Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/MXrufL72oB95HFrZSFdw6usaf10.roa
File: MXrufL72oB95HFrZSFdw6usaf10.roa (raw, json)
Hash identifier: 5p4fCAz0kn4F3rDPYzRdyu8XKX477INHjfrE4Nja4o4=
Subject key identifier: 31:7A:EE:7C:BE:F6:A0:1F:79:1C:5A:D9:48:57:70:EA:EB:1A:7F:5D
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018B1F6F1690C725EA5488E712DDFF2F0FF0
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/MXrufL72oB95HFrZSFdw6usaf10.roa
Signing time: Wed 11 Oct 2023 15:50:55 +0000
ROA not before: Wed 11 Oct 2023 15:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.4.0/22 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Oct 2023 03:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:6f:16:90:c7:25:ea:54:88:e7:12:dd:ff:2f:0f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 11 15:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=317aee7cbef6a01f791c5ad9485770eaeb1a7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:24:91:06:22:a7:40:a1:a7:64:4e:fd:a4:
25:3f:ca:e9:0d:ac:da:da:25:a9:6e:8d:d3:d5:e7:
eb:d8:b7:2d:0e:dd:02:68:bb:62:36:37:0a:ce:af:
a7:31:a7:5b:55:e6:4d:5d:41:43:f4:4b:91:ed:65:
56:c4:cf:10:53:f1:16:e9:62:aa:55:5f:16:94:6b:
31:60:a7:73:20:24:32:a2:10:79:d6:6b:b4:ce:1d:
1e:03:e0:7f:17:8f:2b:2f:d0:01:ea:c6:ee:6c:b3:
9e:df:58:92:75:7b:fe:05:0c:88:7b:1a:45:72:7f:
92:ac:ac:14:01:8e:a0:11:02:a5:c5:7c:3c:fa:e5:
eb:22:3e:08:55:a7:24:93:2c:4c:f5:e2:83:64:5a:
99:61:37:41:72:29:91:50:f4:71:56:f2:ad:dc:bf:
2f:d6:08:c5:ca:3f:8b:23:88:f9:d2:33:10:5f:a7:
f3:93:9e:06:37:43:85:28:b5:d7:89:4f:7e:7c:ae:
8b:52:68:7d:8d:9c:01:bc:07:2f:08:48:05:f0:d4:
0f:49:1c:bc:f7:e1:5d:32:0b:18:58:8b:97:6f:9e:
ec:64:de:55:b1:cf:e7:e2:e2:45:d5:d3:dc:8e:64:
f4:6e:f0:ff:ed:11:6b:73:18:52:cc:8a:59:2e:8d:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7A:EE:7C:BE:F6:A0:1F:79:1C:5A:D9:48:57:70:EA:EB:1A:7F:5D
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/MXrufL72oB95HFrZSFdw6usaf10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/21
83.147.20.0/23
83.147.23.0/24
83.147.28.0/22
83.147.40.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d0:0a:aa:f7:65:78:7d:58:19:6e:9b:11:50:9a:0e:03:6f:
a8:29:7c:e6:9d:d1:a1:fc:8b:89:fa:36:0d:0a:c1:de:15:8d:
54:83:f4:a0:04:1f:72:c6:4f:68:23:e0:7f:81:4f:f8:5f:16:
9a:d8:fe:d0:ad:31:71:bb:a8:f9:35:b4:2f:9d:c6:07:91:07:
32:e2:d7:65:97:3c:a4:11:5f:6f:2e:9b:d6:fe:cf:31:aa:9f:
53:88:39:bf:44:e2:64:26:10:d3:b8:11:9a:3c:34:9d:fe:6d:
11:20:21:d6:64:38:c8:75:15:bd:d7:45:a3:d2:27:9c:e7:59:
34:4b:45:24:f8:f0:5f:74:5c:37:fe:ba:87:5f:08:ee:98:59:
59:d5:cd:94:2e:75:d5:9a:cf:fc:1a:ed:14:f0:ea:74:79:c8:
57:5c:75:83:b8:5d:20:41:68:d0:bb:2c:26:5f:f5:ce:44:01:
59:8b:2c:e8:64:72:b3:a3:8a:16:5b:82:cf:cb:a5:40:5e:74:
29:22:a2:39:41:73:bd:e3:bb:fb:58:c1:4b:31:08:bc:85:cf:
8e:b7:0b:d0:8b:e3:31:d6:11:0a:15:2b:79:5d:35:a9:ad:5f:
01:fa:75:47:0b:dc:b8:35:79:80:04:ea:9d:a4:4e:07:ec:22:
17:00:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org