Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SJ46Nz9AQO-M7GyNALO4vHs1H-o.roa
File: SJ46Nz9AQO-M7GyNALO4vHs1H-o.roa (raw, json)
Hash identifier: 4f2zGptDkaGR5k3lflWUvmRYtlHBFwK96AAcuadTNIQ=
Subject key identifier: 48:9E:3A:37:3F:40:40:EF:8C:EC:6C:8D:00:B3:B8:BC:7B:35:1F:EA
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019305C8BB260FD45038C0552AA8F9BA4A56
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SJ46Nz9AQO-M7GyNALO4vHs1H-o.roa
Signing time: Thu 07 Nov 2024 08:41:01 +0000
ROA not before: Thu 07 Nov 2024 08:41:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 05:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:c8:bb:26:0f:d4:50:38:c0:55:2a:a8:f9:ba:4a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 7 08:41:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=489e3a373f4040ef8cec6c8d00b3b8bc7b351fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bb:e8:3c:10:48:fa:9c:ea:29:14:05:07:52:
c5:d7:a7:e2:8c:ee:9f:0b:12:3f:b6:cb:82:07:3c:
b0:1c:01:a5:76:7c:fb:64:ba:c9:7f:70:c4:e7:81:
db:58:bd:4c:91:32:4f:93:5f:2c:13:35:a5:fc:c6:
37:06:30:9e:28:72:6a:a6:f6:e3:d0:79:87:ec:8e:
7f:f5:c0:d8:34:89:22:96:d6:f5:3b:3e:7f:ef:5e:
ba:d1:f4:1f:63:84:b5:fb:d3:f2:96:a4:41:c0:ad:
42:26:cf:b7:5a:f6:f4:4a:42:44:7e:96:c5:58:c9:
92:ac:50:41:b6:01:75:ad:5e:2e:11:88:78:21:e2:
48:2c:76:d7:20:bd:b6:5f:69:30:81:89:dd:ef:7f:
d0:ed:22:97:a0:f3:53:88:43:42:a0:4f:6d:03:e8:
a0:12:de:6e:18:47:51:24:b7:bf:4a:8d:ca:f8:ff:
c6:5f:83:2f:46:b4:f0:e8:ba:3b:b5:7f:06:8f:31:
0f:82:60:b1:1e:b7:57:ed:44:d7:99:81:9e:cf:0e:
fd:24:4e:1b:fa:d2:85:2f:48:96:f2:0b:4d:1b:64:
fb:c7:ce:e3:2e:89:54:9f:5f:f1:c0:e9:25:be:42:
7e:eb:f3:93:19:d3:0b:d5:c2:01:02:c3:f2:71:a5:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9E:3A:37:3F:40:40:EF:8C:EC:6C:8D:00:B3:B8:BC:7B:35:1F:EA
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SJ46Nz9AQO-M7GyNALO4vHs1H-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.21.255
83.147.26.0-83.147.28.255
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
31:30:58:8c:9f:2c:56:cd:06:e1:18:20:d1:ac:84:07:a3:50:
d6:41:b2:90:f2:dc:0c:3e:6d:c1:92:a6:04:d8:39:93:84:d1:
79:3a:63:d7:e1:ef:ff:6a:f7:8a:96:72:33:a2:75:34:9d:a3:
f5:d4:ac:ac:8f:d0:2f:ec:6b:50:4d:00:57:f9:ba:be:8f:f1:
7b:d2:0e:e9:7e:60:52:f0:ae:06:99:ec:f9:ba:63:28:5d:30:
15:03:91:96:de:3f:d9:ef:fc:17:36:ba:00:ee:3c:eb:87:e6:
e2:d4:c5:b3:16:51:a7:c5:f7:9d:9c:02:a1:3c:64:53:ec:f8:
4d:3a:9f:5c:8a:68:f3:62:61:b6:f0:a5:e3:f1:f7:e4:50:9a:
62:0d:04:e4:8d:3a:ca:36:6f:30:69:6b:5d:83:7a:a7:e8:fc:
2f:04:d9:23:f5:59:dc:01:57:44:13:4a:29:98:ba:e9:60:65:
10:25:c2:a2:29:66:b6:b3:3f:2a:03:af:cc:3d:c3:87:95:89:
e0:a5:67:5a:a5:4b:cf:1b:36:a3:c7:79:51:9a:a8:10:55:bf:
78:a1:c8:68:3d:3b:ad:44:43:6e:15:62:87:e1:3c:18:45:8f:
4a:3d:b6:20:0f:1d:29:8a:f6:67:78:b3:8c:78:c5:a6:a4:f6:
ad:02:95:c7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZMFyLsmD9RQOMBVKqj5ukpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQxMTA3MDg0MTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODllM2EzNzNmNDA0MGVmOGNlYzZjOGQwMGIzYjhiYzdiMzUxZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bvoPBBI+pzqKRQFB1LF16fijO6f
CxI/tsuCBzywHAGldnz7ZLrJf3DE54HbWL1MkTJPk18sEzWl/MY3BjCeKHJqpvbj
0HmH7I5/9cDYNIkiltb1Oz5/71660fQfY4S1+9PylqRBwK1CJs+3Wvb0SkJEfpbF
WMmSrFBBtgF1rV4uEYh4IeJILHbXIL22X2kwgYnd73/Q7SKXoPNTiENCoE9tA+ig
Et5uGEdRJLe/So3K+P/GX4MvRrTw6Lo7tX8GjzEPgmCxHrdX7UTXmYGezw79JE4b
+tKFL0iW8gtNG2T7x87jLolUn1/xwOklvkJ+6/OTGdML1cIBAsPycaXj+wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEieOjc/QEDvjOxsjQCzuLx7NR/qMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvU0o0Nk56OUFRTy1NN0d5TkFMTzR2SHMxSC1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBARTkxAD
BAFTkxQwDAMEAVOTGgMEAFOTHAMEAlOTLDANBgkqhkiG9w0BAQsFAAOCAQEAMTBY
jJ8sVs0G4Rgg0ayEB6NQ1kGykPLcDD5twZKmBNg5k4TReTpj1+Hv/2r3ipZyM6J1
NJ2j9dSsrI/QL+xrUE0AV/m6vo/xe9IO6X5gUvCuBpns+bpjKF0wFQORlt4/2e/8
Fza6AO4864fm4tTFsxZRp8X3nZwCoTxkU+z4TTqfXIpo82JhtvCl4/H35FCaYg0E
5I06yjZvMGlrXYN6p+j8LwTZI/VZ3AFXRBNKKZi66WBlECXCoilmtrM/KgOvzD3D
h5WJ4KVnWqVLzxs2o8d5UZqoEFW/eKHIaD07rURDbhVih+E8GEWPSj22IA8dKYr2
Z3izjHjFpqT2rQKVxw==
Generated at Mon Nov 18 07:12:12 2024 by rpki-client on console-ams.rpki-client.org