Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Gd83gDwY79UN37w5-NOQ58jvX-4.roa
File: Gd83gDwY79UN37w5-NOQ58jvX-4.roa (raw, json)
Hash identifier: xxeAvF1pTETuAC2A/s0Pds/OYR01Fd7J1GspckawMh0=
Subject key identifier: 19:DF:37:80:3C:18:EF:D5:0D:DF:BC:39:F8:D3:90:E7:C8:EF:5F:EE
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CB025383B7C981D3E11B12073EB54AD79
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Gd83gDwY79UN37w5-NOQ58jvX-4.roa
Signing time: Thu 28 Dec 2023 11:17:58 +0000
ROA not before: Thu 28 Dec 2023 11:17:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.48.0/22 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 08:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:25:38:3b:7c:98:1d:3e:11:b1:20:73:eb:54:ad:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 28 11:17:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19df37803c18efd50ddfbc39f8d390e7c8ef5fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:7e:91:94:7b:f6:9c:ef:37:aa:cc:35:c1:
d8:a8:fe:06:bf:8c:92:e8:1a:89:65:9e:5d:75:e3:
64:88:35:48:09:56:07:68:05:ff:9b:91:a2:6d:53:
e1:d8:57:84:60:e2:6c:14:1e:0f:bf:4e:1e:c5:ec:
bf:2b:95:f3:0e:13:04:66:c0:78:5a:58:cb:f1:7a:
8f:78:01:8c:a8:30:8a:9e:f4:d8:78:82:c4:43:40:
95:e0:54:ea:79:d6:be:fd:8b:ef:63:38:79:f5:28:
b1:4f:5a:69:2d:2d:bd:33:9b:55:12:9c:db:f2:67:
77:6d:61:4b:46:ff:36:d1:d1:97:b8:c1:32:84:3a:
74:10:e9:63:ec:0a:54:79:aa:ca:28:ca:6d:4a:51:
19:1c:51:3b:2f:3c:ce:6b:b7:13:f8:17:07:4b:d3:
89:15:a0:7a:4f:75:e5:5f:7e:fd:9d:f7:a1:e3:dd:
cb:c2:98:2d:fd:b4:e6:81:b8:ab:7b:19:5c:fe:71:
97:ac:fa:da:35:d5:19:3c:83:61:da:38:05:dc:04:
5a:37:cd:13:6d:4b:0e:58:8a:5f:d2:95:05:51:34:
06:62:33:8a:44:9a:55:61:4e:dc:a0:77:e4:35:c5:
35:e3:f6:df:91:d1:f1:4c:18:28:85:f3:f8:fb:32:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DF:37:80:3C:18:EF:D5:0D:DF:BC:39:F8:D3:90:E7:C8:EF:5F:EE
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Gd83gDwY79UN37w5-NOQ58jvX-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.26.0/23
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
98:95:3f:73:25:1f:39:d5:2a:a4:06:f6:03:98:27:4e:ab:81:
b1:13:d3:f5:ac:b7:58:7d:b9:02:0c:4b:31:05:e7:6a:ec:87:
dc:63:81:e9:7e:ed:79:14:db:51:0c:be:72:4b:83:ea:a0:b4:
a9:b8:32:67:55:7c:7b:30:db:26:54:c3:fc:80:64:99:cc:37:
7c:2f:f6:ad:2f:77:31:e4:32:0d:2a:77:45:c8:a3:7c:c0:0f:
f9:31:45:b2:35:c9:8d:82:3a:5b:b7:d0:b8:85:d0:2a:b3:1d:
e4:3b:b5:42:00:55:89:f2:64:56:9f:75:aa:ee:41:20:58:23:
73:9a:33:bd:bf:a4:9b:fd:b6:64:33:2e:dd:c7:91:ba:58:f0:
cf:8d:01:5f:ad:75:53:94:4d:f1:2e:73:ad:14:c6:e4:11:63:
4e:35:42:3e:f1:5f:8b:a1:ea:86:87:78:85:b3:26:09:7b:04:
f9:84:e7:ee:38:e0:90:d1:9f:e2:9f:fc:4d:12:49:a0:77:0c:
fa:2b:13:b0:40:39:89:db:cb:21:08:b7:58:3a:f5:5a:e0:4c:
44:66:60:12:f0:29:e9:76:33:c1:4b:d2:bb:fa:c5:5a:ee:88:
f2:33:c5:06:54:35:7b:fa:05:75:e5:75:d9:5d:08:ce:57:9f:
04:6e:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org