Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xJko_mvyUquT-YLbYmvvFS3ii5I.roa
File: xJko_mvyUquT-YLbYmvvFS3ii5I.roa (raw, json)
Hash identifier: 5EzqjyTyw7SFetl4KWJvRgmtpvb3OfUHPJCNtHC6SNo=
Subject key identifier: C4:99:28:FE:6B:F2:52:AB:93:F9:82:DB:62:6B:EF:15:2D:E2:8B:92
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC98C369F15F6699D4E6F880913BAEDB4
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xJko_mvyUquT-YLbYmvvFS3ii5I.roa
Signing time: Tue 02 Jan 2024 09:40:58 +0000
ROA not before: Tue 02 Jan 2024 09:40:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 83.147.21.0/24 maxlen: 24
83.147.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:8c:36:9f:15:f6:69:9d:4e:6f:88:09:13:ba:ed:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 09:40:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c49928fe6bf252ab93f982db626bef152de28b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:1a:9d:64:ad:91:76:c8:1d:38:5e:bd:1e:
ab:0a:26:19:f7:d2:b9:82:6e:18:d1:e4:2f:e8:d2:
64:93:d3:ee:3f:92:12:f7:91:63:1c:29:85:b7:6b:
ab:93:ea:b5:8e:f7:89:2e:ac:7c:da:fc:1e:a4:22:
06:ea:07:3c:0f:2d:51:df:6c:cf:e9:50:1b:a1:5a:
b8:9f:12:d7:1d:d8:09:7a:c3:98:b1:db:26:c7:43:
42:ab:66:44:0f:13:bd:2a:f5:79:5a:7a:39:79:b2:
f0:bf:be:20:4f:fc:b7:a4:1d:17:67:bf:2e:98:15:
1d:d4:ed:0a:d8:1e:47:5d:6b:49:68:7f:f0:37:a4:
f6:47:b0:9d:71:a0:72:6d:6a:e4:db:60:32:f5:18:
5c:75:6e:9f:4b:58:5b:53:f4:40:53:db:b3:fe:3d:
ac:12:e3:b1:3b:37:46:f8:b2:d7:0e:2f:ed:b2:04:
c1:e4:e6:1c:e0:71:2a:ba:42:2e:36:be:c5:ff:7b:
1c:4b:83:bc:ac:6c:91:d2:6f:8f:b6:47:af:4b:97:
50:6b:60:84:7b:0d:0d:f3:32:1b:5e:cc:29:51:60:
75:5b:7f:28:55:9b:23:95:cd:1c:70:e4:b9:c9:95:
21:6d:23:50:6f:8a:16:e7:07:6d:45:34:70:3e:4b:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:99:28:FE:6B:F2:52:AB:93:F9:82:DB:62:6B:EF:15:2D:E2:8B:92
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xJko_mvyUquT-YLbYmvvFS3ii5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.21.0/24
83.147.29.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e4:d0:06:bb:1f:0a:af:af:69:fc:36:c8:40:f0:1d:75:05:
aa:7e:c1:c8:fe:af:3b:ef:bc:51:a1:8b:05:1e:3e:0a:08:9f:
b7:4c:36:ae:3d:0c:04:07:de:20:e0:78:11:43:45:82:8d:c7:
30:62:dd:84:3f:ff:55:8c:85:5a:7d:bf:26:89:9a:67:93:9b:
fc:f5:73:93:d7:20:5d:35:f4:f8:30:0a:34:f3:d3:47:4b:cc:
d0:d3:eb:03:b2:2b:5a:d0:0b:f3:9d:99:b0:b0:cd:ab:74:1f:
30:fd:16:4a:f8:d7:7f:4f:75:8a:a6:e3:ec:dc:12:69:3b:68:
fd:12:6d:1a:86:5a:63:3c:c8:7e:ce:c4:4f:78:5c:63:24:91:
6f:49:73:70:af:40:e4:51:a9:ea:74:79:0a:fc:d7:d3:3b:e0:
38:0b:af:ef:8c:d6:b0:a3:ce:a5:94:4b:28:64:f5:7e:9f:33:
51:46:e7:d5:13:84:2b:49:68:1c:d0:36:37:f8:7d:fa:d4:97:
d6:b1:d0:bf:0e:6f:81:89:d0:4d:60:32:e0:5c:1e:9c:5d:c5:
b9:9c:e5:8b:ac:79:a4:39:ee:c9:c8:7d:4f:04:79:e8:a7:24:
09:66:3d:d9:d0:23:72:2c:a7:20:e7:c9:fe:b6:14:ff:fd:b4:
f4:60:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:10:01 2024 by rpki-client on console-fra.rpki-client.org