Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xD56c0Im8CYU1qdagxX9P6VjNuE.roa
File: xD56c0Im8CYU1qdagxX9P6VjNuE.roa (raw, json)
Hash identifier: npMdMucxVlZvQjJbHwpImBQznIVzHqqVJfuxf/o/Xgc=
Subject key identifier: C4:3E:7A:73:42:26:F0:26:14:D6:A7:5A:83:15:FD:3F:A5:63:36:E1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01856CE63564E54BC26A7399ACF6B3B0FB04
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xD56c0Im8CYU1qdagxX9P6VjNuE.roa
Signing time: Sun 01 Jan 2023 10:35:04 +0000
ROA not before: Sun 01 Jan 2023 10:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 83.147.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 09:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:35:64:e5:4b:c2:6a:73:99:ac:f6:b3:b0:fb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 10:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43e7a734226f02614d6a75a8315fd3fa56336e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:06:cc:46:e1:65:3f:c1:a1:e9:3c:36:4e:
af:77:a4:f7:2b:c3:6c:d0:9c:d6:7e:39:48:46:c2:
aa:f3:a8:2f:ee:71:f9:6d:10:be:10:e2:dc:22:8f:
ec:3d:99:87:6d:47:ec:63:23:56:bd:8a:9d:82:71:
2f:c1:fb:e1:c3:8a:cc:5e:05:45:b4:87:40:24:33:
b0:1c:33:b8:87:bc:d8:02:50:1c:d4:08:12:1e:80:
7e:89:68:00:a5:d6:92:2d:36:7c:d2:6a:df:a2:d0:
2b:31:42:5a:cc:d3:80:4a:50:ab:cc:9e:ff:97:a4:
24:60:1f:05:f2:70:d9:40:ae:90:33:48:8d:1d:69:
d4:45:02:d4:aa:3b:6c:5b:72:54:1e:a0:98:09:69:
62:ee:03:db:f5:98:0f:a6:e7:66:de:01:5e:37:fe:
f9:04:2a:3b:2e:f4:45:42:db:9e:02:7c:2d:98:40:
bb:16:bb:2b:70:62:a7:5b:18:d1:2b:67:60:e3:8e:
50:96:1c:d6:40:18:2e:e4:e3:41:1d:95:6e:db:ab:
00:7e:b1:fb:a2:6e:3c:7b:ac:c1:93:da:63:2c:1c:
a5:b9:bd:3a:db:be:e5:06:f5:aa:ff:3f:bb:c8:eb:
b2:0d:38:28:af:a4:e5:20:5d:9d:c0:21:fa:44:9b:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:7A:73:42:26:F0:26:14:D6:A7:5A:83:15:FD:3F:A5:63:36:E1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xD56c0Im8CYU1qdagxX9P6VjNuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
70:ed:3f:30:88:86:f0:ce:c4:34:d6:a3:09:a3:2a:c0:65:d8:
63:51:4e:cc:62:10:7a:78:e4:0a:7c:eb:09:4f:ca:48:cb:14:
81:7e:f5:0d:67:d1:38:31:98:49:19:19:87:f4:d2:5b:97:89:
81:c2:92:f7:dd:03:f2:1a:7e:f9:d7:e5:41:a1:82:25:bc:10:
fc:cd:95:f2:14:d0:94:56:64:7c:12:00:23:b6:4e:a9:40:f3:
2f:7d:0f:06:29:f5:ba:61:06:de:87:b3:37:39:33:d0:7a:f7:
4e:84:01:b2:21:ed:c9:9e:c2:4d:7a:ee:d6:b3:e0:be:b6:52:
14:3a:0c:0e:46:6a:42:70:3f:6a:00:f0:16:85:45:a7:06:81:
5d:a8:84:e2:11:8a:f0:eb:dc:89:59:88:1b:05:af:d0:04:7e:
43:25:3a:74:5e:65:ab:19:32:87:7f:46:6c:38:54:ea:ec:e1:
db:e2:13:45:bb:1d:cd:04:0f:05:26:b6:6b:60:09:34:6e:0e:
b8:5a:4b:eb:99:69:24:6c:83:db:cf:d5:88:d1:f9:77:31:ab:
02:b1:0a:02:e5:c7:04:df:13:d2:77:0f:7c:8f:ed:e0:46:dd:
ea:0e:7d:75:02:fd:e6:45:71:ba:70:7e:bf:42:50:9d:76:b6:
e8:29:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org