Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/srSxY6tXz4g3UHHlszJNc_F_YVI.roa
File: srSxY6tXz4g3UHHlszJNc_F_YVI.roa (raw, json)
Hash identifier: fEYnaNI6T6861pZrkbDwrRPllKm94dUFQhLpyOg3ikA=
Subject key identifier: B2:B4:B1:63:AB:57:CF:88:37:50:71:E5:B3:32:4D:73:F1:7F:61:52
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0186B7BF6B650C321AE5C659617DA2A4F6AA
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/srSxY6tXz4g3UHHlszJNc_F_YVI.roa
Signing time: Mon 06 Mar 2023 16:27:00 +0000
ROA not before: Mon 06 Mar 2023 16:27:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 83.147.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:bf:6b:65:0c:32:1a:e5:c6:59:61:7d:a2:a4:f6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 6 16:27:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2b4b163ab57cf88375071e5b3324d73f17f6152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:af:a6:c3:ce:65:80:74:81:14:61:0b:ef:91:
72:dc:d1:fe:ba:89:6e:d3:d8:0f:38:69:1f:6a:82:
c3:5e:79:6a:78:10:40:bb:0d:ba:88:b5:40:fb:37:
74:ad:89:3d:fa:1b:35:6e:66:31:44:81:a1:f6:c7:
b7:1f:db:36:8d:84:0e:53:c0:1a:67:b8:83:b2:59:
df:92:b0:47:00:16:71:b8:72:1b:21:c2:71:28:80:
78:f9:96:ef:80:b8:03:84:6a:5a:0f:da:ce:de:6f:
f2:f8:5a:9c:4e:c0:0b:6d:0f:a0:8e:37:03:70:a0:
7e:fa:6d:cf:ae:6f:0a:61:a2:d6:69:0b:82:14:1e:
f6:df:94:0d:81:92:3b:fc:9c:23:98:1f:11:4c:9e:
fa:08:7c:27:9b:cb:fa:a1:c5:f0:82:c1:f7:90:ad:
4f:15:26:a2:5a:f1:de:bd:aa:96:fe:c6:db:94:57:
01:ee:4f:08:a0:97:03:17:48:ab:49:32:d2:ae:3b:
fb:84:39:76:89:11:9b:b4:0b:95:8e:cc:3c:37:54:
d4:be:87:24:b4:0e:7c:33:c2:d0:67:1a:80:8a:fe:
87:ea:df:c0:4b:f3:4f:b7:6c:52:2f:b1:2f:be:07:
94:d8:85:36:fb:0d:6b:af:71:6a:c2:b3:40:ac:f0:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:B1:63:AB:57:CF:88:37:50:71:E5:B3:32:4D:73:F1:7F:61:52
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/srSxY6tXz4g3UHHlszJNc_F_YVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:36:79:43:6c:49:2c:f3:32:b2:ec:b7:e0:06:66:11:b5:d6:
9e:76:c4:4c:e2:c5:ba:6e:e4:99:81:65:97:71:a8:1d:44:32:
e6:c7:8e:c5:e9:67:54:dd:14:bd:80:40:65:98:86:6e:ec:60:
72:c1:b5:77:e7:dd:35:d7:91:6c:38:2c:aa:6e:f1:59:0c:6a:
73:02:c8:d0:38:b1:94:90:8e:cd:0f:ac:f2:46:3b:35:69:41:
93:26:6e:80:6e:9e:6d:23:ae:34:3d:03:37:59:a3:32:63:68:
74:d7:ef:e8:c6:18:00:72:27:3e:60:56:85:ac:29:42:56:8d:
64:1d:bc:e1:7c:35:20:ea:7a:26:b9:18:75:18:63:df:2a:d6:
90:d2:6f:8b:ae:ab:d5:51:f1:9f:20:25:02:da:a9:6f:b9:ae:
4a:63:f7:f8:f3:95:f6:80:d3:9c:bc:b0:c1:da:2a:62:02:1b:
8d:50:dc:de:4f:c9:46:ed:04:90:ea:10:b4:8a:41:56:57:03:
db:51:fa:de:fc:9f:43:26:a6:b8:ff:84:6d:f9:77:16:f3:3d:
46:d8:52:93:3d:84:ca:43:1e:ad:aa:71:f0:a2:1c:3c:8b:3c:
ea:36:55:c7:5e:c4:f2:71:f7:10:7d:db:cb:b0:3e:8d:68:4c:
34:ae:d2:9f
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 6 05:14:31 2023 by rpki-client on console-ams.rpki-client.org