Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6ZnL1O0wboWM0r82S_Jt1OuUG10.roa
File: 6ZnL1O0wboWM0r82S_Jt1OuUG10.roa (raw, json)
Hash identifier: GfTcOQ+O/IFXlr7KlctciupNH2JKKUAVloX+TjslKTE=
Subject key identifier: E9:99:CB:D4:ED:30:6E:85:8C:D2:BF:36:4B:F2:6D:D4:EB:94:1B:5D
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018B317BC1880326777F03C70C3F315813AB
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6ZnL1O0wboWM0r82S_Jt1OuUG10.roa
Signing time: Sun 15 Oct 2023 03:57:55 +0000
ROA not before: Sun 15 Oct 2023 03:57:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.4.0/22 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 05:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:7b:c1:88:03:26:77:7f:03:c7:0c:3f:31:58:13:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 15 03:57:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e999cbd4ed306e858cd2bf364bf26dd4eb941b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:77:a8:84:f3:17:e5:11:cc:71:ad:13:1f:
e1:77:b0:6c:87:bc:25:74:a5:91:5b:ef:59:13:57:
0f:fa:1e:78:09:b6:f9:2f:b3:6b:f2:91:3e:cb:d1:
51:49:f3:bf:fa:d3:ce:64:03:65:d2:5e:4b:85:e8:
7a:7a:03:13:c8:42:81:cc:4b:85:b9:9c:2c:38:b7:
e0:d6:14:96:16:c7:09:ef:a6:d6:80:5c:2e:6c:67:
8c:d8:dd:25:ad:da:ff:40:d3:05:a1:53:c1:f9:9c:
a6:3e:54:8b:7b:63:7d:75:b2:49:79:77:0d:fb:c5:
23:35:e0:3b:e1:cb:b2:f2:fa:c8:1e:42:a4:91:00:
de:67:5a:f7:51:93:dd:5d:39:12:93:b1:1b:81:9c:
bb:a4:a7:6d:36:bd:78:c2:1a:7c:84:b3:e8:01:eb:
d4:41:cf:c1:dc:41:ea:0d:73:30:17:12:d6:af:0b:
a5:cc:a0:2c:2c:ed:cc:d1:0b:13:06:0e:7b:7e:94:
20:35:31:a5:60:1e:d3:45:09:50:ed:af:c9:bf:e3:
01:0e:52:51:7d:03:dd:ab:89:61:bf:ed:74:de:b3:
a9:f9:87:25:a9:72:b2:b0:d1:ff:0a:69:f4:05:06:
32:1a:84:4f:2f:45:8e:5d:76:c9:b3:d6:f9:ff:8b:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:CB:D4:ED:30:6E:85:8C:D2:BF:36:4B:F2:6D:D4:EB:94:1B:5D
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6ZnL1O0wboWM0r82S_Jt1OuUG10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/21
83.147.20.0/23
83.147.23.0/24
83.147.28.0/22
83.147.40.0/21
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:43:a6:b8:af:67:7f:69:4a:51:ce:f7:0c:c9:1f:c0:7b:ae:
bc:bc:9b:f9:59:89:cf:ed:69:5b:25:fb:b8:2a:29:4b:a8:fe:
d4:07:2b:a8:9e:97:b8:a7:23:0b:41:96:eb:f0:91:17:38:16:
fa:c6:c6:e8:d2:83:1b:f7:3d:a2:ab:dd:7c:ec:73:93:3a:23:
28:5c:f1:c7:33:7e:1b:e7:0c:b4:bd:8e:5e:51:b8:95:3f:f5:
c4:73:93:3e:ee:20:38:35:4a:94:8e:1f:f1:39:0a:1d:c1:67:
90:5c:20:70:a0:b4:54:f8:52:53:da:14:fe:17:6f:76:54:16:
46:68:7e:98:49:7b:e6:ba:36:4f:38:53:e5:14:7f:6f:d7:e8:
e7:d5:47:6c:27:d7:66:28:a3:6b:c5:46:f8:ea:b5:35:37:6a:
c1:c0:86:d3:b4:cc:7b:ba:5f:da:6c:98:92:e8:24:b7:f9:28:
b7:d7:e2:26:17:2e:39:20:46:1b:5b:a7:c3:55:9a:6b:2e:7b:
a6:07:9b:7f:c7:e5:53:c5:5d:42:94:a4:f1:c7:d4:92:d8:90:
7f:b1:fd:13:a8:e3:d5:88:6b:ba:68:2d:06:f6:54:ca:0e:3d:
6c:b8:c2:e5:70:fc:22:7d:2e:1a:68:b9:b7:e7:f4:3c:9d:b7:
10:f7:05:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org