Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/OZzdZBitfUQD_0tFJOa4ovt21Jc.roa
File: OZzdZBitfUQD_0tFJOa4ovt21Jc.roa (raw, json)
Hash identifier: MIXBzGlF2l9BWYKWesHO0qIgQXF4iw88CkGnYtKtMOg=
Subject key identifier: 39:9C:DD:64:18:AD:7D:44:03:FF:4B:45:24:E6:B8:A2:FB:76:D4:97
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018A5E7E8527D42214E8573F68A2212C8185
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/OZzdZBitfUQD_0tFJOa4ovt21Jc.roa
Signing time: Mon 04 Sep 2023 04:41:04 +0000
ROA not before: Mon 04 Sep 2023 04:41:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.48.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.14.0/24 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:7e:85:27:d4:22:14:e8:57:3f:68:a2:21:2c:81:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 4 04:41:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=399cdd6418ad7d4403ff4b4524e6b8a2fb76d497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:32:77:76:cd:d7:89:d6:b9:7a:1a:ff:33:0e:
0f:80:57:59:4c:e7:8c:00:59:bb:0b:37:71:36:86:
4e:7c:81:00:2b:75:e5:a4:b4:5e:11:6c:d2:17:67:
69:8a:35:01:6e:55:10:68:c3:49:89:12:ef:75:fb:
81:3d:4c:ea:58:d4:36:0b:ce:eb:31:08:71:aa:3f:
2f:a4:7f:c2:0c:47:f3:1e:c8:4e:50:24:37:7e:59:
b2:73:77:74:f2:66:b5:52:1f:af:6b:c7:87:bb:35:
c2:0a:d4:c4:ea:d7:79:7c:d6:58:3d:50:ed:ff:cb:
3c:ac:46:3e:96:75:84:bc:12:87:6a:11:d3:a2:78:
0b:81:f3:85:55:78:26:13:90:0e:7b:d3:4e:f2:15:
9a:39:65:24:9f:1f:e4:83:b4:ba:fd:79:27:e3:f8:
20:c4:43:92:16:45:63:87:97:42:a7:59:1e:1e:a5:
f1:84:9d:6d:10:3f:8b:0e:7b:a2:48:68:8a:b0:c5:
72:9e:d3:87:fa:c8:70:d7:ca:68:60:d4:a3:b1:72:
43:48:73:5c:35:db:b4:f8:f4:ec:1b:31:4a:a6:21:
12:66:74:13:34:9b:80:1c:5f:aa:d3:ee:58:a3:d5:
8e:2d:5b:76:35:b9:e3:2e:90:cf:5d:ea:fd:ae:ff:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9C:DD:64:18:AD:7D:44:03:FF:4B:45:24:E6:B8:A2:FB:76:D4:97
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/OZzdZBitfUQD_0tFJOa4ovt21Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.9.0/24
83.147.11.0/24
83.147.14.0/24
83.147.20.0/23
83.147.23.0/24
83.147.28.0/22
83.147.40.0-83.147.51.255
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ba:90:2c:1a:60:ce:35:ba:46:f5:2a:73:0c:3a:3c:7a:86:
e4:e2:fe:5e:e7:ec:98:9f:e8:cd:02:3a:c7:56:85:d5:c7:54:
f2:85:a2:67:37:76:cb:ee:12:3d:9d:77:6a:b1:ba:3b:d6:e7:
67:84:3d:54:b3:2e:ba:7e:4d:a8:d2:e3:4c:21:ff:bc:1a:2f:
33:fd:81:36:91:9b:60:40:ac:2c:43:18:c7:f7:db:76:00:64:
4c:cb:af:6e:4d:1d:04:60:ff:28:0c:2f:69:a5:a4:b0:2a:a4:
88:d2:2b:89:44:ea:ba:79:8d:2b:d8:1b:bf:7e:d8:a5:ef:44:
61:aa:ab:f7:79:0a:72:c0:95:72:a7:16:62:74:74:39:2e:fa:
60:d5:4e:1e:32:ef:ff:7e:be:77:dd:15:ac:21:26:4c:17:cc:
95:f5:d9:6b:fe:c8:f4:a2:f7:9f:05:8c:be:19:fc:d9:69:f5:
8f:b3:99:85:99:f2:2d:d7:3d:dc:0e:4b:da:42:db:23:6c:96:
22:11:ac:7d:ae:90:7d:f7:59:61:e4:be:79:93:f4:e0:20:29:
88:5d:94:f0:46:54:c0:19:55:ef:ad:a7:05:a7:ac:71:e3:7f:
e0:3c:bb:37:b7:0a:ec:0e:65:ac:fd:b6:66:33:2e:94:02:4d:
1f:be:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 14:10:55 2023 by rpki-client on console-ams.rpki-client.org