Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DKh7gbHkWzwXRAJBeBU4U-FnRXM.roa
File: DKh7gbHkWzwXRAJBeBU4U-FnRXM.roa (raw, json)
Hash identifier: 4MGHaBAuYirzFzUVn3Px/gblXUbJVpBslQTYlYzcHa4=
Subject key identifier: 0C:A8:7B:81:B1:E4:5B:3C:17:44:02:41:78:15:38:53:E1:67:45:73
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0190810BE48E855FA4BF361146E31CB3A4FE
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DKh7gbHkWzwXRAJBeBU4U-FnRXM.roa
Signing time: Fri 05 Jul 2024 03:59:18 +0000
ROA not before: Fri 05 Jul 2024 03:59:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 04:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:0b:e4:8e:85:5f:a4:bf:36:11:46:e3:1c:b3:a4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 5 03:59:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ca87b81b1e45b3c1744024178153853e1674573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:af:a6:42:a6:16:68:11:d5:f4:f4:3c:f7:
72:c1:4e:5c:b5:34:0d:a7:27:c8:d9:d5:9c:25:59:
8b:dc:31:56:63:b9:a9:f2:f1:bb:81:a3:2d:de:81:
37:45:8a:b7:94:d1:e6:b6:99:a9:b1:45:9f:1e:78:
63:16:66:ed:36:59:ec:1c:93:78:96:a6:37:e7:1d:
02:62:bd:1e:db:09:fc:d6:fc:57:b9:4f:fd:b6:2d:
b4:93:18:df:43:d3:fd:fb:29:6c:47:b0:ea:91:94:
cb:6c:1c:5f:db:0f:cc:f4:78:78:a3:9c:10:57:5e:
66:b9:53:de:7b:51:a1:73:df:67:ec:85:65:fb:34:
ac:ca:52:c4:5e:51:71:60:5b:24:da:74:9b:f8:f6:
c1:92:8b:75:67:fe:c2:9b:c7:93:05:16:5e:49:dd:
b9:3f:26:30:27:e1:6e:e6:2e:21:74:1b:11:35:ba:
47:82:51:b6:06:3d:b4:d2:4c:91:a3:8f:92:77:35:
a3:7a:c6:ef:f6:9b:07:4f:b1:d2:c8:69:9f:82:2a:
40:00:f6:c4:99:2b:20:0d:97:de:3b:f4:65:36:60:
6c:d4:79:50:f6:7c:35:67:2c:6c:26:0c:1c:99:8b:
d2:d7:4c:6c:50:f9:b9:e8:9f:5e:16:0d:14:01:b9:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:7B:81:B1:E4:5B:3C:17:44:02:41:78:15:38:53:E1:67:45:73
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DKh7gbHkWzwXRAJBeBU4U-FnRXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.16.0/22
83.147.21.0/24
83.147.28.0/24
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
04:38:10:de:f7:12:b4:f8:4e:e8:61:f6:1a:2b:19:ea:db:fb:
88:ca:3a:d1:d9:da:a1:9e:2d:b4:91:24:b2:dd:9d:28:dc:cf:
0e:84:31:42:7b:12:72:36:90:97:4c:40:09:d4:6e:5a:6d:23:
c8:a0:75:57:5c:bc:39:aa:96:52:14:b4:98:a2:d1:fc:80:98:
0e:d5:c7:fe:96:c0:3b:df:f5:98:b3:02:c7:a2:78:28:aa:97:
c0:87:12:d3:a4:c7:7e:2d:ac:a5:13:27:91:66:d9:74:dc:35:
74:c9:82:72:7b:db:74:01:15:e7:e2:37:39:44:99:2a:e6:2f:
7a:b1:87:c7:89:51:33:81:d1:ae:ee:5c:09:dd:1c:6a:a5:47:
20:65:9f:bb:6b:93:aa:c4:d5:d8:5a:d6:05:b4:8e:58:c4:0a:
e5:fc:bc:a6:54:5d:a4:25:e9:d7:1b:78:65:94:df:79:61:ac:
38:9f:d0:74:ba:5c:d8:53:87:a9:62:9f:fd:7d:e9:0f:a1:88:
b5:4a:18:09:7c:30:49:d9:6f:d7:5b:f5:3c:5d:2f:2a:9b:db:
09:9b:38:dd:f4:02:db:e6:0b:e5:80:a4:6a:f4:8b:68:6c:1f:
21:28:c5:79:a1:3a:48:1d:f9:5f:21:b3:fb:1a:c7:e7:1a:6f:
15:52:1b:91
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 12 06:10:06 2024 by rpki-client on console-fra.rpki-client.org