Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KeP92GZUHS-atXFw4MLrS2J0XEo.roa
File: KeP92GZUHS-atXFw4MLrS2J0XEo.roa (raw, json)
Hash identifier: OedcuCC/+vB4RIbWZtKyfMbg7Bmj3jvCRpZVHi99KdA=
Subject key identifier: 29:E3:FD:D8:66:54:1D:2F:9A:B5:71:70:E0:C2:EB:4B:62:74:5C:4A
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018BFAB18C4ADF6C5B1EB4425772EA8FF741
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KeP92GZUHS-atXFw4MLrS2J0XEo.roa
Signing time: Thu 23 Nov 2023 05:40:21 +0000
ROA not before: Thu 23 Nov 2023 05:40:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202662
IP address blocks: 83.147.60.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:b1:8c:4a:df:6c:5b:1e:b4:42:57:72:ea:8f:f7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 23 05:40:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29e3fdd866541d2f9ab57170e0c2eb4b62745c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:d1:04:9e:7c:35:98:32:0e:96:78:55:9e:
ec:56:98:ee:0c:73:b9:b0:83:c8:2e:9c:18:ad:5c:
c1:65:88:cf:62:dd:d2:ac:88:ca:a2:b7:37:23:14:
12:45:e4:34:de:77:90:b2:fa:f4:17:88:4b:13:4d:
a8:a2:8f:14:2b:f7:f0:ea:e7:de:6d:5d:34:78:fc:
32:57:72:ec:8d:28:0f:f0:d6:c6:7a:bc:36:3e:90:
3b:8d:7e:2d:5f:ad:0c:f7:fc:3e:f2:43:3e:c1:cf:
d6:1a:42:9e:a6:80:f7:08:73:8b:f7:f0:39:4f:96:
79:79:14:55:47:b1:60:34:06:08:07:81:14:73:be:
de:e7:e2:16:33:60:85:fc:5b:ae:d0:27:bc:99:17:
cc:40:69:7d:f7:23:4b:06:cd:25:b4:be:00:09:f2:
c0:3a:3e:99:8a:bf:44:3f:f1:c6:99:19:d2:c4:fa:
5c:88:4a:a9:47:e1:d7:07:fb:1f:7e:f3:f9:63:68:
60:d7:55:f4:18:0e:0c:3a:70:b7:bf:48:42:92:ae:
ab:bd:8a:22:bb:66:6e:b4:0d:15:3c:e9:33:52:70:
fc:49:12:b9:2d:7a:be:29:18:5b:11:5b:10:9c:fd:
d3:de:4d:33:6f:3b:83:73:70:f4:d5:c1:3c:63:e9:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:FD:D8:66:54:1D:2F:9A:B5:71:70:E0:C2:EB:4B:62:74:5C:4A
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KeP92GZUHS-atXFw4MLrS2J0XEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.60.0/23
Signature Algorithm: sha256WithRSAEncryption
80:6b:76:b4:08:d3:8f:e2:d3:c3:d0:27:45:a7:38:80:ef:62:
db:cc:bd:2b:96:82:0c:37:b5:3c:e7:29:c0:b3:e9:8e:39:84:
27:83:41:33:05:58:a0:85:af:02:54:25:f8:1b:07:0b:54:27:
49:da:ba:91:ff:47:82:aa:2b:04:c2:37:bc:08:47:79:0c:7e:
43:90:6f:6b:58:37:c3:b0:f5:0f:33:3f:33:7a:af:5f:ad:6d:
30:17:b2:11:e2:51:c9:78:9e:b7:48:42:4b:ed:d2:8f:5f:f6:
67:ac:97:c1:72:78:fa:a1:84:e3:fd:36:9d:1d:be:ef:10:60:
81:d9:0d:00:45:4f:71:0c:60:45:c6:73:1b:e4:4d:05:65:b4:
ae:8a:5d:39:c7:70:d2:e2:83:95:dd:65:45:c1:ec:d5:85:44:
70:05:12:60:ad:40:1c:64:c8:5a:52:13:9d:96:af:33:aa:f5:
bc:3b:b4:9d:58:bf:69:53:c1:92:01:79:37:53:65:6b:4b:bd:
26:47:d2:ab:0c:2f:b8:f9:31:e4:83:eb:06:77:38:ac:39:66:
e2:67:d3:cd:fb:f7:af:98:93:ef:23:f7:c9:2e:3a:eb:7a:23:
1a:8c:bf:85:00:ea:f9:a7:95:82:34:cf:ee:45:51:06:5c:87:
79:1c:b5:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYv6sYxK32xbHrRCV3Lqj/dBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMxMTIzMDU0MDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWUzZmRkODY2NTQxZDJmOWFiNTcxNzBlMGMyZWI0YjYyNzQ1YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilvRBJ58NZgyDpZ4VZ7sVpjuDHO5
sIPILpwYrVzBZYjPYt3SrIjKorc3IxQSReQ03neQsvr0F4hLE02ooo8UK/fw6ufe
bV00ePwyV3LsjSgP8NbGerw2PpA7jX4tX60M9/w+8kM+wc/WGkKepoD3CHOL9/A5
T5Z5eRRVR7FgNAYIB4EUc77e5+IWM2CF/Fuu0Ce8mRfMQGl99yNLBs0ltL4ACfLA
Oj6Zir9EP/HGmRnSxPpciEqpR+HXB/sffvP5Y2hg11X0GA4MOnC3v0hCkq6rvYoi
u2ZutA0VPOkzUnD8SRK5LXq+KRhbEVsQnP3T3k0zbzuDc3D01cE8Y+nabwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCnj/dhmVB0vmrVxcODC60tidFxKMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvS2VQOTJHWlVIUy1hdFhGdzRNTHJTMkowWEVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU5M8MA0G
CSqGSIb3DQEBCwUAA4IBAQCAa3a0CNOP4tPD0CdFpziA72LbzL0rloIMN7U85ynA
s+mOOYQng0EzBVigha8CVCX4GwcLVCdJ2rqR/0eCqisEwje8CEd5DH5DkG9rWDfD
sPUPMz8zeq9frW0wF7IR4lHJeJ63SEJL7dKPX/ZnrJfBcnj6oYTj/TadHb7vEGCB
2Q0ARU9xDGBFxnMb5E0FZbSuil05x3DS4oOV3WVFwezVhURwBRJgrUAcZMhaUhOd
lq8zqvW8O7SdWL9pU8GSAXk3U2VrS70mR9KrDC+4+THkg+sGdzisOWbiZ9PN+/ev
mJPvI/fJLjrreiMajL+FAOr5p5WCNM/uRVEGXId5HLV+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org