Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/IfMymi6p0YcYhhssmfnoBjKmuWI.roa
File: IfMymi6p0YcYhhssmfnoBjKmuWI.roa (raw, json)
Hash identifier: UXJVlpT1UU9K6UkDujRTxuh9WcyB5QstePbWPPgQXRs=
Subject key identifier: 21:F3:32:9A:2E:A9:D1:87:18:86:1B:2C:99:F9:E8:06:32:A6:B9:62
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01887743305CDF05E90732D672BC100BCA6C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/IfMymi6p0YcYhhssmfnoBjKmuWI.roa
Signing time: Thu 01 Jun 2023 14:01:11 +0000
ROA not before: Thu 01 Jun 2023 14:01:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.61.0/24 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 04:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:43:30:5c:df:05:e9:07:32:d6:72:bc:10:0b:ca:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jun 1 14:01:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21f3329a2ea9d18718861b2c99f9e80632a6b962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:7c:7b:93:71:79:ea:e8:d0:08:4d:74:bc:
7c:36:69:05:de:d8:70:58:b3:a0:60:fe:a3:cf:4e:
14:a2:9f:6e:37:e4:29:cb:d2:c0:ba:56:3b:cf:df:
fb:1a:be:e0:d7:8c:af:f8:81:f3:d2:b6:6c:ff:0f:
3a:e7:17:8c:4f:48:a0:ed:57:3c:a8:85:c8:ea:eb:
6f:c8:61:6e:49:d9:48:19:df:13:20:46:07:45:e3:
24:15:f3:49:a2:0e:d9:8b:b2:0f:e0:72:66:4c:61:
14:40:ca:3b:d3:d8:6b:01:82:b8:d7:7d:d9:e0:c6:
30:dd:f0:67:f5:fe:c6:5f:ea:37:28:9a:81:dc:39:
83:56:78:7a:b9:42:46:f5:d7:d6:dc:e6:5f:91:bc:
07:d3:c2:2a:8a:12:f7:64:e4:b7:41:c9:f0:c5:71:
c1:1c:10:1f:f8:94:46:9e:d7:bd:f6:79:01:21:5b:
9f:80:c8:ce:fd:9a:68:f1:a9:01:40:9d:14:9a:d1:
11:71:df:46:12:9d:13:f5:ef:5f:38:b0:8d:ff:e2:
5f:ed:f4:11:9b:ec:94:5b:d2:c8:7e:b7:5c:3c:a7:
35:0b:81:cf:8f:e9:84:35:cd:2d:81:94:92:47:9a:
0b:7f:6b:76:9a:ad:d2:07:a9:30:be:94:e3:45:3e:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:32:9A:2E:A9:D1:87:18:86:1B:2C:99:F9:E8:06:32:A6:B9:62
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/IfMymi6p0YcYhhssmfnoBjKmuWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
83.147.11.0/24
83.147.27.0/24
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f9:e0:5e:20:05:a6:09:d6:e1:f3:68:98:03:43:77:0c:f7:
8e:a1:30:12:1d:f1:f1:b4:79:34:98:d2:8a:b0:d4:0b:f1:e1:
49:b0:d7:b6:66:56:83:28:5a:24:26:4b:ef:b7:04:5b:af:45:
77:4b:6f:7c:ed:bd:93:25:4b:6c:d1:59:b7:d3:d6:11:e1:dc:
5e:26:26:6b:eb:79:fa:26:a6:60:38:41:80:96:5f:c7:49:c8:
60:d1:52:1c:1e:f8:74:f4:84:3a:a0:4a:50:ab:82:9c:66:2d:
6c:fd:db:9e:fd:d3:26:1d:35:3e:43:b9:0a:d1:32:88:76:18:
de:97:02:da:dc:be:4b:05:a9:82:d0:46:ed:34:ed:df:82:9d:
60:a2:fd:d0:92:7e:1b:36:00:95:36:f5:b5:34:41:60:c8:73:
bf:e4:17:1a:f1:3b:51:7d:a3:96:3a:11:24:48:75:49:d7:b8:
b2:9f:fb:55:bb:20:a1:83:80:3b:a3:1d:50:b7:cf:ca:bc:40:
d4:e8:fc:30:13:6b:4a:d1:9d:c8:f4:2c:01:74:5a:8a:9c:3f:
14:a1:55:e2:6d:1d:2d:a5:35:be:0e:c1:be:6a:7f:c3:e5:cd:
3a:78:45:d2:52:34:1c:f4:fc:95:44:59:79:f8:fa:9a:bc:c1:
a4:91:09:83
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYh3QzBc3wXpBzLWcrwQC8psMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMwNjAxMTQwMTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWYzMzI5YTJlYTlkMTg3MTg4NjFiMmM5OWY5ZTgwNjMyYTZiOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjed8e5Nxeero0AhNdLx8NmkF3thw
WLOgYP6jz04Uop9uN+Qpy9LAulY7z9/7Gr7g14yv+IHz0rZs/w865xeMT0ig7Vc8
qIXI6utvyGFuSdlIGd8TIEYHReMkFfNJog7Zi7IP4HJmTGEUQMo709hrAYK4133Z
4MYw3fBn9f7GX+o3KJqB3DmDVnh6uUJG9dfW3OZfkbwH08IqihL3ZOS3QcnwxXHB
HBAf+JRGnte99nkBIVufgMjO/Zpo8akBQJ0UmtERcd9GEp0T9e9fOLCN/+Jf7fQR
m+yUW9LIfrdcPKc1C4HPj+mENc0tgZSSR5oLf2t2mq3SB6kwvpTjRT4mlwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCHzMpouqdGHGIYbLJn56AYyprliMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvSWZNeW1pNnAwWWNZaGhzc21mbm9CakttdVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAU5MJAwQA
U5MLAwQAU5MbAwQAU5M9MA0GCSqGSIb3DQEBCwUAA4IBAQBC+eBeIAWmCdbh82iY
A0N3DPeOoTASHfHxtHk0mNKKsNQL8eFJsNe2ZlaDKFokJkvvtwRbr0V3S2987b2T
JUts0Vm309YR4dxeJiZr63n6JqZgOEGAll/HSchg0VIcHvh09IQ6oEpQq4KcZi1s
/due/dMmHTU+Q7kK0TKIdhjelwLa3L5LBamC0EbtNO3fgp1gov3Qkn4bNgCVNvW1
NEFgyHO/5Bca8TtRfaOWOhEkSHVJ17iyn/tVuyChg4A7ox1Qt8/KvEDU6PwwE2tK
0Z3I9CwBdFqKnD8UoVXibR0tpTW+DsG+an/D5c06eEXSUjQc9PyVRFl5+PqavMGk
kQmD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org