Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/nju6VpIrKvINiBGv4TWbxq5fFjo.roa
File: nju6VpIrKvINiBGv4TWbxq5fFjo.roa (raw, json)
Hash identifier: jZcB5uoxFA2/jkyf7JeaghrfLdWRkv5xtue7w9qjk10=
Subject key identifier: 9E:3B:BA:56:92:2B:2A:F2:0D:88:11:AF:E1:35:9B:C6:AE:5F:16:3A
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0185BF991886C6C8E24C4715B0DE84FB580B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/nju6VpIrKvINiBGv4TWbxq5fFjo.roa
Signing time: Tue 17 Jan 2023 11:59:19 +0000
ROA not before: Tue 17 Jan 2023 11:59:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 83.147.22.0/24 maxlen: 24
83.147.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jan 2023 07:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:99:18:86:c6:c8:e2:4c:47:15:b0:de:84:fb:58:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 17 11:59:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e3bba56922b2af20d8811afe1359bc6ae5f163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:8f:54:d0:5e:58:87:eb:7d:15:6a:e4:09:
b1:35:25:97:31:f4:d3:81:d9:13:8f:16:95:13:14:
1a:2e:f2:73:95:5a:68:bf:38:12:ce:3c:1c:8d:9c:
14:dc:bb:01:fd:59:6f:8b:a0:03:ee:4f:e9:8b:74:
ba:e5:84:0a:b7:d7:fe:2f:44:10:bc:24:76:4c:07:
5f:d0:d8:fa:32:63:51:31:54:b1:d9:cb:2a:31:d5:
f8:40:bb:3d:39:a2:72:ca:dd:e5:de:2c:13:a2:fd:
27:f9:08:df:e2:0e:e4:7a:a5:bb:58:ed:c5:6b:93:
b2:fb:76:ef:a9:cf:78:38:da:22:2c:2f:b9:07:a5:
84:31:07:fd:27:dc:9d:28:10:c1:d3:35:85:3a:a4:
57:c6:40:60:73:82:65:ad:be:44:96:80:e0:a3:9a:
56:1d:e5:11:86:fb:c0:42:20:89:fa:36:22:b4:d5:
0c:a4:e8:cd:04:6e:7e:37:1d:53:e7:f5:37:fe:d8:
b3:43:b9:f7:34:15:03:e1:c0:fc:ae:1a:a7:24:0e:
14:8d:24:6a:fb:fa:cf:ec:2a:90:d0:1e:42:77:d5:
96:7d:e7:d0:8b:9c:96:fb:b2:7a:d6:7b:17:fb:e5:
53:00:54:8d:88:3b:f8:44:f3:8f:bb:37:66:61:c5:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3B:BA:56:92:2B:2A:F2:0D:88:11:AF:E1:35:9B:C6:AE:5F:16:3A
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/nju6VpIrKvINiBGv4TWbxq5fFjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.22.0/24
83.147.25.0/24
Signature Algorithm: sha256WithRSAEncryption
14:db:aa:0c:9a:24:10:37:61:16:30:a9:f1:09:24:50:88:d0:
24:a7:db:46:36:79:8d:b0:fc:de:bb:5d:95:1e:ab:8d:2f:1e:
bd:23:6a:c3:e2:81:af:35:e1:2f:da:27:11:cc:d1:de:3f:16:
fa:8e:01:11:e2:b5:d1:f6:eb:ca:27:59:b2:b8:ce:12:0b:9c:
3b:4e:b3:59:1d:4a:2a:4d:82:28:4f:7a:f6:26:31:31:e6:9a:
2a:36:1c:ef:31:4d:7c:e7:f0:56:14:98:1f:f1:19:2f:78:2a:
09:5b:66:8f:db:86:de:41:56:ce:61:91:97:51:d6:52:3d:1b:
c9:02:66:75:40:18:d0:4f:92:a4:f0:6c:eb:4e:49:af:ef:90:
75:09:95:74:a7:71:92:d0:da:20:54:40:bb:da:f2:32:17:c1:
a0:3e:69:5d:28:f9:98:b1:d8:71:23:d6:c9:20:62:e5:8c:c5:
70:69:9a:3e:a8:24:79:9a:4f:94:c2:1d:02:e7:dd:26:9e:2b:
18:1d:49:94:ad:88:1e:2e:5e:74:8e:fb:b6:f1:ef:f0:03:51:
e0:e1:bf:7d:1d:cf:2a:7f:2b:f6:b8:38:a7:0f:6d:74:88:23:
bb:b3:0e:34:7d:55:ca:ac:cf:89:15:ab:16:1a:a3:9b:21:7c:
48:a4:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org