Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8a3Rt2oPuWsAX3t9d5TwhXR-qXI.roa
File: 8a3Rt2oPuWsAX3t9d5TwhXR-qXI.roa (raw, json)
Hash identifier: WkbIrCAFiXJqYc3UYre4rcp1iOs8cgssl0u1UuWuG5Y=
Subject key identifier: F1:AD:D1:B7:6A:0F:B9:6B:00:5F:7B:7D:77:94:F0:85:74:7E:A9:72
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0185C3D9A90634AEF180B4B6149BECC300C9
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8a3Rt2oPuWsAX3t9d5TwhXR-qXI.roa
Signing time: Wed 18 Jan 2023 07:48:19 +0000
ROA not before: Wed 18 Jan 2023 07:48:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 83.147.10.0/24 maxlen: 24
83.147.22.0/24 maxlen: 24
83.147.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:d9:a9:06:34:ae:f1:80:b4:b6:14:9b:ec:c3:00:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 18 07:48:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1add1b76a0fb96b005f7b7d7794f085747ea972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:ad:b7:b6:df:22:2e:d6:92:07:ef:01:0d:
86:7c:dc:01:7a:d5:da:75:90:70:d3:52:75:f3:bb:
1a:8b:f6:2a:3b:3d:31:54:9d:33:b7:79:08:6c:77:
60:83:17:bc:7f:38:4a:43:92:43:d0:e2:95:1e:b4:
b6:71:2d:97:e7:51:e8:b6:5a:11:e9:58:55:d9:3c:
e8:cb:ba:2e:c9:1c:56:4a:00:c7:b5:e2:aa:33:3a:
d4:4d:52:b4:7b:f1:4d:6e:b6:61:65:7e:4e:55:8c:
11:c6:6f:32:a0:52:28:0c:e4:21:90:04:44:c8:e7:
8c:4f:a4:19:7b:c9:c6:87:c0:d8:f2:4c:b9:9d:c2:
28:3b:b5:e1:f3:1c:97:37:82:19:bc:e1:90:9a:13:
e6:09:e4:48:13:f5:2b:50:3f:27:94:cd:91:3d:ed:
da:c6:b7:16:58:20:da:06:2d:f6:0b:cc:4b:fd:d1:
cc:c9:02:3a:a4:d2:8b:d3:f9:67:44:e0:46:ce:82:
f0:e2:60:8d:53:c4:40:d0:13:40:f4:a2:20:7d:f4:
69:75:3c:ac:44:a2:c5:41:dc:36:73:ac:93:03:75:
8e:df:e1:0a:2b:e9:b4:ef:00:bd:ee:31:00:dd:bc:
b9:f9:53:e0:f8:a7:b4:34:dc:bf:52:eb:cb:eb:0c:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AD:D1:B7:6A:0F:B9:6B:00:5F:7B:7D:77:94:F0:85:74:7E:A9:72
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8a3Rt2oPuWsAX3t9d5TwhXR-qXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.10.0/24
83.147.22.0/24
83.147.25.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d7:96:8d:24:ca:14:14:44:6b:ab:f6:f8:6c:bb:60:5e:af:
64:77:7b:7f:00:bf:54:8d:35:ff:3e:8a:d4:46:49:1b:3b:92:
97:90:5f:e5:ce:68:54:50:8b:8d:08:77:62:73:c4:6e:c6:f2:
c0:be:72:ab:ff:e2:00:2b:ac:94:94:74:64:9d:47:66:b8:bc:
98:b6:6b:d6:b6:25:e9:86:e3:31:69:59:61:41:ad:58:3c:91:
6a:9e:e0:9b:12:db:8f:13:22:a4:e8:9b:42:c1:51:c7:a2:1c:
d0:81:d5:dc:47:15:af:fa:36:4a:d0:a9:ec:d9:f3:13:41:fb:
42:84:7c:a8:ff:a3:83:74:47:62:9b:29:5f:85:97:d4:10:d9:
74:12:36:6e:6b:cd:41:b2:bd:56:97:17:08:02:39:7e:f8:8c:
fe:c5:1c:95:a1:5d:41:d9:b4:7c:d1:55:b9:33:91:3b:ed:73:
8e:73:24:94:ee:46:93:d2:82:a8:ff:c1:6c:77:80:0c:9e:2a:
f8:fb:a4:2d:99:74:e3:67:f0:0f:09:bd:48:2d:ba:dd:5e:ce:
16:93:22:2b:0d:d5:a3:86:7d:fe:1e:df:ad:3b:0a:be:7f:f8:
5a:e5:1f:3c:cc:fb:a7:c4:9a:b5:33:c4:6f:07:37:27:d5:8c:
27:44:12:36
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXD2akGNK7xgLS2FJvswwDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMwMTE4MDc0ODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWFkZDFiNzZhMGZiOTZiMDA1ZjdiN2Q3Nzk0ZjA4NTc0N2VhOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLStt7bfIi7WkgfvAQ2GfNwBetXa
dZBw01J187sai/YqOz0xVJ0zt3kIbHdggxe8fzhKQ5JD0OKVHrS2cS2X51HotloR
6VhV2Tzoy7ouyRxWSgDHteKqMzrUTVK0e/FNbrZhZX5OVYwRxm8yoFIoDOQhkARE
yOeMT6QZe8nGh8DY8ky5ncIoO7Xh8xyXN4IZvOGQmhPmCeRIE/UrUD8nlM2RPe3a
xrcWWCDaBi32C8xL/dHMyQI6pNKL0/lnROBGzoLw4mCNU8RA0BNA9KIgffRpdTys
RKLFQdw2c6yTA3WO3+EKK+m07wC97jEA3by5+VPg+Ke0NNy/UuvL6wwH6wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPGt0bdqD7lrAF97fXeU8IV0fqlyMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvOGEzUnQyb1B1V3NBWDN0OWQ1VHdoWFItcVhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU5MKAwQA
U5MWAwQAU5MZMA0GCSqGSIb3DQEBCwUAA4IBAQBm15aNJMoUFERrq/b4bLtgXq9k
d3t/AL9UjTX/PorURkkbO5KXkF/lzmhUUIuNCHdic8RuxvLAvnKr/+IAK6yUlHRk
nUdmuLyYtmvWtiXphuMxaVlhQa1YPJFqnuCbEtuPEyKk6JtCwVHHohzQgdXcRxWv
+jZK0Kns2fMTQftChHyo/6ODdEdimylfhZfUENl0EjZua81Bsr1WlxcIAjl++Iz+
xRyVoV1B2bR80VW5M5E77XOOcySU7kaT0oKo/8Fsd4AMnir4+6QtmXTjZ/APCb1I
LbrdXs4WkyIrDdWjhn3+Ht+tOwq+f/ha5R88zPunxJq1M8RvBzcn1YwnRBI2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org