Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6SNfyy9Rng53EHy8B0sCvG8XkE0.roa
File: 6SNfyy9Rng53EHy8B0sCvG8XkE0.roa (raw, json)
Hash identifier: zD+nbanleUos2UEJGTNrQAqE6K/OsQf4yPe/rKcWpKA=
Subject key identifier: E9:23:5F:CB:2F:51:9E:0E:77:10:7C:BC:07:4B:02:BC:6F:17:90:4D
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018D5E5CD99568770F1253F48249CBDC56AE
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6SNfyy9Rng53EHy8B0sCvG8XkE0.roa
Signing time: Wed 31 Jan 2024 07:12:39 +0000
ROA not before: Wed 31 Jan 2024 07:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.36.0/22 maxlen: 24
83.147.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 05:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:5c:d9:95:68:77:0f:12:53:f4:82:49:cb:dc:56:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 31 07:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9235fcb2f519e0e77107cbc074b02bc6f17904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:bc:0a:eb:6b:92:b0:9d:3c:fc:e2:d2:df:
25:f4:f1:e7:4b:f6:68:b5:64:f1:96:6a:74:88:68:
76:a5:83:c9:b8:f7:49:05:1d:32:bf:e6:64:c3:e6:
39:e8:ef:a5:25:f8:11:89:44:19:25:f2:ae:98:51:
f9:19:f2:03:7d:fd:63:46:d9:9e:fb:e8:c7:f8:60:
fc:e5:9b:1a:ae:0b:17:b4:ad:16:90:fb:35:ee:ed:
29:d3:e6:a2:b2:f8:7f:bd:61:9c:e4:ad:c7:25:25:
d1:2e:7a:e1:37:56:5a:3a:6a:f8:66:53:60:23:b2:
20:49:fd:87:c2:d8:5c:bd:8f:a5:a4:e1:25:cf:a9:
e1:f5:8a:f1:93:5b:ec:f9:69:d8:69:33:c9:55:8a:
5b:df:91:b0:74:10:71:3c:7e:b8:48:e6:49:02:8f:
80:37:00:e6:c6:e4:85:88:9b:62:19:2c:7d:88:03:
ea:27:96:23:b3:66:58:a8:1c:24:fe:77:4a:32:f2:
bf:f1:3d:2b:3b:42:2b:98:ea:9b:82:8e:c2:b2:c5:
c4:6d:db:f0:ad:b8:85:10:eb:53:72:b5:a0:51:4b:
bd:9f:f7:ad:fe:97:9f:c1:cd:70:48:99:f0:8c:53:
8e:14:61:3f:04:b4:8c:6e:03:85:12:54:9d:ac:33:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:23:5F:CB:2F:51:9E:0E:77:10:7C:BC:07:4B:02:BC:6F:17:90:4D
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6SNfyy9Rng53EHy8B0sCvG8XkE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.21.0/24
83.147.36.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
25:33:a6:8a:ab:bb:d7:e9:56:dc:34:b0:82:bd:74:51:45:a4:
67:5d:06:4a:f5:c7:d1:d3:97:c8:b4:c9:2b:66:6a:9b:21:84:
18:e5:4b:fd:d7:ea:ac:2c:bc:0b:ce:04:e7:45:07:c5:27:bf:
e6:81:86:3c:30:1e:1a:0e:3b:6a:61:ff:36:cd:47:47:e8:5a:
b8:89:cc:04:dc:77:9b:8e:7e:18:c6:b7:23:7a:e6:1a:ce:c2:
08:ab:f1:f4:f0:54:4a:b1:40:45:0f:11:5e:15:44:3a:2b:f0:
58:fe:af:44:6e:06:4a:d6:a7:f1:ad:a7:cb:3a:31:77:73:33:
50:b3:85:83:79:80:dc:15:36:9c:7f:36:00:90:19:1f:81:0f:
97:f4:04:26:ed:27:d2:12:4f:c5:05:e2:59:98:fb:a5:0c:f0:
c8:3c:6a:60:94:00:14:b9:aa:1f:25:a3:0c:64:22:23:78:61:
37:96:78:f4:de:d1:02:c0:2a:73:fd:fa:d7:f2:b1:e1:45:58:
0a:4a:48:ab:a5:6d:eb:2d:ab:8c:45:ad:b8:fe:c8:d1:fd:74:
5f:d7:4f:5a:85:aa:7f:4f:97:18:8d:c0:a7:1f:c4:91:16:7c:
94:94:32:8c:6e:f0:51:7b:dd:aa:42:6e:4a:95:29:a7:5d:8d:
c7:19:c5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org