Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/I-WLw8kJBrDD4iFsGpSVdd-mR64.roa
File: I-WLw8kJBrDD4iFsGpSVdd-mR64.roa (raw, json)
Hash identifier: MXWQ8LSH1PiK0Qch2mpUTbX9Fj7C+/5e12XpJ76EUlM=
Subject key identifier: 23:E5:8B:C3:C9:09:06:B0:C3:E2:21:6C:1A:94:95:75:DF:A6:47:AE
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0190700251DF7DC36A5D61204B1F8B545675
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/I-WLw8kJBrDD4iFsGpSVdd-mR64.roa
Signing time: Mon 01 Jul 2024 20:35:18 +0000
ROA not before: Mon 01 Jul 2024 20:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 03:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:70:02:51:df:7d:c3:6a:5d:61:20:4b:1f:8b:54:56:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 1 20:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23e58bc3c90906b0c3e2216c1a949575dfa647ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:e8:99:f6:f1:ea:f9:35:ae:82:bb:62:4d:
10:11:30:51:29:0c:a4:d3:9f:7a:50:4a:34:c0:2e:
e2:48:eb:d7:a1:ab:7f:c7:4a:37:72:fe:33:cf:d4:
49:b7:b8:cf:e3:ed:cc:5c:2f:41:8d:62:6e:55:62:
2f:33:97:93:87:3b:ec:2c:03:6e:3e:b3:29:12:3d:
08:1e:98:e8:6d:fd:e8:2b:95:ae:be:92:74:02:43:
2d:74:27:9a:46:43:cb:a0:af:1c:8e:01:6d:82:d3:
e9:f7:22:9e:1f:43:06:7a:88:10:ee:ff:c6:1e:15:
00:af:8d:31:62:e3:df:89:e4:f6:99:d6:fa:8a:44:
37:26:49:cb:f1:95:6b:0c:5b:84:d6:39:fe:1c:4f:
fd:9e:77:94:84:2a:d9:c7:30:68:35:c5:03:67:23:
4e:ea:79:31:ba:82:3d:09:0e:2a:99:cb:71:07:59:
f5:5a:6b:a2:f1:e8:38:bf:23:ee:c6:72:78:ee:0f:
7b:52:da:03:7c:b8:6e:a6:bd:cb:41:f1:cc:f3:df:
9f:86:77:de:84:9c:6c:73:1a:c5:44:11:36:0c:ca:
d2:7c:8a:dc:c8:0d:56:a3:06:19:5c:d7:2f:9b:4e:
b4:c8:df:84:c8:e7:db:0c:ff:78:e6:97:68:8f:d5:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E5:8B:C3:C9:09:06:B0:C3:E2:21:6C:1A:94:95:75:DF:A6:47:AE
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/I-WLw8kJBrDD4iFsGpSVdd-mR64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.16.0/22
83.147.21.0/24
83.147.28.0/24
Signature Algorithm: sha256WithRSAEncryption
67:17:43:28:ec:f1:64:64:95:f6:17:dc:38:82:af:29:35:5e:
e7:d2:64:d8:7b:a4:9d:86:34:b4:12:fd:22:42:fe:4a:dd:e7:
ea:94:e3:53:13:5e:da:7a:47:58:f7:79:b4:10:2c:d2:59:28:
d5:43:fa:0d:63:55:4f:3c:43:90:36:e0:d7:8f:93:1e:43:78:
65:10:4e:1a:f2:b9:f5:85:0c:a3:f6:a0:4d:a0:80:b4:64:da:
77:4e:c0:b5:02:ac:9c:b4:dc:6b:cb:ff:00:42:63:0b:df:e2:
be:33:9f:38:4a:cb:cc:54:95:a9:e7:8f:db:72:9d:49:06:6e:
6a:1b:11:ef:f7:6a:4a:f7:43:3c:b7:77:22:22:3f:8e:b2:e8:
b8:43:54:bc:35:08:4f:9b:d3:7e:57:e4:39:ac:83:c3:82:49:
36:b8:ff:23:78:9f:3a:64:47:62:74:8f:c6:75:4f:70:55:61:
8d:b2:6c:b9:e4:ae:87:07:cf:8f:f8:5a:0b:2b:ef:b1:6f:a3:
2d:55:99:a1:32:65:82:e6:5a:65:c7:71:83:9e:e4:7a:7c:14:
39:cc:fa:f1:d6:99:a2:99:bb:f3:70:9e:cc:07:a2:9a:67:3b:
34:bc:13:d1:2b:61:1a:6e:d0:f3:c5:f2:b7:62:c6:5a:9b:68:
8d:73:3d:ae
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 5 05:01:36 2024 by rpki-client on console-fra.rpki-client.org