Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8xWtpiOZcRE7cNYaVHXYVIt5W6I.roa
File: 8xWtpiOZcRE7cNYaVHXYVIt5W6I.roa (raw, json)
Hash identifier: g5lIyG8ui12Z90kSv0Rt5iZ/x03IiuqsK+teFf2Lmgc=
Subject key identifier: F3:15:AD:A6:23:99:71:11:3B:70:D6:1A:54:75:D8:54:8B:79:5B:A2
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01884D579337ECBFD9906C813AFCEDBC255A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8xWtpiOZcRE7cNYaVHXYVIt5W6I.roa
Signing time: Wed 24 May 2023 10:39:24 +0000
ROA not before: Wed 24 May 2023 10:39:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.56.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 May 2023 04:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:57:93:37:ec:bf:d9:90:6c:81:3a:fc:ed:bc:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 24 10:39:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f315ada6239971113b70d61a5475d8548b795ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:41:7a:30:91:47:85:34:0c:94:a5:02:e4:
18:08:54:7f:08:7c:5d:14:37:dd:00:03:1e:c4:5b:
e7:a8:6a:60:b3:37:d0:09:dd:69:10:7f:f9:21:64:
51:95:d7:80:a5:ad:5b:fd:0d:57:45:87:56:f4:d8:
a1:80:df:8d:17:0d:9a:d4:10:bc:70:16:ec:48:43:
69:9d:dd:85:e8:9c:a9:41:f8:42:a8:80:61:28:8d:
a2:3b:20:90:55:80:ba:db:79:84:b3:15:ce:50:87:
2e:c3:ba:9e:f3:52:43:1c:be:01:e2:02:7e:a1:b4:
a9:07:5f:f3:d7:91:92:8e:5b:b9:6d:d3:3a:d3:75:
67:06:55:8e:78:eb:db:77:84:5d:d5:51:b1:ba:42:
85:47:dd:0b:ec:c2:9e:a3:ff:52:31:01:51:7f:f8:
54:a1:7c:a1:63:af:e7:15:5f:da:59:b1:c4:ca:01:
0b:e0:87:e7:ac:9e:3b:6f:7b:fa:6e:28:dd:76:15:
2f:eb:43:03:4b:7a:96:0b:df:80:a5:de:09:29:5c:
f5:7d:51:e6:52:eb:a8:ab:58:84:e6:c1:3a:b3:aa:
f9:6c:b0:c7:57:3d:be:e3:e5:26:cf:45:15:a9:16:
26:df:91:ed:21:8a:27:a8:d2:48:3f:7a:72:99:c4:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:15:AD:A6:23:99:71:11:3B:70:D6:1A:54:75:D8:54:8B:79:5B:A2
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8xWtpiOZcRE7cNYaVHXYVIt5W6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.23.0/24
83.147.27.0/24
83.147.56.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c8:89:f0:76:e2:ba:bc:d5:ef:0c:fd:5a:28:d2:e9:9d:e5:
bc:47:00:0a:5b:04:d7:9c:1a:13:24:15:85:50:b1:ea:e5:72:
4f:7a:19:e2:58:78:e2:fc:78:63:a9:f0:ac:07:c5:73:70:28:
99:93:7b:76:64:b9:70:43:d7:9c:81:09:36:8c:d0:90:94:49:
59:31:e8:19:0d:83:6b:30:eb:e8:39:af:3d:6c:08:ee:0d:92:
7d:38:de:19:86:72:f6:40:6a:16:85:c9:db:df:c5:13:77:68:
c2:c9:8a:09:d8:dd:c0:ec:93:9d:e5:ce:22:96:6b:2c:eb:76:
1c:5b:7a:4d:55:15:11:66:9a:08:87:cf:96:85:f8:31:40:d1:
f6:9f:45:5d:3b:95:e2:ca:5e:a8:f9:0f:2d:8e:64:81:c1:46:
5d:d6:b1:8c:26:e2:43:95:29:6b:ad:24:84:8c:54:ac:74:2e:
b5:4a:60:6b:8e:b0:1f:e0:64:4b:44:82:b3:a9:98:d2:d3:d7:
cb:9d:7b:02:08:4b:66:e3:4a:46:3e:23:70:03:a4:36:42:b3:
77:d9:bf:c8:62:e6:79:c8:4b:2e:e3:46:ea:31:34:23:2f:de:
fd:e6:19:0f:c1:42:82:95:49:ce:16:cc:d9:17:a8:56:ae:c8:
f7:ef:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org