Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/1-ebggPrd2hOusGoPivsslkYBi_0.roa
File: 1-ebggPrd2hOusGoPivsslkYBi_0.roa (raw, json)
Hash identifier: yCzx71JNBPKBD+AnYxvZiaTUcjzV0JzL4xKgY07pi50=
Subject key identifier: F9:E6:E0:80:FA:DD:DA:13:AE:B0:6A:0F:8A:FB:2C:96:46:01:8B:FD
Certificate issuer: /CN=58f7d27ebc269bf14b8d6895791affd429f70222
Certificate serial: 01872396C54CA11E359CC61613EFDAA0B63A
Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/1-ebggPrd2hOusGoPivsslkYBi_0.roa
Signing time: Mon 27 Mar 2023 15:01:36 +0000
ROA not before: Mon 27 Mar 2023 15:01:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209835
IP address blocks: 83.143.109.0/24 maxlen: 24
83.143.110.0/24 maxlen: 24
83.143.108.0/24 maxlen: 24
83.143.111.0/24 maxlen: 24
83.143.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:96:c5:4c:a1:1e:35:9c:c6:16:13:ef:da:a0:b6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222
Validity
Not Before: Mar 27 15:01:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9e6e080faddda13aeb06a0f8afb2c9646018bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:af:a1:21:fe:a7:95:51:d5:34:12:da:a8:
ca:34:c9:13:b7:fc:b1:4c:1b:33:61:03:87:97:cf:
ee:5b:b4:c1:de:59:fd:3f:2e:0b:e8:59:ad:28:d0:
93:6e:3b:99:32:0d:da:fe:1d:8e:8d:cd:22:d3:f1:
e4:90:58:22:49:eb:c1:ac:84:d7:f7:13:8b:3a:7f:
39:4b:67:00:85:a3:64:4e:19:db:1c:ba:ee:d7:e3:
6a:af:10:34:2f:c1:1f:2f:d3:7e:db:ee:09:11:aa:
6b:a9:82:33:9e:cb:a9:51:6b:5d:93:d8:b5:6a:a3:
ce:6e:0a:c9:3a:eb:b5:43:bb:b5:63:8d:a5:a6:d6:
a8:02:16:a5:63:28:65:f5:5b:50:c6:db:94:a2:e1:
8b:48:01:f1:df:2c:b9:c8:42:33:ec:af:b2:50:a1:
e0:bf:bf:82:b1:73:47:83:54:39:cc:ed:39:2c:8f:
06:e4:b3:2d:37:a5:98:24:28:c0:07:89:20:03:41:
d7:ca:1a:29:74:b6:6b:9d:6a:9c:fb:3c:94:e8:26:
0a:bf:7a:1d:1e:38:ab:10:8e:4e:01:68:03:25:9c:
48:e1:41:c9:56:0c:58:4f:de:bf:03:10:fb:b4:e8:
73:2a:9b:b9:7e:b4:ab:0a:a2:3f:2c:7c:55:70:2a:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E6:E0:80:FA:DD:DA:13:AE:B0:6A:0F:8A:FB:2C:96:46:01:8B:FD
X509v3 Authority Key Identifier:
keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/1-ebggPrd2hOusGoPivsslkYBi_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.108.0/22
Signature Algorithm: sha256WithRSAEncryption
22:dd:ea:b4:a2:13:6c:f0:d3:0b:f9:00:95:f0:db:81:60:d1:
4a:b1:05:66:cb:d1:ba:73:3e:0b:58:6e:b4:39:9d:3a:bf:47:
bb:76:75:48:7e:41:ce:84:a7:e6:af:a2:fb:36:4f:c7:bd:97:
b9:2c:82:60:8a:6c:8b:df:25:71:f0:b4:86:0c:cc:84:1e:be:
47:d8:f4:10:9b:e3:70:53:6c:86:41:d3:8b:fe:d4:ac:c1:cf:
65:20:18:c4:66:d0:0c:77:6c:52:ca:21:04:e0:ed:29:4d:7a:
a1:3c:cc:93:93:82:ee:a1:5d:56:54:48:4d:4b:cc:92:a4:e0:
44:b9:ef:1d:a4:7d:10:99:98:0a:80:61:84:66:35:33:11:d7:
67:32:65:cd:77:bb:53:a6:ce:b0:ff:e0:b2:cf:fd:43:77:c9:
92:a3:df:9b:3b:40:d5:61:73:e1:8b:33:37:1a:bd:84:a2:cb:
a9:52:e9:ca:66:9a:cb:a1:6d:84:8a:f2:4f:56:eb:e7:4e:23:
92:31:5b:9d:ae:26:8e:ee:82:3f:f7:1e:d2:7f:0d:c8:9c:9f:
77:2e:2d:ce:bb:0f:df:d9:7b:77:04:ca:76:ab:d8:80:09:5b:
d4:40:b0:80:09:18:a1:90:d7:81:0b:fa:35:52:64:bc:4f:0d:
23:b3:5e:b6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYcjlsVMoR41nMYWE+/aoLY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZjdkMjdlYmMyNjliZjE0YjhkNjg5NTc5MWFmZmQ0Mjlm
NzAyMjIwHhcNMjMwMzI3MTUwMTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWU2ZTA4MGZhZGRkYTEzYWViMDZhMGY4YWZiMmM5NjQ2MDE4YmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQSvoSH+p5VR1TQS2qjKNMkTt/yx
TBszYQOHl8/uW7TB3ln9Py4L6FmtKNCTbjuZMg3a/h2Ojc0i0/HkkFgiSevBrITX
9xOLOn85S2cAhaNkThnbHLru1+NqrxA0L8EfL9N+2+4JEaprqYIznsupUWtdk9i1
aqPObgrJOuu1Q7u1Y42lptaoAhalYyhl9VtQxtuUouGLSAHx3yy5yEIz7K+yUKHg
v7+CsXNHg1Q5zO05LI8G5LMtN6WYJCjAB4kgA0HXyhopdLZrnWqc+zyU6CYKv3od
HjirEI5OAWgDJZxI4UHJVgxYT96/AxD7tOhzKpu5frSrCqI/LHxVcCpKFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPnm4ID63doTrrBqD4r7LJZGAYv9MB8GA1UdIwQY
MBaAFFj30n68JpvxS41olXka/9Qp9wIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDRhMmEtNmRkMS00OTc0LWJiMjkt
NGM5MmNlYzA4YmE4LzEvMS1lYmdnUHJkMmhPdXNHb1BpdnNzbGtZQmlfMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2QvOTA0YTJhLTZkZDEtNDk3NC1iYjI5LTRjOTJjZWMwOGJh
OC8xL1dQZlNmcndtbV9GTGpXaVZlUnJfMUNuM0FpSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlOPbDAN
BgkqhkiG9w0BAQsFAAOCAQEAIt3qtKITbPDTC/kAlfDbgWDRSrEFZsvRunM+C1hu
tDmdOr9Hu3Z1SH5BzoSn5q+i+zZPx72XuSyCYIpsi98lcfC0hgzMhB6+R9j0EJvj
cFNshkHTi/7UrMHPZSAYxGbQDHdsUsohBODtKU16oTzMk5OC7qFdVlRITUvMkqTg
RLnvHaR9EJmYCoBhhGY1MxHXZzJlzXe7U6bOsP/gss/9Q3fJkqPfmztA1WFz4Ysz
Nxq9hKLLqVLpymaay6FthIryT1br504jkjFbna4mju6CP/ce0n8NyJyfdy4tzrsP
39l7dwTKdqvYgAlb1ECwgAkYoZDXgQv6NVJkvE8NI7Netg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:50 2024 by rpki-client on console-ams.rpki-client.org