Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/x8NtxIQvc6StruW1i7z9KVtt92Y.roa
File: x8NtxIQvc6StruW1i7z9KVtt92Y.roa (raw, json)
Hash identifier: ovNfp/Cn7P0nM08g+Ns172KiRrpZqo8CCNmbacKAKU8=
Subject key identifier: C7:C3:6D:C4:84:2F:73:A4:AD:AE:E5:B5:8B:BC:FD:29:5B:6D:F7:66
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018B952425745B22F3CC7C4877FCBA4D7C56
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/x8NtxIQvc6StruW1i7z9KVtt92Y.roa
Signing time: Fri 03 Nov 2023 12:24:15 +0000
ROA not before: Fri 03 Nov 2023 12:24:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 19 Nov 2023 14:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:24:25:74:5b:22:f3:cc:7c:48:77:fc:ba:4d:7c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 3 12:24:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7c36dc4842f73a4adaee5b58bbcfd295b6df766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:68:f1:62:19:9c:e5:68:a4:83:52:97:fe:
13:a9:c1:23:8c:ac:33:37:29:54:9b:71:9f:2f:f4:
cb:e4:4a:48:9d:bf:1a:f8:9a:7a:bd:4b:d2:ae:64:
cf:29:6b:30:a7:53:a8:53:26:79:0a:ac:28:ea:58:
fa:bd:65:48:fc:ea:1e:5d:a2:25:59:c4:ac:06:3f:
52:b6:e0:07:b5:01:05:53:b7:3c:0a:32:ab:f9:e1:
14:e6:66:e8:ec:a7:72:61:23:cc:ca:10:81:19:f2:
6b:5b:b7:e2:0a:77:a1:a9:c6:fc:06:c2:e3:13:46:
bf:af:61:23:ea:76:40:e6:63:0e:f6:e7:5f:87:a1:
e1:f3:4d:43:57:7c:c3:ba:3d:02:d3:16:f7:8d:a5:
19:9d:15:70:65:de:84:62:fd:db:f9:25:db:50:cc:
22:cf:11:67:64:f3:31:24:32:42:bb:51:95:09:a4:
c2:a9:e6:0a:92:43:ec:13:a8:d3:99:8b:40:c5:e6:
cb:4a:32:18:47:bd:f6:68:cd:c6:27:d1:c0:c2:29:
b5:7c:bc:4b:a3:f1:fc:6d:b2:e0:05:2a:da:b3:50:
6c:b4:f1:d2:69:da:0f:b0:f2:a1:2a:89:e3:df:9f:
05:63:c9:91:04:53:e7:62:2e:79:68:34:f4:2a:9b:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C3:6D:C4:84:2F:73:A4:AD:AE:E5:B5:8B:BC:FD:29:5B:6D:F7:66
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/x8NtxIQvc6StruW1i7z9KVtt92Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
99:53:5c:02:2e:22:dd:95:5c:12:9d:83:8c:8c:ff:6e:78:cb:
43:45:f2:0e:42:4d:75:9e:c6:a9:5a:1b:33:f3:bf:a7:94:ed:
85:60:d6:db:a4:3a:dc:51:3a:d7:73:7a:16:19:fe:43:99:32:
0c:57:aa:80:41:25:1f:9b:ae:73:71:18:4f:b0:b6:e6:6f:56:
95:7e:50:57:12:66:75:c0:eb:3b:f0:15:e4:cf:75:2f:95:73:
0e:d7:58:2b:d8:1e:e1:bd:d1:23:79:75:07:1a:61:79:d0:23:
8a:f2:81:96:f7:6d:c2:58:6f:3d:33:f9:20:87:eb:31:f5:d3:
8c:5b:1d:ee:f6:9b:0a:a9:73:be:15:62:54:dc:ed:fd:52:9c:
0c:7b:ae:c5:f4:45:ea:69:c6:89:bd:63:fc:c9:69:b1:3b:d6:
9b:0c:15:12:0f:ea:fb:f3:3a:29:71:f2:a7:75:ac:9c:f9:01:
22:97:23:5f:1a:c1:08:d5:85:88:85:15:bf:3f:8b:08:0a:8f:
8e:17:98:d0:d6:84:37:4f:cf:69:93:bd:08:2a:70:9d:f7:07:
44:d2:f8:0e:c0:9c:4a:62:3a:8b:fd:5c:ec:e7:be:39:e7:ad:
41:6a:3a:bc:d8:a3:bf:1c:c5:3b:2b:04:f0:18:ee:22:67:3c:
5c:a1:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org