Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/CwYFpkRon5Vs1BbZ6pAlNB1W1og.roa
File: CwYFpkRon5Vs1BbZ6pAlNB1W1og.roa (raw, json)
Hash identifier: GEBfaRuhE04BrXS/hxOTy/eCn54Hzh6SbyKHpnr/U70=
Subject key identifier: 0B:06:05:A6:44:68:9F:95:6C:D4:16:D9:EA:90:25:34:1D:56:D6:88
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018F2D99C235446391B3D0B7735F488817A6
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/CwYFpkRon5Vs1BbZ6pAlNB1W1og.roa
Signing time: Tue 30 Apr 2024 06:03:22 +0000
ROA not before: Tue 30 Apr 2024 06:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 03:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:99:c2:35:44:63:91:b3:d0:b7:73:5f:48:88:17:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 30 06:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b0605a644689f956cd416d9ea9025341d56d688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:f8:d4:f5:de:46:1d:cb:b8:fa:3e:d6:68:
6e:97:26:c1:d8:98:50:cf:f7:31:d9:44:8d:fd:84:
74:2d:90:a1:37:c4:aa:da:4f:8b:ce:00:d7:69:1c:
0c:86:9e:47:f0:c4:66:66:58:56:c8:b4:4b:d4:1d:
39:05:1d:1f:2d:d9:d5:53:dd:f8:d1:e1:b7:e3:68:
66:79:97:9f:74:15:2f:ed:0c:b0:1d:82:8d:09:d7:
f2:e8:f5:dd:16:6b:d6:b8:b3:9b:ee:21:4e:35:82:
80:a5:32:d9:9a:40:7b:52:7a:2c:f9:b1:ff:26:a6:
18:4b:d2:fb:02:8d:42:7d:28:b0:31:29:e7:b1:f3:
00:53:22:12:d8:66:d6:48:57:71:a6:a1:37:3c:92:
2e:f2:9b:12:d5:b9:33:c5:f4:d8:5b:41:b0:56:9f:
0f:0d:c2:ff:e9:62:09:78:65:0b:32:f9:c8:d3:c3:
f1:25:40:de:e5:90:8d:51:c0:85:e7:ab:a5:51:31:
77:87:0d:c5:ca:b4:ca:6b:77:10:41:8a:ab:39:47:
aa:d6:e3:86:f5:f3:9f:b4:e3:90:43:78:27:cc:d9:
30:ad:a4:39:86:29:05:92:08:67:ce:38:63:54:f3:
13:62:ba:8a:b3:f8:3b:b6:1e:bd:b7:45:fc:55:99:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:06:05:A6:44:68:9F:95:6C:D4:16:D9:EA:90:25:34:1D:56:D6:88
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/CwYFpkRon5Vs1BbZ6pAlNB1W1og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.16.0/22
83.147.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a5:5e:c4:9d:34:29:df:90:4a:63:c0:95:25:ab:3d:86:4b:
f9:af:21:98:6b:52:93:50:e3:cd:b1:84:5f:cf:50:a1:5a:6f:
ed:b2:a9:a3:cd:ba:31:ed:b2:de:ad:39:25:e2:97:51:b3:fe:
58:7c:ea:c7:ac:77:0b:f1:ae:cc:e8:53:7e:b7:d1:89:7f:f6:
59:27:f4:96:4a:2a:b5:0b:44:e9:7e:87:a3:d4:07:3c:84:15:
f1:3a:64:36:05:a0:25:57:48:6f:9b:e0:c0:54:2b:4d:61:59:
37:66:5c:ca:2a:df:ff:a4:f2:a7:6c:6b:ae:bd:9a:05:2f:8f:
e9:95:46:64:38:28:55:e2:95:59:e4:8e:84:8f:18:14:1a:be:
d4:60:e1:92:7e:03:6a:ea:bf:bd:fc:16:65:34:73:fe:40:7b:
11:d7:77:d4:ba:ac:3c:61:6b:ad:75:38:e9:37:79:01:d1:fb:
fc:0d:9b:20:b6:29:8b:af:bf:3b:40:7b:c4:68:16:b1:48:0a:
44:ed:6b:1b:8f:10:65:46:73:a2:34:38:c4:76:eb:42:28:f9:
16:2b:a8:1f:35:09:a5:ae:99:02:cf:1e:31:1f:8f:30:ee:56:
fc:8e:32:98:e1:7e:10:21:cd:4c:ae:92:6c:8a:90:8b:9d:0c:
2a:1b:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org