Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/R7CI6XD1flWfS6mOjJGk54h3xpA.roa
File: R7CI6XD1flWfS6mOjJGk54h3xpA.roa (raw, json)
Hash identifier: c8OgKF2kzbOMJMcvzbyclqSg+8ARrRVnFLSmpDzlFxU=
Subject key identifier: 47:B0:88:E9:70:F5:7E:55:9F:4B:A9:8E:8C:91:A4:E7:88:77:C6:90
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018F22F5388870F06C28F74FD322CDD03E36
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/R7CI6XD1flWfS6mOjJGk54h3xpA.roa
Signing time: Sun 28 Apr 2024 04:27:26 +0000
ROA not before: Sun 28 Apr 2024 04:27:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 17:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:f5:38:88:70:f0:6c:28:f7:4f:d3:22:cd:d0:3e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 28 04:27:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47b088e970f57e559f4ba98e8c91a4e78877c690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:3c:b8:7c:4e:85:e0:f3:77:be:e5:51:14:
b9:15:10:24:ff:c2:79:4e:8f:04:cf:c1:c5:8f:9f:
a2:93:e4:e8:ef:b6:74:f1:43:ac:b1:81:80:96:8f:
a6:b9:96:b5:00:bb:70:e8:56:a9:41:82:3b:98:ee:
bf:b7:d8:31:61:e6:ef:83:b0:67:ea:73:a6:5a:e6:
f7:07:f1:64:b6:30:c2:be:ec:15:18:ff:ea:16:8a:
98:7c:3c:ec:31:8d:66:2f:4b:08:20:20:11:bf:fc:
30:78:1f:11:2f:e2:d4:69:64:0d:b7:0d:ab:33:f0:
59:d6:97:56:4c:22:82:3e:26:30:58:66:db:e0:47:
22:00:38:ed:2c:4d:1e:98:83:87:88:9f:6d:d3:c4:
dc:6e:04:70:b3:5c:ab:2d:bf:d0:bb:70:0c:ae:54:
4c:71:b5:9c:76:31:44:13:8e:bc:d5:4d:d3:7b:e2:
b6:af:c8:b1:3a:8d:1a:29:d4:37:23:24:77:b7:59:
20:fb:e1:2c:76:91:02:65:4a:7a:b6:2c:6b:c8:b4:
4a:93:d6:46:37:82:b6:34:83:a1:98:4d:64:31:d0:
15:2f:6c:6f:3c:da:5c:35:f0:7a:6e:28:7a:c8:4b:
92:8c:9d:6d:7d:da:eb:28:9a:73:69:7e:0d:79:4e:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:88:E9:70:F5:7E:55:9F:4B:A9:8E:8C:91:A4:E7:88:77:C6:90
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/R7CI6XD1flWfS6mOjJGk54h3xpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.16.0/22
83.147.21.0/24
83.147.28.0/24
83.147.36.0/22
Signature Algorithm: sha256WithRSAEncryption
17:88:d4:68:cd:ca:fe:d9:9d:e2:cf:d6:36:5b:2f:35:d5:da:
c7:62:23:6b:fb:45:c0:c5:e8:1c:48:8b:5a:0e:1f:cb:72:cd:
30:d3:d6:9c:8f:63:4a:e3:cb:1c:0d:19:e1:63:e6:53:1c:90:
ad:fc:dd:2f:e8:61:a7:b5:70:3a:0c:5c:ad:76:04:f1:0a:fa:
e3:df:bd:2f:f8:c6:48:4c:e4:b3:22:8a:92:b8:c5:59:54:6e:
4d:d9:00:d4:2d:05:72:8c:98:53:f0:16:96:37:83:a0:db:8b:
b8:33:1b:5f:8f:8e:0a:52:80:8f:f0:03:c5:c5:62:88:34:22:
10:f5:79:3b:02:23:c5:71:1b:02:03:54:53:35:d6:b1:72:54:
d5:9d:fa:ab:01:47:1f:77:cf:c8:60:f0:27:e3:47:c8:de:eb:
c3:8b:12:03:a2:e0:06:05:93:95:fa:cf:c2:18:c1:d2:6e:89:
36:4d:ef:0c:13:40:c9:c6:43:a7:07:a1:2b:ad:1e:f5:73:18:
17:9f:f5:bc:97:c5:f0:a9:f6:99:e6:a8:9d:12:c5:76:5c:bf:
0c:e4:77:76:1e:1a:0e:6a:aa:da:02:c4:94:60:e7:7a:9b:74:
e6:58:11:8b:c3:06:3b:cd:c7:31:78:c7:c9:5e:f5:3b:bc:f1:
66:ff:41:47
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY8i9TiIcPBsKPdP0yLN0D42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQwNDI4MDQyNzI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2IwODhlOTcwZjU3ZTU1OWY0YmE5OGU4YzkxYTRlNzg4NzdjNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JM8uHxOheDzd77lURS5FRAk/8J5
To8Ez8HFj5+ik+To77Z08UOssYGAlo+muZa1ALtw6FapQYI7mO6/t9gxYebvg7Bn
6nOmWub3B/FktjDCvuwVGP/qFoqYfDzsMY1mL0sIICARv/wweB8RL+LUaWQNtw2r
M/BZ1pdWTCKCPiYwWGbb4EciADjtLE0emIOHiJ9t08TcbgRws1yrLb/Qu3AMrlRM
cbWcdjFEE4681U3Te+K2r8ixOo0aKdQ3IyR3t1kg++EsdpECZUp6tixryLRKk9ZG
N4K2NIOhmE1kMdAVL2xvPNpcNfB6bih6yEuSjJ1tfdrrKJpzaX4NeU7ngQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEewiOlw9X5Vn0upjoyRpOeId8aQMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvUjdDSTZYRDFmbFdmUzZtT2pKR2s1NGgzeHBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCU5MAAwQC
U5MQAwQAU5MVAwQAU5McAwQCU5MkMA0GCSqGSIb3DQEBCwUAA4IBAQAXiNRozcr+
2Z3iz9Y2Wy811drHYiNr+0XAxegcSItaDh/Lcs0w09acj2NK48scDRnhY+ZTHJCt
/N0v6GGntXA6DFytdgTxCvrj370v+MZITOSzIoqSuMVZVG5N2QDULQVyjJhT8BaW
N4Og24u4Mxtfj44KUoCP8APFxWKINCIQ9Xk7AiPFcRsCA1RTNdaxclTVnfqrAUcf
d8/IYPAn40fI3uvDixIDouAGBZOV+s/CGMHSbok2Te8ME0DJxkOnB6ErrR71cxgX
n/W8l8XwqfaZ5qidEsV2XL8M5Hd2HhoOaqraAsSUYOd6m3TmWBGLwwY7zccxeMfJ
XvU7vPFm/0FH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org