Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/QOE4JFZ35hEMBZbT3zFNEpC-1Po.roa
File: QOE4JFZ35hEMBZbT3zFNEpC-1Po.roa (raw, json)
Hash identifier: 5UFekUrFzeyZT8rEJBBWTYr2QuOWkn/swm6xPghI9ng=
Subject key identifier: 40:E1:38:24:56:77:E6:11:0C:05:96:D3:DF:31:4D:12:90:BE:D4:FA
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0190D88A948D4ADB0F58EC3FAB897039B36F
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/QOE4JFZ35hEMBZbT3zFNEpC-1Po.roa
Signing time: Mon 22 Jul 2024 03:44:39 +0000
ROA not before: Mon 22 Jul 2024 03:44:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.12.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 16:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d8:8a:94:8d:4a:db:0f:58:ec:3f:ab:89:70:39:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 22 03:44:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40e138245677e6110c0596d3df314d1290bed4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:4d:85:06:c9:aa:b5:8f:bf:21:d6:77:6e:
52:66:e3:28:38:dc:3f:83:d9:3b:a8:76:61:84:04:
25:32:6d:85:b6:ca:22:73:eb:4a:f8:1d:cd:87:94:
5a:c4:0c:f4:92:31:01:60:2a:02:86:68:27:4b:2f:
97:a2:6c:49:0e:41:05:16:c6:e2:26:b5:47:c1:67:
5b:5f:a1:76:f5:36:e6:7a:4c:8c:29:47:bd:d5:e2:
9d:eb:b1:6a:04:73:be:1f:7e:57:6f:ad:fd:5e:e8:
a8:d5:e7:bc:17:ce:9e:ac:ef:a6:aa:8c:b0:6e:04:
66:f3:40:08:54:e8:df:d4:95:00:1f:14:ea:f9:b9:
f5:9b:f1:6e:d6:15:43:57:70:4f:18:b6:7a:19:9e:
67:d1:88:c0:26:f7:8e:cc:3e:1a:35:6b:61:89:db:
aa:bf:34:3c:54:14:87:02:f1:ea:a8:0b:8e:6b:3b:
7b:9e:a3:9e:c0:b1:0a:0c:a1:ef:c8:87:a5:01:91:
5a:f1:1a:6a:6a:a1:41:8a:3f:7b:20:55:93:c0:af:
01:d8:b6:30:0f:28:2d:ae:2c:9a:a3:73:48:b0:ee:
15:e0:34:f6:79:24:7b:69:bb:d1:f0:74:ec:65:ce:
a1:c1:47:00:75:94:de:0e:0e:41:32:52:b1:71:0d:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E1:38:24:56:77:E6:11:0C:05:96:D3:DF:31:4D:12:90:BE:D4:FA
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/QOE4JFZ35hEMBZbT3zFNEpC-1Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.12.0-83.147.19.255
83.147.21.0/24
83.147.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:60:38:eb:d4:51:b4:fc:9e:f0:0c:2d:6b:8c:1c:65:57:1f:
35:db:56:2f:47:1f:35:7e:7b:e8:10:b3:37:65:0d:90:0c:21:
79:c6:2b:ef:8f:fe:d9:1a:a9:4a:2b:f3:13:9c:0e:3a:7a:ad:
92:3e:a2:99:b4:db:4a:c2:43:c3:9f:d8:91:c5:f0:9f:76:f1:
8e:d5:bd:06:f3:27:32:9f:89:a0:2a:c7:56:8f:9a:e4:3e:86:
13:66:a0:4e:b7:31:cb:33:7e:03:54:4a:b0:82:42:bf:8d:2b:
2a:15:be:62:4e:0f:61:28:ca:ac:8c:d0:a0:30:f7:95:b3:cf:
f2:9d:49:96:4a:88:8e:f9:55:97:14:33:2f:91:45:52:7d:b7:
a3:85:42:6b:01:f9:b5:f5:56:91:3c:00:6d:94:a0:46:3d:ab:
e0:ee:86:11:a8:21:a0:03:f8:57:72:38:f5:c9:2e:74:73:90:
63:67:6f:4e:4f:9f:b3:16:1d:82:11:1c:a3:f9:7c:72:ba:a1:
f4:5d:4e:3d:23:a6:33:ee:48:c7:54:28:fc:fd:c2:85:59:17:
a7:e7:ad:d0:5b:5b:ba:c9:7e:25:25:49:d5:63:11:01:c2:47:
8a:60:e2:fa:07:a3:ea:83:ac:28:09:57:62:cd:1c:7a:19:8e:
bd:cb:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 19:51:41 2024 by rpki-client on console-ams.rpki-client.org