Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/peNChW9Yyj0jHrViVv9VZtG4MQI.roa
File: peNChW9Yyj0jHrViVv9VZtG4MQI.roa (raw, json)
Hash identifier: qOYP4Kx0Dh1OkcNUXGKjb7TsmrvAzBG7fCFz+wMR+xU=
Subject key identifier: A5:E3:42:85:6F:58:CA:3D:23:1E:B5:62:56:FF:55:66:D1:B8:31:02
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018C2AC4111C1692DC20902EFA9DC4C7BA52
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/peNChW9Yyj0jHrViVv9VZtG4MQI.roa
Signing time: Sat 02 Dec 2023 13:42:21 +0000
ROA not before: Sat 02 Dec 2023 13:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 07:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:c4:11:1c:16:92:dc:20:90:2e:fa:9d:c4:c7:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 2 13:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5e342856f58ca3d231eb56256ff5566d1b83102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:5e:c4:ea:c4:5d:f2:e4:4f:9a:32:ee:33:
a1:6a:0b:c0:5e:0d:21:2a:72:1b:2b:1b:dc:63:50:
7e:a7:82:7e:bd:de:7c:7f:37:ae:5c:72:52:9f:5b:
4c:ab:8c:e0:35:72:1d:e1:2f:f0:f6:a0:06:73:67:
08:a1:da:68:2b:85:2b:f7:be:b0:e6:78:ca:9e:1c:
22:51:bc:b9:e4:41:d1:1c:c0:92:67:df:a4:a8:c5:
31:03:30:b1:67:dc:cd:78:75:4f:1c:3c:2c:cf:41:
d7:23:b1:f7:8b:27:9a:14:80:0d:08:c0:12:b5:00:
47:28:5a:5b:05:0c:06:65:87:c4:11:fc:86:dc:78:
b1:79:17:5c:92:67:6c:fb:96:76:29:77:6c:7d:6e:
d7:9f:94:12:79:f6:e4:9e:ae:63:80:c6:21:2b:3c:
45:5d:69:c9:30:94:e1:85:2c:32:aa:4d:5c:0e:88:
90:37:1f:a8:85:27:37:d5:c0:42:0d:f1:91:aa:19:
b6:a1:13:05:d0:eb:3e:c4:4b:ff:1e:69:5c:23:84:
41:20:e5:9e:19:35:19:52:ef:af:d2:14:d6:b3:ca:
b1:a1:73:cb:54:72:b9:8f:b3:e1:f5:0a:cc:47:d8:
96:4d:5a:43:e9:9c:c4:48:eb:98:b3:df:fc:66:a6:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E3:42:85:6F:58:CA:3D:23:1E:B5:62:56:FF:55:66:D1:B8:31:02
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/peNChW9Yyj0jHrViVv9VZtG4MQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:3e:f6:27:b7:c9:4c:b2:62:f7:ea:64:5e:39:af:4d:a7:c1:
3c:66:1a:fe:c8:c6:a5:a0:dd:98:15:e7:86:a9:26:c4:64:b6:
0c:24:a3:52:21:32:f7:41:e0:c3:50:b4:f6:c0:a1:54:53:39:
20:2c:33:83:b7:c3:9e:e2:a1:10:61:37:c1:a1:49:b3:46:3c:
72:e3:9f:65:f4:7c:f6:82:fb:72:1a:24:d4:86:34:74:57:6e:
87:18:1d:56:1b:f1:e5:ca:94:da:cb:21:59:52:c0:99:70:30:
d4:5a:a6:27:41:11:2d:7f:2a:a5:93:31:c6:fd:c0:0d:ca:49:
06:45:26:96:8a:2d:8a:8e:b9:40:91:25:57:1e:a2:1d:cd:37:
c3:66:18:9a:b2:65:70:45:84:1d:ae:32:5a:06:13:aa:39:4c:
24:f0:a5:89:be:68:27:3e:bd:87:2e:84:f8:9a:d2:a7:95:e2:
a6:e5:64:d2:6e:f8:ab:7e:b0:da:6d:e0:dd:71:6a:33:e2:cc:
40:af:c7:d4:8d:0b:90:a8:74:d0:2f:d9:f6:35:69:4b:14:58:
16:79:f8:46:57:3c:2a:23:8f:63:ea:ae:df:f3:1c:db:34:a3:
3b:1d:b4:65:f4:b5:68:e1:d1:0c:f1:c0:02:3a:bf:97:59:b2:
77:4e:3c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org