Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Bv3gbgREzgGmmL-kEON9zzV-CRY.roa
File: Bv3gbgREzgGmmL-kEON9zzV-CRY.roa (raw, json)
Hash identifier: hveiCxIgHVuGgg9I8epOpK5nb2td9uAhroweq+GRT1w=
Subject key identifier: 06:FD:E0:6E:04:44:CE:01:A6:98:BF:A4:10:E3:7D:CF:35:7E:09:16
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01910AD7DE746DA66ABC4C57B53B787C7738
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Bv3gbgREzgGmmL-kEON9zzV-CRY.roa
Signing time: Wed 31 Jul 2024 22:10:05 +0000
ROA not before: Wed 31 Jul 2024 22:10:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 03:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0a:d7:de:74:6d:a6:6a:bc:4c:57:b5:3b:78:7c:77:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 31 22:10:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06fde06e0444ce01a698bfa410e37dcf357e0916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:e6:bb:ad:98:18:a2:c2:6e:e8:e7:53:b6:
8e:c2:cb:4a:fb:d0:a9:eb:80:54:b8:b6:29:f9:78:
dd:05:24:31:14:fa:5a:b9:4d:e4:5f:8c:c4:bc:d8:
f6:3d:b4:d8:0f:a2:1a:4d:3b:60:c9:0f:7e:b4:69:
70:7b:6b:97:c7:bc:7f:70:e3:b0:40:73:f4:25:b7:
43:f0:4f:a3:63:91:1b:57:43:88:54:d4:73:23:b1:
aa:80:79:0c:31:2e:14:85:89:ac:e0:9b:11:85:3d:
e0:d3:26:9a:36:e7:33:1b:db:83:26:8a:1f:1e:20:
4b:02:9d:46:fe:66:a4:a5:04:2d:c8:5a:00:20:1d:
b4:fd:f8:21:b1:c9:d5:b3:c9:78:cd:dd:b5:e0:f9:
8e:18:e1:72:59:f3:6b:f5:8d:3b:31:cb:8f:0e:23:
24:d5:53:a1:27:ca:5f:d0:2c:08:69:56:87:5e:15:
9a:c6:ef:c1:03:f1:5d:42:75:93:b1:4d:bf:12:9e:
bd:d3:d1:49:28:02:00:32:3d:98:fd:53:3f:dc:04:
65:85:b1:62:07:7e:ec:d0:38:90:6e:a5:b6:55:26:
fd:39:56:78:4f:33:a6:5c:e9:4c:f6:e6:ea:b3:80:
c9:42:0d:54:b8:1d:50:fc:8b:e5:d5:83:e9:2a:bc:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:E0:6E:04:44:CE:01:A6:98:BF:A4:10:E3:7D:CF:35:7E:09:16
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Bv3gbgREzgGmmL-kEON9zzV-CRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.16.0/22
83.147.21.0/24
83.147.26.0-83.147.28.255
Signature Algorithm: sha256WithRSAEncryption
4b:a1:c7:dc:db:87:05:19:29:56:ef:41:2c:44:0a:22:77:04:
3d:f3:87:e9:30:de:d8:f1:8b:d7:33:81:a3:48:66:e1:99:d6:
46:8a:86:54:27:30:35:d9:c7:b4:87:43:2f:93:f0:d2:c0:ba:
ab:a4:f6:5e:ea:c5:dc:ce:61:4d:63:f5:66:7a:54:f8:53:bb:
9d:ff:cf:d1:87:4a:ba:34:67:d7:1e:7d:76:28:16:59:1b:3f:
a5:9b:58:32:4c:72:33:e2:4e:09:a2:e3:6e:f7:ac:04:89:70:
01:d8:3d:ca:5c:83:6a:1c:29:87:8b:d5:ba:c9:a2:51:4b:ca:
15:60:19:32:f5:b3:0d:0b:6d:3b:bd:7d:20:fe:8e:bc:ea:c6:
84:71:d9:07:47:a2:a0:e9:fd:23:63:6c:1b:f2:11:d7:eb:19:
85:bd:57:53:87:82:e8:46:d8:d0:8f:18:a4:65:c2:fd:8a:4b:
ac:20:9b:f5:d7:7d:0b:9e:25:ad:7a:f4:12:71:62:70:1c:2c:
b2:5d:28:eb:4e:ed:dc:0d:31:95:ea:2e:a2:ac:c7:54:f7:7c:
09:42:aa:cc:86:35:a0:88:04:61:b6:36:89:ff:a8:e0:0c:7d:
ea:08:79:0d:4c:3c:19:b0:fc:5b:17:f8:54:b5:48:39:46:85:
8b:1b:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 05:26:03 2024 by rpki-client on console-ams.rpki-client.org