85:c3:9d:13:1e:
2e:be:d9:17:3d:1b:39:b4:d5:39:ff:de:ed:f1:9a:56:7c:0a:
e0:63:5f:52:45:ed:99:a1:cf:0a:a0:e8:6c:1a:ef:c6:ea:df:
88:5b:dc:7e:27:79:48:ba:00:5d:3e:f5:4a:96:7c:d2:43:8c:
f7:f8:71:67:a3:2b:77:97:25:d9:12:5e:65:58:15:42:60:81:
2e:1c:e8:c8:5e:38:fd:2d:9b:32:dd:b6:96:80:02:a3:10:09:
28:1a:59:e8:16:39:55:f4:d3:0a:06:3f:2e:15:10:1a:6f:87:
89:02:ef:1f:4c:83:d7:86:e7:e1:36:12:93:b8:22:7d:06:a9:
7b:15:ea:40:34:fe:5a:83:be:78:15:03:98:11:f0:d5:d6:24:
d7:fe:ca:07:28:6a:4e:ac:c1:3f:01:c1:e0:b1:df:45:47:1c:
64:e9:26:44:fd:2e:89:df:df:f6:b6:ad:54:ec:83:7e:35:ce:
60:9b:da:89:01:c8:1b:92:3c:78:86:7f:6e:4d:b2:08:e3:79:
f4:ca:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org