Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4x0jLi4Xn_Dch5n9w9UNbxmZEFA.roa
File: 4x0jLi4Xn_Dch5n9w9UNbxmZEFA.roa (raw, json)
Hash identifier: FbLh6dxCp9eex3UwGe+afFAKlKObMSI4qSRs/dwe690=
Subject key identifier: E3:1D:23:2E:2E:17:9F:F0:DC:87:99:FD:C3:D5:0D:6F:19:99:10:50
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB9D4D8369D7AFC54E4B394E1885E
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4x0jLi4Xn_Dch5n9w9UNbxmZEFA.roa
Signing time: Tue 02 Jan 2024 08:29:26 +0000
ROA not before: Tue 02 Jan 2024 08:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272044
IP address blocks: 83.147.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 03:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b9:d4:d8:36:9d:7a:fc:54:e4:b3:94:e1:88:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e31d232e2e179ff0dc8799fdc3d50d6f19991050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:21:66:c8:71:62:8e:2a:04:31:02:0d:3a:
fb:ed:1c:06:4c:c5:25:eb:70:db:7f:af:cb:b9:50:
c9:27:f2:0e:bf:d9:d6:ac:1b:47:2f:db:ac:f0:12:
c4:90:2a:7d:1e:a4:31:f2:c1:d9:41:6c:34:45:9f:
f6:ce:14:17:86:55:6d:96:7a:42:02:cc:3e:8c:3c:
1f:13:91:c7:b0:1e:6c:6e:fd:9b:11:c8:5c:da:0a:
51:83:34:66:28:9a:b9:db:cf:ae:af:b7:8b:90:2f:
93:c9:83:37:44:ec:fb:31:ea:fc:12:da:81:2e:ac:
4d:9d:34:29:c5:f0:71:0b:89:82:1f:e9:fa:63:4e:
db:81:71:36:72:bd:b5:21:de:75:6e:b5:f6:1d:4d:
f8:fe:08:76:b1:77:d5:b0:39:f0:f0:d3:74:30:5a:
95:51:ef:32:ae:49:56:f9:9d:ec:ea:96:6f:53:68:
d7:94:2c:d3:63:a1:87:fa:7f:51:44:19:38:7a:4a:
3c:08:de:3a:21:56:44:91:29:ab:bf:0d:dc:f7:78:
1e:cc:63:b7:c2:d0:e8:b2:a3:2a:04:db:f9:c3:c0:
f5:2c:99:86:d7:26:37:e1:58:66:ef:11:c6:39:78:
64:b9:b6:5f:74:4e:39:18:53:b8:67:2e:07:26:bc:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1D:23:2E:2E:17:9F:F0:DC:87:99:FD:C3:D5:0D:6F:19:99:10:50
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4x0jLi4Xn_Dch5n9w9UNbxmZEFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.12.0/22
Signature Algorithm: sha256WithRSAEncryption
15:45:d8:ca:19:2f:81:e8:f6:5d:a4:ad:3b:58:79:f1:f3:c0:
f2:63:77:95:fb:0a:92:a4:ca:cd:20:6b:71:d4:cd:bd:d0:6a:
a9:cd:5a:90:6f:2b:f5:e6:dc:29:65:0f:55:1f:28:70:94:f2:
3d:4e:b0:b2:90:0a:76:29:a4:3e:ec:f3:d6:fe:64:ed:ad:38:
08:1c:48:33:5d:c7:d5:f0:26:20:18:1b:c3:bb:a0:a6:af:f8:
c0:0b:c8:8c:1e:f5:00:7d:41:5d:2d:40:0c:bb:69:f3:8e:31:
a0:f4:d2:d1:45:c0:10:58:cf:a7:ff:82:77:e8:cd:49:3c:cd:
dc:5f:af:ac:ab:02:c0:18:a6:5d:9a:29:12:bf:07:e6:e4:fa:
e0:42:14:64:57:bf:e8:46:f7:90:bb:0b:8f:fa:db:91:6b:7f:
56:3e:62:6b:ef:52:9e:ad:36:c9:33:57:fd:21:e5:47:da:d9:
61:79:f8:9b:52:9f:a6:cb:7b:5b:3c:52:96:b1:67:94:9a:a0:
3e:2d:21:8b:51:28:c4:43:1d:b6:e2:ad:0f:a9:3f:b7:9e:c8:
b5:3f:08:a1:92:9f:73:2d:31:80:5a:50:75:aa:40:91:ce:56:
ef:9a:fa:52:9c:3e:5e:c6:e7:69:c5:bf:42:96:c7:fe:bb:af:
08:cb:10:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJSrnU2DadevxU5LOU4YheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQwMTAyMDgyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzFkMjMyZTJlMTc5ZmYwZGM4Nzk5ZmRjM2Q1MGQ2ZjE5OTkxMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1AhZshxYo4qBDECDTr77RwGTMUl
63Dbf6/LuVDJJ/IOv9nWrBtHL9us8BLEkCp9HqQx8sHZQWw0RZ/2zhQXhlVtlnpC
Asw+jDwfE5HHsB5sbv2bEchc2gpRgzRmKJq528+ur7eLkC+TyYM3ROz7Mer8EtqB
LqxNnTQpxfBxC4mCH+n6Y07bgXE2cr21Id51brX2HU34/gh2sXfVsDnw8NN0MFqV
Ue8yrklW+Z3s6pZvU2jXlCzTY6GH+n9RRBk4eko8CN46IVZEkSmrvw3c93gezGO3
wtDosqMqBNv5w8D1LJmG1yY34Vhm7xHGOXhkubZfdE45GFO4Zy4HJrypUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOMdIy4uF5/w3IeZ/cPVDW8ZmRBQMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvNHgwakxpNFhuX0RjaDVuOXc5VU5ieG1aRUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MMMA0G
CSqGSIb3DQEBCwUAA4IBAQAVRdjKGS+B6PZdpK07WHnx88DyY3eV+wqSpMrNIGtx
1M290GqpzVqQbyv15twpZQ9VHyhwlPI9TrCykAp2KaQ+7PPW/mTtrTgIHEgzXcfV
8CYgGBvDu6Cmr/jAC8iMHvUAfUFdLUAMu2nzjjGg9NLRRcAQWM+n/4J36M1JPM3c
X6+sqwLAGKZdmikSvwfm5PrgQhRkV7/oRveQuwuP+tuRa39WPmJr71KerTbJM1f9
IeVH2tlhefibUp+my3tbPFKWsWeUmqA+LSGLUSjEQx224q0PqT+3nsi1Pwihkp9z
LTGAWlB1qkCRzlbvmvpSnD5exudpxb9Clsf+u68IyxA/
-----END CERTIFICATE-----
Generated at Mon Jul 22 06:53:56 2024 by rpki-client on console-ams.rpki-client.org