Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1-asj10smfDnM81ZM1_uXD1_Q_WM.roa
File: 1-asj10smfDnM81ZM1_uXD1_Q_WM.roa (raw, json)
Hash identifier: gLgk+K/4S2tjsalEx+mqellUpw+sOlXgyMxzpF9MnOA=
Subject key identifier: F9:AB:23:D7:4B:26:7C:39:CC:F3:56:4C:D7:FB:97:0F:5F:D0:FD:63
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018BE7F6EED2C735010DB4A125F92C8D3C70
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1-asj10smfDnM81ZM1_uXD1_Q_WM.roa
Signing time: Sun 19 Nov 2023 14:23:21 +0000
ROA not before: Sun 19 Nov 2023 14:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.40.0/22 maxlen: 22
83.147.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 03 Dec 2023 07:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:f6:ee:d2:c7:35:01:0d:b4:a1:25:f9:2c:8d:3c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 19 14:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9ab23d74b267c39ccf3564cd7fb970f5fd0fd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:09:cc:05:ef:00:dc:d1:bb:1b:42:36:8c:
30:b5:48:0a:f8:54:4a:a0:25:78:e8:6f:38:c5:51:
33:b8:3e:0a:fb:5e:41:81:22:ac:95:a2:ae:bc:37:
63:1d:6a:15:a6:3b:eb:38:8d:e6:46:82:39:72:bb:
16:1f:3b:01:a6:df:c7:5d:e5:d0:30:39:90:88:0a:
e6:38:0c:47:0a:89:79:35:45:2f:4c:b4:05:71:93:
d0:0e:b1:f6:e9:78:f8:e7:4e:de:25:d5:1c:ae:87:
10:5a:3b:20:fb:e8:a6:69:bd:0e:7c:6c:16:f1:88:
d0:14:2f:41:c4:75:a3:0f:64:96:bc:73:81:5e:d0:
44:d0:c3:4c:6e:63:d2:09:ed:ca:9d:21:7b:2d:d4:
34:aa:89:a4:6c:a6:d2:cc:ba:15:92:3a:b5:ec:64:
8f:2a:a0:74:73:6c:d7:4e:f6:db:ee:ba:27:16:bb:
f6:33:fd:53:a0:8c:c2:f7:c4:56:b9:85:16:19:05:
ee:5f:84:34:dc:28:a0:03:d8:1b:c7:b2:f3:35:94:
bd:92:dd:97:4f:5d:c7:19:f4:56:c6:38:a0:4c:7c:
e4:5d:b8:de:ae:55:e5:e2:bb:fd:aa:32:17:b8:14:
dd:a7:1a:2e:15:46:24:45:a4:77:0d:f5:69:cc:b6:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AB:23:D7:4B:26:7C:39:CC:F3:56:4C:D7:FB:97:0F:5F:D0:FD:63
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1-asj10smfDnM81ZM1_uXD1_Q_WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:e8:2b:26:ef:81:df:e2:36:24:64:4d:de:1e:ab:2a:2f:bd:
96:27:1d:06:2d:51:7f:a7:2d:0d:0f:87:8a:a0:f6:c7:04:dc:
a6:1c:56:72:10:37:3b:6e:41:a3:ff:a7:66:5f:71:99:b1:e6:
4c:13:c9:0a:a1:26:36:57:f2:27:d8:a0:34:1e:e1:dd:b3:18:
fd:f9:0f:e5:8b:26:c2:d2:cd:17:2b:7c:db:cb:1f:6f:ca:3e:
8a:71:e1:f1:c3:23:84:af:24:c4:ac:c6:0e:80:0b:8f:6c:cb:
11:26:8e:5c:f4:9b:d1:8a:d1:14:11:e9:f4:32:0d:ca:ab:91:
a9:64:db:87:bf:78:75:42:84:17:6d:72:b9:5e:d0:ff:cf:6a:
51:8f:b6:a6:b3:d6:3f:11:00:5a:07:4e:88:a0:1a:22:2d:9a:
a4:89:ce:e3:12:d4:4f:cb:7d:b6:ee:a5:cf:63:f0:e4:63:fb:
15:b6:21:ef:55:c5:3e:34:30:61:d0:6d:ea:9b:d0:8f:bb:4e:
ee:6d:6e:84:ed:26:eb:76:cf:da:a1:54:05:be:9e:9c:8b:f0:
d4:ca:fe:2d:f3:f0:5c:6e:92:a4:96:c6:d4:08:bd:9a:d9:fd:
6d:cf:7c:40:ef:e7:d3:a3:af:fd:ba:0a:4a:04:7b:ff:8c:73:
ae:94:ca:20
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYvn9u7SxzUBDbShJfksjTxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMxMTE5MTQyMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWFiMjNkNzRiMjY3YzM5Y2NmMzU2NGNkN2ZiOTcwZjVmZDBmZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFMJzAXvANzRuxtCNowwtUgK+FRK
oCV46G84xVEzuD4K+15BgSKslaKuvDdjHWoVpjvrOI3mRoI5crsWHzsBpt/HXeXQ
MDmQiArmOAxHCol5NUUvTLQFcZPQDrH26Xj4507eJdUcrocQWjsg++imab0OfGwW
8YjQFC9BxHWjD2SWvHOBXtBE0MNMbmPSCe3KnSF7LdQ0qomkbKbSzLoVkjq17GSP
KqB0c2zXTvbb7ronFrv2M/1ToIzC98RWuYUWGQXuX4Q03CigA9gbx7LzNZS9kt2X
T13HGfRWxjigTHzkXbjerlXl4rv9qjIXuBTdpxouFUYkRaR3DfVpzLYnaQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPmrI9dLJnw5zPNWTNf7lw9f0P1jMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvMS1hc2oxMHNtZkRuTTgxWk0xX3VYRDFfUV9XTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTcvNzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3
MS8xL2daUF82ZHMzWW1zVC1GMTh4RmVxMWNIekRKOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlOTKAME
AlOTMDANBgkqhkiG9w0BAQsFAAOCAQEAt+grJu+B3+I2JGRN3h6rKi+9licdBi1R
f6ctDQ+HiqD2xwTcphxWchA3O25Bo/+nZl9xmbHmTBPJCqEmNlfyJ9igNB7h3bMY
/fkP5YsmwtLNFyt828sfb8o+inHh8cMjhK8kxKzGDoALj2zLESaOXPSb0YrRFBHp
9DINyquRqWTbh794dUKEF21yuV7Q/89qUY+2prPWPxEAWgdOiKAaIi2apInO4xLU
T8t9tu6lz2Pw5GP7FbYh71XFPjQwYdBt6pvQj7tO7m1uhO0m63bP2qFUBb6enIvw
1Mr+LfPwXG6SpJbG1Ai9mtn9bc98QO/n06Ov/boKSgR7/4xzrpTKIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org