Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LQK5k7I__r0wScDigiYI9DSVzsc.roa
File: LQK5k7I__r0wScDigiYI9DSVzsc.roa (raw, json)
Hash identifier: BpX+N/9RxEmTPN8yPYBpT725dz38tDvmB+Ue/TjwQpY=
Subject key identifier: 2D:02:B9:93:B2:3F:FE:BD:30:49:C0:E2:82:26:08:F4:34:95:CE:C7
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0188D1D8773A74A42EE92DBF0E74F8B731E0
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LQK5k7I__r0wScDigiYI9DSVzsc.roa
Signing time: Mon 19 Jun 2023 04:10:04 +0000
ROA not before: Mon 19 Jun 2023 04:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d1:d8:77:3a:74:a4:2e:e9:2d:bf:0e:74:f8:b7:31:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jun 19 04:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d02b993b23ffebd3049c0e2822608f43495cec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0d:9d:22:05:87:9e:2b:b6:21:a0:9e:07:86:
90:b5:32:e0:8d:50:be:c9:1c:9d:ab:97:7a:50:0e:
13:cf:c1:7f:1d:a9:cc:12:b0:43:21:c0:99:e1:1d:
8f:53:12:64:8b:dc:a7:f8:66:38:8e:10:25:17:9d:
06:5d:2b:e3:31:a7:13:0a:85:be:d5:0b:2d:f9:ef:
38:17:75:2f:6f:6d:be:e4:b9:44:1d:1f:cc:69:38:
50:ba:47:44:8b:db:8e:60:26:0e:c1:24:7a:15:5b:
0b:ee:d9:3e:42:8c:89:44:e7:1d:c0:6c:5f:4f:65:
e9:a0:8b:90:76:5a:68:54:ea:fc:a2:04:9c:8a:38:
8e:eb:80:7a:0d:43:d5:e4:74:1d:2a:86:4f:36:bd:
ee:f1:68:da:be:a3:d7:b0:c7:35:2d:b0:f6:55:7c:
72:18:ba:96:d9:57:11:d3:b6:4b:f1:04:98:c4:ac:
95:b4:ad:86:ad:5e:b5:97:7c:4c:ef:08:8a:1b:84:
f1:5d:6d:b9:dd:98:9b:ce:ec:a3:ac:9d:42:96:94:
fc:f5:54:54:13:cb:bd:bb:b3:b3:51:72:96:8d:f6:
28:3a:0a:31:df:32:d0:ad:6c:48:ac:48:64:99:8a:
89:a7:b5:24:c3:d4:99:80:33:7e:60:d9:d8:58:fd:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:02:B9:93:B2:3F:FE:BD:30:49:C0:E2:82:26:08:F4:34:95:CE:C7
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LQK5k7I__r0wScDigiYI9DSVzsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
83.147.11.0/24
83.147.27.0-83.147.31.255
83.147.44.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2f:01:8c:4b:84:93:ad:46:6f:e0:20:7b:16:83:24:9e:ba:
35:aa:d5:6e:4e:30:36:21:58:32:71:29:f8:d2:9f:e9:7b:81:
44:a4:6a:58:9a:a7:ce:99:6a:b1:69:7a:93:47:c1:c9:cb:3c:
b9:d7:40:ff:48:65:1a:90:a3:bb:ee:1b:9c:1c:79:d1:9f:40:
5c:67:14:1e:e0:30:ab:b1:14:09:96:bd:ad:cb:a0:0d:ed:60:
29:8d:76:22:0d:0d:85:09:f7:af:97:fe:49:39:9c:e0:ae:b9:
0f:40:ce:28:22:be:30:4c:8a:d0:dc:fd:b9:e2:b8:e0:24:c4:
d4:34:24:0c:59:19:7f:a9:45:30:59:66:31:72:26:93:34:1d:
1c:f6:c2:44:a3:d6:83:8e:ff:31:77:56:0b:a0:a5:d4:b0:69:
68:41:ff:e8:66:86:2e:dd:c3:83:e2:5b:32:b4:89:a0:61:d9:
f4:4f:4b:26:ed:fa:fa:e7:05:4d:fe:69:f3:1b:cb:e1:03:51:
e0:ef:12:82:f1:f5:5c:f6:88:87:9e:ef:e0:c8:d6:4c:d5:f7:
26:fd:43:bd:f8:0a:b6:f8:52:2d:19:4e:5e:a8:ab:d2:7a:bc:
20:3c:63:00:b9:41:8c:eb:87:11:0d:60:d2:10:13:5f:45:f6:
30:31:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org