Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EUFOuRCl3AjlPSStY3HkEsukKpQ.roa
File: EUFOuRCl3AjlPSStY3HkEsukKpQ.roa (raw, json)
Hash identifier: Vi78QsgdHosJUqWEse8M8NC57uv20tJ+7xrXWZJBA9Q=
Subject key identifier: 11:41:4E:B9:10:A5:DC:08:E5:3D:24:AD:63:71:E4:12:CB:A4:2A:94
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018C240D9F435BBDE022619EB2FB06345566
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EUFOuRCl3AjlPSStY3HkEsukKpQ.roa
Signing time: Fri 01 Dec 2023 06:25:21 +0000
ROA not before: Fri 01 Dec 2023 06:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:0d:9f:43:5b:bd:e0:22:61:9e:b2:fb:06:34:55:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 1 06:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11414eb910a5dc08e53d24ad6371e412cba42a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:7c:49:1b:89:c9:eb:d7:06:48:f9:db:15:
d6:5a:f4:d9:9f:76:d2:17:6e:a3:27:28:e8:c6:d0:
11:7f:a4:bb:56:d1:64:ae:25:c4:73:24:98:9f:ff:
4b:b4:b3:0d:a4:1f:c2:6b:22:c1:4e:fe:af:ea:bf:
7e:c9:ed:d5:39:44:48:b0:2f:67:9b:25:e0:59:95:
f6:21:77:80:3f:77:98:57:5f:8d:f1:e2:67:c7:e1:
84:8b:ff:f8:68:0f:7f:8d:83:4b:77:5f:a1:1d:95:
4d:65:c7:32:d4:51:ad:6b:df:53:01:53:60:4f:27:
03:9e:2b:31:63:b3:f6:4a:50:61:e3:07:82:94:2d:
cc:9e:bc:1d:43:fe:ac:8e:61:66:b1:b8:19:b6:fe:
04:de:c3:dd:01:30:5f:57:f7:31:12:bb:59:87:83:
06:f2:4a:2f:32:32:a0:f3:16:3a:a5:43:99:81:1c:
61:14:64:61:9c:b2:84:ef:13:65:01:3c:70:c5:17:
fe:2a:98:fd:c5:ab:43:78:24:62:ca:e5:9a:6b:cd:
ff:43:9a:15:2b:8a:85:33:a7:4e:43:c0:a1:61:ba:
71:eb:a4:5d:29:4d:4c:84:dc:15:79:6f:8f:84:3f:
54:1a:bf:cf:07:c7:70:4d:c0:79:f8:ff:a3:2a:af:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:41:4E:B9:10:A5:DC:08:E5:3D:24:AD:63:71:E4:12:CB:A4:2A:94
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EUFOuRCl3AjlPSStY3HkEsukKpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.20.0/23
83.147.28.0/22
Signature Algorithm: sha256WithRSAEncryption
62:77:f9:f3:55:25:92:f3:0c:6e:fc:ac:98:d1:b4:08:23:67:
2c:8b:cb:db:e2:56:5e:77:77:8c:ca:87:f3:fa:33:f2:db:8c:
19:72:15:e9:cf:38:6f:dd:6b:e3:17:f8:b3:0a:a9:d2:f2:bb:
13:72:29:e0:01:b8:5a:47:8a:a8:3f:a1:30:e9:11:70:97:fd:
00:72:7c:fc:5f:06:dd:b5:b7:13:e9:33:ee:3c:19:1d:00:6a:
6f:92:82:f2:87:55:82:1c:17:18:c3:b9:75:e0:c1:ed:0d:6a:
b6:be:f8:b1:5d:85:c1:ce:35:a6:1d:b9:db:55:32:9e:66:be:
60:15:02:ad:56:7c:29:52:65:a2:1d:bf:83:4a:08:f3:ec:ea:
41:db:9d:cb:06:15:b0:30:c6:23:37:69:72:90:c5:3e:79:af:
6a:f5:b5:b3:db:fd:6d:d9:f4:8c:c3:d2:d5:48:d1:14:c5:47:
df:3b:53:20:84:e7:15:59:f3:f7:75:6f:c7:62:d4:1e:d2:cb:
ba:38:7b:31:e9:0e:a0:ea:62:da:0a:d8:de:04:a7:30:0b:4d:
81:6a:a5:98:2f:d5:3d:be:af:f2:49:d1:d1:35:79:43:d0:4e:
a6:9f:1e:f1:7a:19:b5:1b:fc:cc:6f:5a:6f:9a:14:60:ba:0a:
a2:7e:13:6c
-----BEGIN CERTIFICATE-----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 at Sat Dec 2 14:17:22 2023 by rpki-client on console-ams.rpki-client.org