Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SH0bCnKo5qnf3FjYCMZEyejL0Yk.roa
File: SH0bCnKo5qnf3FjYCMZEyejL0Yk.roa (raw, json)
Hash identifier: HbVHxUsI+XDOqlQHxdKUMcPvN9UlWgU/bjlyqKh3GpE=
Subject key identifier: 48:7D:1B:0A:72:A8:E6:A9:DF:DC:58:D8:08:C6:44:C9:E8:CB:D1:89
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01893E32E71907C58B43FD75FB056216DEAE
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SH0bCnKo5qnf3FjYCMZEyejL0Yk.roa
Signing time: Mon 10 Jul 2023 05:07:50 +0000
ROA not before: Mon 10 Jul 2023 05:07:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.14.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 03:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:32:e7:19:07:c5:8b:43:fd:75:fb:05:62:16:de:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 10 05:07:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=487d1b0a72a8e6a9dfdc58d808c644c9e8cbd189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:34:dd:6a:3a:43:f0:ec:aa:7e:ff:90:33:
98:a4:52:5c:39:90:27:a9:dc:fa:91:99:cd:08:78:
0b:2a:93:6f:60:bd:8c:d3:16:b6:01:62:38:f0:45:
96:06:a6:64:0d:cd:48:41:70:ac:a4:13:48:ae:e0:
97:bd:ad:81:3b:4a:ec:57:05:2e:1f:5c:3d:9d:02:
7a:67:df:c7:b8:26:9e:9b:eb:26:f3:4e:29:6e:9f:
f6:6b:47:e2:f6:c7:92:fa:9a:0a:17:05:55:1f:5a:
08:bf:a1:3f:ae:cd:ff:68:87:24:c4:5b:26:d1:c2:
09:13:78:2e:fc:54:da:0e:10:7e:34:d1:44:f0:ca:
c0:25:29:26:27:eb:96:c0:6c:45:bc:1a:cf:69:02:
ce:bc:e9:0b:45:7f:3a:a4:6a:5f:90:62:9a:d5:2f:
5b:81:14:bb:e9:1f:aa:8f:f7:7b:fe:79:5f:98:5d:
c6:98:8a:5d:05:54:2b:43:02:f7:4d:30:b6:d1:89:
c9:b1:d6:7e:19:2e:b3:80:d7:e2:13:0a:7e:1e:81:
2c:97:a2:ec:b1:93:43:46:1f:9b:d9:ee:49:8c:a2:
98:07:c1:b3:58:b1:76:9e:73:bf:30:0d:86:ef:00:
f0:6e:55:24:42:10:b7:e4:b6:59:3f:d6:1e:1a:1a:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7D:1B:0A:72:A8:E6:A9:DF:DC:58:D8:08:C6:44:C9:E8:CB:D1:89
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SH0bCnKo5qnf3FjYCMZEyejL0Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.9.0/24
83.147.11.0/24
83.147.14.0/24
83.147.27.0-83.147.31.255
83.147.44.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
14:23:3e:70:18:49:7e:5b:ea:6f:e9:df:80:ba:80:77:9a:4c:
15:b3:ef:5e:39:f7:52:7b:2f:52:9b:25:24:79:02:1f:93:a4:
b0:b1:74:c8:f7:66:07:5e:70:dd:b6:8c:19:2e:64:89:01:01:
13:2c:65:1f:28:67:be:12:6d:86:f4:32:f8:19:c3:ae:75:c8:
44:7d:fa:25:1c:3a:31:e9:94:67:2e:89:25:c3:e8:de:17:74:
f5:fb:51:04:9e:4d:9d:94:5e:84:e8:c5:12:b8:98:b6:d1:fb:
a6:54:5d:e1:56:5c:69:d0:d2:71:74:c0:8b:cc:e4:d1:7b:46:
54:48:5e:60:35:6a:a4:b5:ca:a7:d7:21:e5:f6:78:c2:28:3c:
2d:f4:bd:18:a0:3f:cd:05:c0:90:c6:aa:80:b5:f0:ba:d2:96:
50:90:c4:74:88:6c:d8:ec:a5:fd:6f:d9:d5:d2:9e:44:44:16:
98:3a:34:16:ce:a1:72:8d:36:71:d0:88:66:1c:0a:7c:99:fd:
1b:5d:8d:06:48:d6:60:ff:0c:fb:ae:05:19:9e:10:8d:cf:a3:
8c:61:6b:cf:8f:14:c9:d7:c2:18:ff:77:57:94:c1:2e:ed:af:
87:95:06:7a:c8:9a:11:05:94:a1:02:c5:01:3d:31:1a:8f:76:
99:ff:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org