Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/qQ_n1JHM4FhmmC3eIC2uptmg_FA.roa
File: qQ_n1JHM4FhmmC3eIC2uptmg_FA.roa (raw, json)
Hash identifier: jWgzh6eW4eALNQ3lhgtFHA1QGEZvTgkkt/uKCvhrCy8=
Subject key identifier: A9:0F:E7:D4:91:CC:E0:58:66:98:2D:DE:20:2D:AE:A6:D9:A0:FC:50
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0186042CC33725F079D526BF7794AF18F376
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/qQ_n1JHM4FhmmC3eIC2uptmg_FA.roa
Signing time: Mon 30 Jan 2023 19:34:47 +0000
ROA not before: Mon 30 Jan 2023 19:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 83.147.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 04:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:2c:c3:37:25:f0:79:d5:26:bf:77:94:af:18:f3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 30 19:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a90fe7d491cce05866982dde202daea6d9a0fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:33:ee:6c:7e:2f:f5:05:31:ee:7d:42:83:
03:81:1e:d9:57:cc:06:39:d3:7e:61:f8:59:90:1e:
a6:d6:08:13:f7:9b:fc:9a:d1:98:d2:f9:9f:6c:1c:
c1:5a:70:4b:03:60:8a:cc:2a:5d:e2:be:1b:06:87:
56:f4:7e:0e:ce:70:56:75:54:e4:fb:c3:5b:c4:89:
71:ab:7d:07:31:1a:75:ba:4f:f0:88:d1:c1:f1:cc:
9d:a8:6a:ea:90:9e:ec:1c:b4:a0:cc:de:02:c0:55:
83:7f:ce:75:ff:c6:99:1d:c9:fa:cd:31:fb:54:a4:
f1:1e:a9:1f:4a:e3:51:96:e9:87:c0:39:3f:c7:c2:
5f:34:bc:5f:18:3b:9c:fa:92:53:e8:34:69:da:45:
c1:eb:5f:cb:39:cb:2e:fa:9c:72:fb:e7:e7:55:5a:
1f:c9:f7:63:a6:77:cd:76:ee:0b:ee:df:c0:06:c8:
da:fc:4c:2a:22:63:44:06:ad:8b:3f:e9:6f:89:b7:
6c:f0:43:c6:e2:ff:cd:91:25:df:20:84:d6:e9:db:
13:87:a2:3b:67:26:56:4d:fc:5c:3a:a0:58:25:62:
db:62:6a:49:c4:16:66:df:ca:f9:64:cd:b1:4b:53:
6c:12:59:db:55:30:9f:f7:54:0c:2f:21:ce:74:4a:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0F:E7:D4:91:CC:E0:58:66:98:2D:DE:20:2D:AE:A6:D9:A0:FC:50
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/qQ_n1JHM4FhmmC3eIC2uptmg_FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.11.0/24
Signature Algorithm: sha256WithRSAEncryption
78:cd:14:84:51:cc:47:63:37:61:ff:47:b5:e5:c7:ee:dc:a0:
17:42:fd:e2:a9:be:7a:21:d7:d3:f6:16:0d:73:f9:84:b3:a1:
90:94:df:78:d1:9c:3d:69:da:96:af:04:54:0b:d0:9e:8f:ff:
f0:df:4b:cb:b7:16:3f:ce:d0:55:10:8c:e2:c1:4c:60:64:8b:
8f:f5:b0:8c:51:ff:c7:e7:3a:d0:f9:85:b3:99:f7:2c:75:1f:
35:b1:e7:7e:3e:fe:db:72:79:f1:a7:83:1a:d4:b9:c3:2f:31:
70:f9:71:ce:90:96:7a:c9:bf:2b:52:df:1b:9c:2e:dc:bb:a3:
92:64:db:9d:3e:b5:f9:65:0c:ea:25:e3:58:79:8d:39:38:d3:
3e:d4:87:d5:8e:cd:9d:ef:2e:75:1f:d5:fe:7c:72:53:e9:dc:
df:45:09:81:b3:7b:ec:6d:ef:8b:6f:ec:e6:db:f4:11:14:a4:
e1:c0:2d:18:f4:2e:ca:68:f3:e3:93:9d:32:93:e1:b4:52:1c:
69:d7:e5:58:73:33:0f:c7:14:ca:b1:31:6d:1e:d9:3e:ed:07:
bb:a8:51:7a:6a:f9:a2:5d:e7:3e:19:5e:48:10:a1:69:43:15:
46:74:e6:02:70:05:2e:78:ce:a8:15:f1:3e:f2:7c:2a:17:1d:
8b:61:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org