Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/wsPMwk-F-M0P8cZaqrl3JszYTig.roa
File: wsPMwk-F-M0P8cZaqrl3JszYTig.roa (raw, json)
Hash identifier: JttnWuOoiH3E5vmKzFSHIQxVZn+nbLvTkEGkQ6w2mgQ=
Subject key identifier: C2:C3:CC:C2:4F:85:F8:CD:0F:F1:C6:5A:AA:B9:77:26:CC:D8:4E:28
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018E05E3F28BCE9C680C76430C7E6096C36A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/wsPMwk-F-M0P8cZaqrl3JszYTig.roa
Signing time: Sun 03 Mar 2024 19:56:48 +0000
ROA not before: Sun 03 Mar 2024 19:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 83.147.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 06 Mar 2024 17:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:05:e3:f2:8b:ce:9c:68:0c:76:43:0c:7e:60:96:c3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 3 19:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2c3ccc24f85f8cd0ff1c65aaab97726ccd84e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:a1:2b:d4:d8:e8:17:b3:95:57:4a:df:ce:
95:b1:9d:6d:d9:57:bb:8d:8e:6b:41:ac:e3:ee:69:
c9:b3:d7:a8:0a:b1:71:5f:57:a8:0d:ca:bc:9f:46:
79:e3:b5:c6:e9:ce:86:f1:43:76:44:36:0f:ec:41:
5f:24:e5:2e:9f:38:be:45:d9:45:85:68:67:a8:ec:
cd:dd:22:55:96:2a:38:de:65:70:bf:a9:dd:55:45:
b8:5b:17:14:9c:1b:ec:fe:2d:5b:88:67:e0:4b:15:
41:0f:96:c0:71:9a:00:bd:4e:ba:42:64:25:77:87:
29:b5:e3:09:f2:26:ef:fb:84:fc:a5:fb:2a:3a:29:
4e:5d:5a:40:39:8e:5d:8f:14:d2:91:ec:22:11:04:
eb:dd:b0:9e:85:89:a5:e2:02:78:9d:1b:d8:86:9f:
c8:25:a3:b3:19:72:05:7b:f8:3f:a2:9a:b6:46:93:
e7:40:b6:0f:10:25:26:f4:11:99:87:21:0c:fb:dd:
38:e8:61:97:6e:af:2a:33:4a:ef:70:a9:16:8b:6b:
5c:2c:14:b0:19:c9:67:85:4d:e5:31:1e:e7:c4:1e:
2b:d6:cb:bb:9d:0a:77:1d:d9:cb:44:0d:27:cf:ad:
3b:74:c0:1e:19:b3:ae:64:68:8c:e3:5e:ac:63:b1:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C3:CC:C2:4F:85:F8:CD:0F:F1:C6:5A:AA:B9:77:26:CC:D8:4E:28
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/wsPMwk-F-M0P8cZaqrl3JszYTig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:4e:10:a2:ec:e4:53:b3:52:bb:e3:1c:2f:2a:84:2a:2c:d8:
c1:ed:cb:13:8a:9a:ac:5c:2a:d5:e3:bd:87:13:41:3e:b8:ca:
b2:d5:82:6b:47:90:54:71:05:ba:96:66:af:d9:04:03:e7:dd:
be:e4:35:b4:80:64:02:7d:ec:3d:82:13:3a:75:e6:66:8f:90:
de:a9:42:fe:96:d9:51:4d:ee:99:fe:63:d8:b9:1d:f6:df:ae:
4f:b3:06:d9:f5:94:ea:3c:02:b8:c4:b3:ad:43:f6:b4:5d:d1:
53:11:ca:8d:c3:4d:f9:05:fa:46:52:ce:d8:da:e3:c1:01:d0:
6d:cd:18:ed:03:f7:ac:5d:23:b9:5e:e8:43:14:de:3e:12:96:
15:18:37:8e:a6:59:fa:ac:09:7b:54:4e:4f:4f:53:1d:11:24:
33:45:bb:04:c9:d3:bf:ec:52:de:45:f1:93:d4:6f:3b:30:6a:
e2:2a:cf:70:ed:9a:b6:76:0b:e2:2f:1d:1f:40:01:41:f5:7a:
5f:e9:9f:a5:8e:02:f2:49:fc:12:e8:b4:34:2f:84:96:30:f5:
47:be:86:ed:7a:fc:15:cb:28:47:9a:32:96:db:86:39:b2:14:
ee:03:3f:f8:09:fa:46:93:9f:b5:89:ac:ce:89:fc:48:03:97:
d7:43:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org