Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Gv-hYcqYWNBj8CRP1uLrGt1V1xI.roa
File: Gv-hYcqYWNBj8CRP1uLrGt1V1xI.roa (raw, json)
Hash identifier: 6eKLZ0VUFpXaLMkdgDFyiyefrhQfYex0h61wbSMFpec=
Subject key identifier: 1A:FF:A1:61:CA:98:58:D0:63:F0:24:4F:D6:E2:EB:1A:DD:55:D7:12
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01926AE162E93EF42409F2C2EAFF976188FA
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Gv-hYcqYWNBj8CRP1uLrGt1V1xI.roa
Signing time: Tue 08 Oct 2024 06:46:48 +0000
ROA not before: Tue 08 Oct 2024 06:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 05:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:e1:62:e9:3e:f4:24:09:f2:c2:ea:ff:97:61:88:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 8 06:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1affa161ca9858d063f0244fd6e2eb1add55d712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:52:6f:06:e5:c3:58:39:f0:de:5f:5a:0f:
a4:95:b6:a9:fc:ca:79:9d:c1:a8:cd:df:a6:e3:4a:
67:15:02:f2:9c:1b:f4:99:4d:50:f0:34:f3:ec:0a:
87:02:73:be:97:3e:1d:bb:c9:cf:15:2c:d4:24:5c:
06:7b:de:1b:c4:b5:cd:a0:6d:45:7c:f6:b2:aa:38:
6c:04:31:e2:25:4b:6c:46:59:f3:52:9c:3e:f3:20:
8a:27:02:99:d8:d6:41:1e:69:cf:af:b3:3b:4a:dd:
f0:de:2b:db:60:5d:80:49:96:22:4f:1b:28:11:2d:
ea:4d:d7:65:29:25:1b:8a:e9:1e:33:9c:58:f3:9f:
a4:bb:9b:13:89:7f:de:09:59:af:e2:24:a3:6a:af:
14:a2:cd:e6:6f:cc:f2:41:ce:ea:30:19:4c:a7:97:
32:41:e2:4f:6a:7e:a4:ae:57:02:40:2f:dd:89:1a:
63:19:c5:dc:f1:bb:97:75:a0:5a:b8:e4:e6:d9:d9:
1d:72:2a:c5:02:ac:ea:4e:34:f2:11:69:58:75:4f:
2a:45:fb:6a:94:85:a5:9f:dc:23:e7:fd:0c:9a:d8:
4b:16:72:dc:9d:b0:a5:84:b2:3b:d9:cc:17:75:50:
66:88:15:56:7c:9c:13:9e:16:3c:c3:1e:9a:67:0e:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:A1:61:CA:98:58:D0:63:F0:24:4F:D6:E2:EB:1A:DD:55:D7:12
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Gv-hYcqYWNBj8CRP1uLrGt1V1xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.21.255
83.147.26.0-83.147.28.255
Signature Algorithm: sha256WithRSAEncryption
be:9a:59:34:c0:b6:8b:80:33:95:1a:e2:42:a5:40:0b:15:b9:
25:87:63:1a:a8:91:30:c3:53:0b:3a:6d:e6:76:fc:fc:56:2d:
2d:4a:56:44:ed:f6:f4:3c:f4:6a:3f:05:02:6d:c7:72:4b:fd:
eb:f1:c4:60:66:6b:25:17:02:c0:04:eb:a4:fa:ed:ec:00:76:
33:a5:83:d5:4e:80:b1:b4:11:65:45:ef:d6:ed:68:d7:01:b5:
6e:aa:f7:de:3d:bd:d6:b1:a9:50:4a:00:d8:9e:e0:fe:9c:ab:
ac:59:cc:b7:97:47:79:42:7c:19:65:1f:6f:20:09:62:3c:05:
88:5e:8a:86:f3:97:9d:6d:dc:8f:5f:86:b3:6b:c5:01:06:b7:
f1:57:fe:53:08:ac:0c:d6:bd:d0:51:35:d2:d8:cd:6c:bd:11:
d3:0c:c3:c9:7b:c2:a9:c7:65:40:f9:48:41:c8:24:85:68:80:
2f:5a:b8:aa:67:1c:2e:8f:9b:12:34:2e:3e:63:25:e9:82:3a:
7a:55:c5:b2:02:17:33:62:fb:33:7b:b7:f2:1b:1c:e0:f6:cb:
80:61:d7:7a:d3:0a:9c:90:aa:b5:d2:e7:39:1c:99:47:92:b1:
da:b0:f1:e9:d9:47:41:33:b7:74:bf:35:30:97:74:84:6e:f1:
c9:f6:b3:f4
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 3 07:54:25 2024 by rpki-client on console-fra.rpki-client.org