Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ChZWthxui-eVwM_jhyOI7fXlRq0.roa
File: ChZWthxui-eVwM_jhyOI7fXlRq0.roa (raw, json)
Hash identifier: 92P38Hls4CLnE4nCgMmH7kN4iXn/PtM3ZW7MjDPgS6w=
Subject key identifier: 0A:16:56:B6:1C:6E:8B:E7:95:C0:CF:E3:87:23:88:ED:F5:E5:46:AD
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018A983A92B09E54CFB15A26F267D8B07024
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ChZWthxui-eVwM_jhyOI7fXlRq0.roa
Signing time: Fri 15 Sep 2023 09:44:50 +0000
ROA not before: Fri 15 Sep 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.14.0/24 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:3a:92:b0:9e:54:cf:b1:5a:26:f2:67:d8:b0:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 15 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a1656b61c6e8be795c0cfe3872388edf5e546ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:08:f7:e7:03:b7:a3:4f:d2:a7:95:bc:ef:
94:58:9d:e0:7a:5a:a3:60:f2:f5:b1:11:b3:7d:81:
aa:30:28:da:5c:8c:eb:24:0c:7e:cf:01:8f:ac:5e:
0a:b1:c2:f6:ee:9f:3f:0f:e5:a2:09:7a:6e:5e:2d:
5f:b2:6a:8d:34:d7:95:46:b8:44:f8:b0:68:34:e3:
5e:9f:79:76:a8:a9:18:f7:94:8d:98:9a:89:f6:79:
5a:be:7b:87:be:38:54:e9:40:fb:2c:90:89:d4:46:
c4:61:dc:ab:8c:dc:fe:9d:45:ba:35:ed:2c:5a:15:
48:63:7e:54:26:da:7a:ca:e8:38:94:9d:9a:ec:96:
08:d3:7c:14:d2:d7:9e:f9:80:fc:75:78:cd:84:98:
2c:c3:df:12:47:ea:b7:19:6a:bb:15:d4:69:e0:6f:
47:c0:7a:fb:66:78:f2:3e:cf:f8:d4:03:8e:f5:04:
13:74:50:78:f3:ff:c6:41:bb:6a:62:02:1c:78:b4:
25:89:ba:48:d1:d0:b2:21:6b:29:dc:93:43:b6:05:
ca:1f:cc:16:29:c5:77:ac:a2:74:c8:1f:cc:b8:f7:
69:30:34:c8:35:a4:5c:cc:d7:8e:a1:7f:b6:ac:ef:
50:ce:84:99:ba:57:26:64:57:f0:06:74:f8:1b:1f:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:16:56:B6:1C:6E:8B:E7:95:C0:CF:E3:87:23:88:ED:F5:E5:46:AD
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ChZWthxui-eVwM_jhyOI7fXlRq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.9.0/24
83.147.11.0/24
83.147.14.0/24
83.147.20.0/23
83.147.23.0/24
83.147.28.0/22
83.147.40.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
73:23:4a:a7:41:4f:0b:76:ae:00:ff:a1:c8:95:a1:1e:dc:9d:
47:61:d8:90:97:98:da:82:2a:80:e0:33:75:03:0a:70:ba:ce:
65:b5:0f:97:c2:81:0d:e7:9d:98:3e:71:5e:6f:c6:cf:49:02:
91:c1:1f:2d:65:4e:cf:63:99:66:4d:49:f5:a8:65:79:a2:67:
64:32:af:ef:f9:61:cf:2c:cb:28:0c:c8:69:4e:77:f2:0a:5b:
72:db:ee:e3:4d:e9:65:a9:ec:bc:e8:23:57:ea:ef:70:56:13:
ee:d3:3a:63:b7:55:d0:ef:6d:b9:2e:c8:ed:ea:59:34:c6:e3:
b8:12:60:f7:fe:ad:7f:e7:a3:56:33:40:b2:d5:5d:e9:50:d6:
f4:cb:b3:3b:9d:cc:d2:4e:06:bc:12:0e:02:9b:9f:d9:1f:8c:
da:08:17:e6:54:73:ce:5b:ed:7a:70:cc:be:44:f0:99:0c:23:
f5:4e:1c:df:45:25:21:47:d1:1f:14:41:c9:38:be:f0:c0:51:
0d:c3:01:79:c0:b6:6b:a9:30:12:1e:65:76:57:16:b7:b8:a4:
26:1d:3d:85:4c:6f:71:b6:1e:0f:93:46:81:1e:64:b5:66:fe:
7e:24:b4:59:23:8d:99:45:18:db:e7:b9:36:49:fd:36:40:8b:
5d:8c:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:58:29 2023 by rpki-client on console-fra.rpki-client.org