Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5M9CXq0RYsj0zRCydYy-CZK6jP8.roa
File: 5M9CXq0RYsj0zRCydYy-CZK6jP8.roa (raw, json)
Hash identifier: P5qwbB0D5YFDs+qxYYg9YwUyAq8pEbIaKqkywzOBP/M=
Subject key identifier: E4:CF:42:5E:AD:11:62:C8:F4:CD:10:B2:75:8C:BE:09:92:BA:8C:FF
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0191B11CD6051395FF3CC5F326556FD3A351
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5M9CXq0RYsj0zRCydYy-CZK6jP8.roa
Signing time: Mon 02 Sep 2024 05:02:22 +0000
ROA not before: Mon 02 Sep 2024 05:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 04:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:1c:d6:05:13:95:ff:3c:c5:f3:26:55:6f:d3:a3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 2 05:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4cf425ead1162c8f4cd10b2758cbe0992ba8cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:be:2d:ed:76:50:01:43:67:30:b0:2b:8a:
b0:38:ff:8a:40:ea:85:6a:7c:a7:a7:f9:77:c0:12:
1a:44:39:f4:de:59:a4:95:7b:ce:44:72:60:c1:d6:
9f:eb:fb:41:7b:bc:ac:eb:2d:8e:d8:fc:dc:83:f8:
e0:6a:8f:84:90:19:17:62:5b:95:b9:7a:36:1f:20:
5f:26:f1:ac:4a:b0:ca:6b:4c:82:bc:e2:5b:bb:47:
6d:7b:1b:62:19:f9:7c:29:19:39:0b:fd:bb:54:e1:
2a:09:86:a4:15:b8:3b:a4:ea:ee:49:c4:61:38:50:
ac:30:50:f4:1c:f8:6d:12:08:bd:0f:11:21:86:0a:
cc:94:2f:87:84:4a:1e:05:14:a4:b9:1f:5d:f8:25:
d0:90:9d:e5:0e:de:fe:37:d9:33:be:0f:3c:74:2e:
eb:9e:56:c2:b8:21:0c:4e:4d:94:bf:13:38:d7:3d:
98:55:4e:f9:9f:ca:72:55:fa:78:36:57:e2:06:e5:
7c:ea:9a:1b:19:2f:2c:7b:4c:88:f3:6e:66:79:ac:
40:ea:7e:93:eb:f8:7d:ac:aa:01:49:d1:43:be:2b:
0e:02:e7:7e:13:10:33:6a:72:46:63:55:9e:c4:98:
fa:a9:09:77:fd:00:30:de:bf:e7:b6:d6:7b:eb:4c:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CF:42:5E:AD:11:62:C8:F4:CD:10:B2:75:8C:BE:09:92:BA:8C:FF
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5M9CXq0RYsj0zRCydYy-CZK6jP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.21.255
83.147.26.0-83.147.28.255
Signature Algorithm: sha256WithRSAEncryption
40:bb:c5:00:b2:a3:9a:2e:e1:b8:d1:df:94:62:a8:ec:3a:71:
bf:77:30:05:fb:83:af:76:38:3c:5c:5b:1e:8f:64:a2:f5:89:
ad:40:58:a4:0f:61:3d:92:2e:d1:da:ce:84:1c:44:96:b5:cc:
49:32:96:e4:59:15:88:e5:2c:7d:7b:03:5f:17:54:0d:d2:fc:
71:3a:b3:b0:b8:e9:33:9c:aa:4e:ad:ab:78:cf:d6:c4:af:0b:
6e:f9:e5:4e:2f:6e:fe:94:ad:30:87:66:60:70:89:f9:92:a8:
af:71:51:2d:9d:c1:f1:64:33:88:94:9e:5b:b3:47:2b:fd:48:
c4:1a:b5:ee:95:37:2d:f9:b9:09:e6:77:e1:de:78:d4:53:09:
9f:c8:18:45:4a:d1:67:f6:13:cb:f8:56:d3:93:8e:9a:d2:31:
a5:15:6d:3f:80:cb:05:41:88:d7:50:e3:8d:32:de:09:75:22:
d1:1d:c9:c9:02:12:be:0f:3c:5a:9a:3e:4e:35:f8:e3:1c:98:
3e:91:07:f0:b3:aa:6f:5f:a1:64:c7:32:28:54:b9:99:7f:f2:
e7:10:22:55:bb:f1:ba:cd:e5:37:fa:1f:26:a5:df:ac:c8:2a:
be:e5:d2:ce:6f:05:78:15:a7:27:72:12:b5:78:82:00:02:c3:
94:14:fd:8e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZGxHNYFE5X/PMXzJlVv06NRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQwOTAyMDUwMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGNmNDI1ZWFkMTE2MmM4ZjRjZDEwYjI3NThjYmUwOTkyYmE4Y2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRy+Le12UAFDZzCwK4qwOP+KQOqF
anynp/l3wBIaRDn03lmklXvORHJgwdaf6/tBe7ys6y2O2Pzcg/jgao+EkBkXYluV
uXo2HyBfJvGsSrDKa0yCvOJbu0dtextiGfl8KRk5C/27VOEqCYakFbg7pOruScRh
OFCsMFD0HPhtEgi9DxEhhgrMlC+HhEoeBRSkuR9d+CXQkJ3lDt7+N9kzvg88dC7r
nlbCuCEMTk2UvxM41z2YVU75n8pyVfp4NlfiBuV86pobGS8se0yI825meaxA6n6T
6/h9rKoBSdFDvisOAud+ExAzanJGY1WexJj6qQl3/QAw3r/nttZ760wpXwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFOTPQl6tEWLI9M0QsnWMvgmSuoz/MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvNU05Q1hxMFJZc2owelJDeWRZeS1DWks2alA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBARTkxAD
BAFTkxQwDAMEAVOTGgMEAFOTHDANBgkqhkiG9w0BAQsFAAOCAQEAQLvFALKjmi7h
uNHflGKo7Dpxv3cwBfuDr3Y4PFxbHo9kovWJrUBYpA9hPZIu0drOhBxElrXMSTKW
5FkViOUsfXsDXxdUDdL8cTqzsLjpM5yqTq2reM/WxK8LbvnlTi9u/pStMIdmYHCJ
+ZKor3FRLZ3B8WQziJSeW7NHK/1IxBq17pU3Lfm5CeZ34d541FMJn8gYRUrRZ/YT
y/hW05OOmtIxpRVtP4DLBUGI11DjjTLeCXUi0R3JyQISvg88Wpo+TjX44xyYPpEH
8LOqb1+hZMcyKFS5mX/y5xAiVbvxus3lN/ofJqXfrMgqvuXSzm8FeBWnJ3IStXiC
AALDlBT9jg==
-----END CERTIFICATE-----
Generated at Sun Oct 6 05:42:07 2024 by rpki-client on console-fra.rpki-client.org