Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7zGfelxbobGTMqZARw1jUng_ARQ.roa
File: 7zGfelxbobGTMqZARw1jUng_ARQ.roa (raw, json)
Hash identifier: I6563ZWUvMR5AnzMH6Jn5fWdjNhxNFEDs4bvWZv8BQM=
Subject key identifier: EF:31:9F:7A:5C:5B:A1:B1:93:32:A6:40:47:0D:63:52:78:3F:01:14
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0189CE5A1AE7A415B5DB30F71846BAC8500E
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7zGfelxbobGTMqZARw1jUng_ARQ.roa
Signing time: Mon 07 Aug 2023 04:55:58 +0000
ROA not before: Mon 07 Aug 2023 04:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.14.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 09:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:5a:1a:e7:a4:15:b5:db:30:f7:18:46:ba:c8:50:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 7 04:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef319f7a5c5ba1b19332a640470d6352783f0114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:4e:78:5d:3a:f9:35:17:35:82:ed:eb:d8:
65:ea:f4:60:39:db:d7:86:c1:ef:7d:19:36:c8:a1:
54:1c:63:93:15:c8:41:41:53:c8:25:37:14:90:1f:
41:3c:90:19:b0:af:af:14:d8:89:f8:e2:d0:b3:d1:
dd:ca:a9:4d:46:fb:c2:c0:c9:30:f2:32:fc:f7:18:
39:6f:8c:03:98:5d:86:85:2f:d8:ce:3f:75:d9:d4:
4a:0f:32:1f:65:09:8d:42:55:4c:94:4d:88:95:1e:
c7:48:c8:73:ed:95:a8:fc:8e:83:34:9f:0d:27:a6:
1b:9e:55:76:02:37:8b:40:91:62:13:a3:82:f6:70:
a5:fd:a6:20:78:ba:90:06:86:6e:ea:84:48:4c:e8:
e8:37:f8:1f:47:d1:84:fb:4e:d7:f2:1e:2a:2c:07:
bc:2a:00:f9:62:d3:71:78:5a:01:db:cf:60:f0:85:
5d:85:06:8d:41:7f:74:44:29:07:b2:29:31:91:17:
20:04:5e:9d:d1:5e:c9:11:7f:b5:0b:fa:f1:c2:ee:
21:3b:c8:ec:76:1b:fe:ca:c6:4f:28:a4:61:9b:42:
da:f4:c1:3f:65:54:71:e7:92:bf:1d:33:f3:b2:37:
d9:04:41:e3:fa:57:d1:9c:97:00:6c:9c:fc:2d:88:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:31:9F:7A:5C:5B:A1:B1:93:32:A6:40:47:0D:63:52:78:3F:01:14
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7zGfelxbobGTMqZARw1jUng_ARQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.9.0/24
83.147.11.0/24
83.147.14.0/24
83.147.23.0/24
83.147.28.0/22
83.147.44.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fb:ab:e9:35:de:a6:65:aa:c0:50:1a:60:99:11:f9:47:7f:
fa:50:b3:34:7f:0d:d1:d7:d6:e2:62:93:f9:e6:e1:5b:53:cc:
d1:ac:4d:0b:f1:5b:fe:cb:f2:40:09:fa:0e:a0:5c:7a:46:9e:
47:3f:00:de:f6:24:ea:2b:21:76:1c:01:78:18:4a:65:a7:6d:
79:e7:4f:3c:04:66:2c:8e:d3:02:7f:31:4e:c4:a0:6a:91:1d:
bf:a1:a0:81:21:c1:10:ba:78:0b:30:93:69:f4:e0:19:0d:f4:
d9:42:ae:4b:00:72:52:52:ba:25:f9:47:13:34:a7:71:b1:36:
5e:f3:69:27:1b:4c:4b:4a:08:fa:e1:b4:1a:cf:a1:ba:39:b2:
f1:25:e2:d7:b6:8b:62:37:8e:cf:7c:b6:c2:d0:5f:99:2f:80:
55:12:fd:3e:c9:97:38:80:28:96:56:30:44:46:fd:20:e1:3a:
92:25:3a:ae:df:ca:24:84:da:9e:1d:8c:a8:47:c8:ce:50:41:
f0:21:5d:d5:73:ae:ad:2a:cf:fd:6c:d3:66:3b:83:28:b4:a9:
df:8c:47:47:30:4f:6f:7f:57:07:d8:6a:50:b6:e1:f3:71:9d:
ff:98:d6:5d:41:f9:c1:bd:86:f8:ef:36:e1:5b:17:37:24:41:
8e:17:a2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org