Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/71Rwh_p3UyVwjYA1f9SBAaLFY2o.roa
File: 71Rwh_p3UyVwjYA1f9SBAaLFY2o.roa (raw, json)
Hash identifier: UrohPlISdu+1xXl76jNcH0LE325UXRDS5G5YlErbomc=
Subject key identifier: EF:54:70:87:FA:77:53:25:70:8D:80:35:7F:D4:81:01:A2:C5:63:6A
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01939A8864D17E6095ED72444A8DB8686CCF
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/71Rwh_p3UyVwjYA1f9SBAaLFY2o.roa
Signing time: Fri 06 Dec 2024 05:54:10 +0000
ROA not before: Fri 06 Dec 2024 05:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.22.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9a:88:64:d1:7e:60:95:ed:72:44:4a:8d:b8:68:6c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 6 05:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef547087fa775325708d80357fd48101a2c5636a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:18:e0:f3:c9:6d:f2:2e:9f:30:3f:84:03:
d7:7b:5b:a7:97:01:b8:8d:c2:0d:fb:97:35:7a:f0:
d3:c3:8d:9a:a6:0c:2f:61:e0:9e:35:2e:30:ae:b0:
83:d2:f2:20:f7:48:4e:1a:4a:a6:0c:03:7d:8c:83:
1f:b7:ce:2f:cd:87:03:66:2f:0c:d8:83:1f:f7:ca:
98:83:e7:59:fd:05:9f:e9:05:7c:92:dd:ae:65:5c:
e3:67:50:08:b9:c0:6d:94:3c:7f:17:8a:c5:18:84:
9e:66:6b:b8:a6:76:ab:0f:5c:67:e6:e2:7d:ba:2a:
65:b6:fa:3f:ee:06:fa:10:05:28:4b:55:80:8d:f7:
80:42:69:d0:08:c3:0d:ce:1e:41:80:b7:51:2d:05:
fd:98:6b:cf:da:4c:e7:f2:02:be:30:f4:4e:34:b0:
e9:7c:c7:32:7b:c8:5f:a3:c9:90:b9:dd:f9:c2:04:
12:49:0d:e3:3c:d8:df:be:74:74:c4:ca:e2:a2:d5:
ac:86:54:0c:65:8c:11:f2:d2:40:cc:eb:da:7a:38:
e2:17:27:f4:11:12:e5:c6:0c:0d:6e:66:1c:76:07:
63:56:31:49:65:66:d6:55:cc:a1:ee:88:6a:45:17:
e1:7d:04:68:dc:a7:d4:d4:3c:16:82:b3:f5:e6:7c:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:70:87:FA:77:53:25:70:8D:80:35:7F:D4:81:01:A2:C5:63:6A
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/71Rwh_p3UyVwjYA1f9SBAaLFY2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.22.255
83.147.26.0-83.147.28.255
Signature Algorithm: sha256WithRSAEncryption
56:cb:c4:b0:45:4e:ef:e6:98:65:85:9a:17:06:6b:b3:b1:24:
21:40:d4:07:62:07:01:63:df:95:6f:07:19:ee:66:70:a9:90:
f1:a3:1c:78:48:4e:c5:ed:c6:33:e3:9a:0f:89:72:d2:42:84:
d9:9a:31:6a:60:a5:f0:ab:0c:32:01:6a:6d:f7:13:82:e3:00:
b0:20:bd:72:e1:fc:b7:98:e3:49:47:01:1b:5b:b5:fd:f2:f2:
ce:3b:b0:6e:66:37:19:4a:f7:7b:58:c6:2c:8b:46:fb:e3:5b:
63:fd:ea:b7:64:cc:c4:9b:bf:4b:4d:9f:d5:38:69:b2:3d:37:
53:45:3d:8e:37:a2:5b:a6:9d:1a:85:1d:4c:3a:93:71:04:b8:
da:8d:6f:54:84:c6:c0:74:0d:e1:75:ff:06:a2:8d:74:03:6b:
92:7e:37:48:49:65:db:a4:21:ef:be:82:a8:3c:91:fa:72:58:
d7:0c:18:30:74:eb:2c:2c:a7:dd:b0:8d:7d:19:a4:f3:37:8e:
cd:02:00:65:b4:a2:f5:37:60:69:94:89:b9:01:d3:25:6d:4e:
7d:cc:41:02:da:55:3c:41:0c:ae:11:ab:58:05:ab:b0:66:50:
ea:a7:64:f1:28:3c:dd:71:3d:84:a5:d0:10:c7:fa:4f:3f:ff:
de:37:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:51 2025 by rpki-client