Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/tLfu3-lC2k8GwK9NrUWHm9dUFOw.roa
File: tLfu3-lC2k8GwK9NrUWHm9dUFOw.roa (raw, json)
Hash identifier: 3uhfISpwusN6oQoszR2d7tKrIZOimRJpkKPvYQ/VEPk=
Subject key identifier: B4:B7:EE:DF:E9:42:DA:4F:06:C0:AF:4D:AD:45:87:9B:D7:54:14:EC
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01867DDB705424147FCF10F9955587F54603
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/tLfu3-lC2k8GwK9NrUWHm9dUFOw.roa
Signing time: Thu 23 Feb 2023 10:39:38 +0000
ROA not before: Thu 23 Feb 2023 10:39:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 83.147.52.0/22 maxlen: 24
83.147.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:db:70:54:24:14:7f:cf:10:f9:95:55:87:f5:46:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Feb 23 10:39:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4b7eedfe942da4f06c0af4dad45879bd75414ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:3c:fd:e7:2c:fd:6d:5b:9a:d6:ed:36:14:
6f:8c:e5:2a:5c:d7:84:8f:74:d7:a0:36:3f:b1:64:
f7:4e:7f:23:66:e2:0d:e2:9e:9a:3a:37:e2:90:30:
b8:d7:0a:81:22:00:17:d2:b5:5c:bc:2f:7f:5a:39:
ac:5e:57:b5:4c:d1:89:31:c8:76:07:a9:aa:b5:f9:
ab:e0:db:e0:d4:66:ce:2a:e0:23:4d:3f:0d:bc:b1:
88:40:b3:81:82:0e:7c:ab:59:d8:12:1d:6f:a4:c5:
0b:8d:5b:be:92:ea:3a:7f:d3:0e:5c:be:d8:36:54:
e0:45:8e:8f:da:46:93:2d:8d:6a:97:f7:f5:9d:5e:
40:68:d4:5f:72:0d:61:20:b3:da:75:94:f7:7f:05:
1a:e8:36:20:86:11:fd:57:aa:45:a2:1f:f2:8b:5d:
ea:69:35:78:95:6e:dd:c0:57:2d:e9:c1:9f:82:03:
04:52:75:cb:b4:58:be:8e:e7:b6:8d:a9:7c:6a:fa:
ac:6c:47:7b:4f:7b:d1:a1:a7:45:21:b8:ca:0c:bf:
f4:0e:af:85:1f:f4:df:99:e3:18:d4:a2:12:30:71:
7e:9b:58:7d:f1:bc:7b:d7:47:59:aa:a3:6c:e4:f9:
0e:aa:c5:43:3f:3c:8e:95:b2:92:de:92:d7:c9:01:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:EE:DF:E9:42:DA:4F:06:C0:AF:4D:AD:45:87:9B:D7:54:14:EC
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/tLfu3-lC2k8GwK9NrUWHm9dUFOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0/22
83.147.52.0/22
Signature Algorithm: sha256WithRSAEncryption
13:dd:94:16:b0:df:a1:c2:db:76:3d:f3:eb:5f:5d:09:b2:d4:
67:de:d8:57:0c:19:ea:4c:00:23:97:b8:67:a8:d2:c6:58:a1:
91:5c:c7:bb:01:41:4d:05:85:93:0a:53:b8:43:b6:4d:d0:30:
dd:ce:7c:1f:48:4a:e5:2e:3f:fb:0d:34:03:8d:76:6a:f5:c4:
a8:d9:66:ea:78:20:cf:16:23:2c:b7:3f:05:e1:33:02:15:0f:
9b:09:19:3a:d7:26:fd:1f:f6:06:e8:d7:39:46:91:7d:cd:b1:
4f:ae:4f:db:15:97:ac:88:cf:e0:dd:a8:70:ab:ba:98:e3:e5:
0e:dc:49:f4:68:fe:68:41:08:b3:f0:36:c5:97:c3:1a:7f:a8:
77:72:fb:c8:ff:56:36:2b:2b:0e:3f:ae:27:ea:b5:b9:3d:03:
06:6c:82:51:47:3e:cd:8b:9d:bd:4e:e2:49:00:75:78:87:f4:
76:6d:85:7d:91:71:dd:10:a3:4b:58:2a:d7:1f:ad:2c:68:80:
20:b4:f5:ac:ee:3a:03:a0:53:4b:14:e5:eb:d2:f9:1c:0b:84:
28:c3:2e:43:c8:08:67:28:b6:d3:99:39:9e:db:8f:c0:17:d2:
41:08:a3:8b:15:33:0c:c6:58:f0:c7:2d:00:f8:1b:ca:4a:4a:
5d:a4:31:90
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 21 04:58:30 2023 by rpki-client on console-fra.rpki-client.org