Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AIwbGm1-t6kBWDe9EJ9m8mYLYOQ.roa
File: AIwbGm1-t6kBWDe9EJ9m8mYLYOQ.roa (raw, json)
Hash identifier: ebEmiafbCpPFA1VwTqa7s2ZKCJUx0x/O4RKDhzGewe4=
Subject key identifier: 00:8C:1B:1A:6D:7E:B7:A9:01:58:37:BD:10:9F:66:F2:66:0B:60:E4
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01856CE63731AC9AE1A1AD29D21D2113778A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AIwbGm1-t6kBWDe9EJ9m8mYLYOQ.roa
Signing time: Sun 01 Jan 2023 10:35:04 +0000
ROA not before: Sun 01 Jan 2023 10:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 83.147.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 04:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:37:31:ac:9a:e1:a1:ad:29:d2:1d:21:13:77:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 10:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=008c1b1a6d7eb7a9015837bd109f66f2660b60e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:5d:b1:4a:4b:18:9d:db:56:6d:29:b8:73:
7b:1f:80:a9:a8:63:ec:c7:00:8a:9b:4f:48:8f:eb:
39:e3:33:8d:70:8f:c8:33:7f:bb:8c:7a:29:9e:50:
4f:d8:a1:c4:9d:38:19:7a:a0:a9:1c:57:63:cb:a7:
f5:6c:b9:fa:7c:bf:72:f7:7a:02:a5:60:5e:10:37:
44:96:d7:eb:e5:e7:18:b4:31:fb:83:cb:05:4c:18:
37:a2:b4:2b:9b:0c:59:35:6e:96:b2:4d:2a:8b:0e:
4f:17:8b:8b:7d:8b:e6:1e:42:03:0d:f5:86:55:29:
50:ac:0b:a0:2b:53:f9:a5:d2:20:2d:23:c3:69:84:
02:60:66:a5:69:a6:89:9c:ce:1f:91:57:a6:c6:69:
9c:07:54:f2:0f:5c:34:9b:0b:e6:6b:0a:52:1d:76:
28:5b:fb:49:13:e8:af:15:1b:14:e0:a3:93:96:05:
a1:58:07:32:76:c4:63:58:62:b7:5d:7d:a9:b3:aa:
c0:95:ae:bb:8c:2f:90:ed:b7:cb:99:0f:ae:b1:a3:
c4:aa:e1:74:2f:bd:94:6d:2b:a2:db:4a:22:be:fc:
bb:2a:7b:09:f6:ed:62:bf:7a:d5:e1:62:14:c4:41:
1e:c6:a6:f6:46:0d:4f:af:3a:00:ea:28:69:5b:24:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8C:1B:1A:6D:7E:B7:A9:01:58:37:BD:10:9F:66:F2:66:0B:60:E4
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AIwbGm1-t6kBWDe9EJ9m8mYLYOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
44:5f:73:eb:e0:d8:71:f2:cd:98:85:9c:be:80:66:b7:62:a7:
52:00:34:2d:8e:66:ea:84:fd:c0:c2:8a:3b:87:9e:5d:74:71:
db:8d:3f:e0:32:aa:03:8d:50:c7:d9:a6:c2:20:53:14:a5:38:
e1:9e:23:8b:d6:4f:2d:37:fd:04:ba:91:44:64:bd:09:4f:c6:
3f:93:9f:b2:e6:96:80:39:8e:2f:18:30:ee:e6:6c:42:db:56:
96:ad:00:1a:21:48:71:f4:40:0d:e3:4e:a1:ae:2b:a7:c6:69:
3f:4f:04:14:55:3e:07:9d:da:ee:2e:88:f5:83:94:72:ae:50:
31:80:7d:c9:d8:a8:a1:84:17:b2:24:79:b1:09:ee:78:83:33:
10:03:dd:79:19:16:9e:97:8f:5d:0f:b9:7e:cf:8e:33:9f:08:
f2:b9:16:a8:91:19:44:3b:2e:cd:3a:f6:41:3c:93:62:b9:6b:
41:46:cf:be:01:6c:1d:c5:de:0d:88:64:93:aa:70:a3:ed:8f:
fe:30:60:3a:69:e8:fa:59:67:01:4a:4a:aa:70:0b:e3:83:2e:
8d:67:92:31:5d:b4:8f:2a:4f:f1:4a:e8:97:bd:e2:a1:ca:8d:
93:6e:4d:88:e5:73:b6:ee:d8:80:0f:e3:69:7d:65:cd:e8:c5:
82:8e:5d:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5jcxrJrhoa0p0h0hE3eKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMwMTAxMTAzNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDhjMWIxYTZkN2ViN2E5MDE1ODM3YmQxMDlmNjZmMjY2MGI2MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjddsUpLGJ3bVm0puHN7H4CpqGPs
xwCKm09Ij+s54zONcI/IM3+7jHopnlBP2KHEnTgZeqCpHFdjy6f1bLn6fL9y93oC
pWBeEDdEltfr5ecYtDH7g8sFTBg3orQrmwxZNW6Wsk0qiw5PF4uLfYvmHkIDDfWG
VSlQrAugK1P5pdIgLSPDaYQCYGalaaaJnM4fkVemxmmcB1TyD1w0mwvmawpSHXYo
W/tJE+ivFRsU4KOTlgWhWAcydsRjWGK3XX2ps6rAla67jC+Q7bfLmQ+usaPEquF0
L72UbSui20oivvy7KnsJ9u1iv3rV4WIUxEEexqb2Rg1PrzoA6ihpWyTNlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFACMGxptfrepAVg3vRCfZvJmC2DkMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvQUl3YkdtMS10NmtCV0RlOUVKOW04bVlMWU9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MwMA0G
CSqGSIb3DQEBCwUAA4IBAQBEX3Pr4Nhx8s2YhZy+gGa3YqdSADQtjmbqhP3Awoo7
h55ddHHbjT/gMqoDjVDH2abCIFMUpTjhniOL1k8tN/0EupFEZL0JT8Y/k5+y5paA
OY4vGDDu5mxC21aWrQAaIUhx9EAN406hriunxmk/TwQUVT4HndruLoj1g5RyrlAx
gH3J2KihhBeyJHmxCe54gzMQA915GRael49dD7l+z44znwjyuRaokRlEOy7NOvZB
PJNiuWtBRs++AWwdxd4NiGSTqnCj7Y/+MGA6aej6WWcBSkqqcAvjgy6NZ5IxXbSP
Kk/xSuiXveKhyo2Tbk2I5XO27tiAD+NpfWXN6MWCjl3d
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org