Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SlgygIb4aFXZVdDD-6CgmOxn4WM.roa
File: SlgygIb4aFXZVdDD-6CgmOxn4WM.roa (raw, json)
Hash identifier: o/Y49roNxxQs6XC3RfmXUoModRpPl7k3aBfukm8YmxU=
Subject key identifier: 4A:58:32:80:86:F8:68:55:D9:55:D0:C3:FB:A0:A0:98:EC:67:E1:63
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018B17DC013BB6FE2D081D7A286B8C2D3431
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SlgygIb4aFXZVdDD-6CgmOxn4WM.roa
Signing time: Tue 10 Oct 2023 04:32:56 +0000
ROA not before: Tue 10 Oct 2023 04:32:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.4.0/22 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.13.0/24 maxlen: 24
83.147.14.0/24 maxlen: 24
83.147.12.0/24 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 15:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:17:dc:01:3b:b6:fe:2d:08:1d:7a:28:6b:8c:2d:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 10 04:32:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a58328086f86855d955d0c3fba0a098ec67e163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:d9:f2:c5:81:37:c7:f9:c4:8b:bb:e9:7d:
55:a3:39:45:c5:76:9c:60:b3:0e:b4:20:63:02:29:
1f:c2:52:26:8a:31:cd:ba:e0:25:5f:57:e6:13:b7:
e5:28:3f:01:da:3e:0f:b3:42:91:1e:9a:e8:03:e2:
4b:98:4e:84:8a:d1:ca:1a:4d:0e:4b:f0:c0:98:2f:
7a:4c:16:90:b8:c5:fc:7e:7b:77:89:78:31:af:76:
01:43:54:ee:76:da:68:ea:f3:96:ef:e9:6b:ce:d7:
51:9c:cb:ea:7e:b0:5c:01:f8:04:60:34:ae:ab:93:
ca:29:cb:0b:87:bf:74:61:d0:7d:2d:b4:c7:26:f0:
f6:69:07:39:8e:d9:3b:fc:8e:c6:12:23:1e:24:5b:
d3:72:61:5e:00:99:30:72:7e:22:7d:35:9c:6a:2a:
56:73:e5:f6:e8:27:54:cb:a0:d7:af:fc:45:b3:78:
f3:ba:75:bd:e8:da:6d:14:da:fb:ca:57:ee:f7:28:
b0:5e:84:7a:02:12:ec:94:b1:a2:90:ed:f4:0e:e5:
e2:bd:ef:c9:5d:4f:02:62:e2:a9:67:96:d5:a2:77:
f6:8d:89:cc:79:e6:e3:0d:dd:34:bb:9a:8f:83:64:
36:7e:e4:2d:b2:67:db:e7:49:c8:16:82:4e:ad:03:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:32:80:86:F8:68:55:D9:55:D0:C3:FB:A0:A0:98:EC:67:E1:63
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SlgygIb4aFXZVdDD-6CgmOxn4WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/21
83.147.12.0-83.147.14.255
83.147.20.0/23
83.147.23.0/24
83.147.28.0/22
83.147.40.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0b:ac:7b:11:e2:8c:46:3f:a3:0d:e4:43:16:50:3d:36:83:
f5:58:03:e6:66:36:f1:51:20:db:7e:fe:f6:43:18:ed:bf:22:
36:43:14:12:47:69:1d:33:6e:78:27:e3:ce:45:d5:41:5d:ee:
77:70:bf:0a:5f:a3:d5:02:14:82:ae:d4:0e:2d:da:53:fc:4d:
44:6b:12:54:00:36:e2:35:70:46:f8:ad:8c:3e:cf:68:7c:17:
9e:ac:2d:04:f2:33:ec:ff:99:47:63:a7:82:6f:64:64:5d:29:
d8:75:53:b4:78:27:c6:14:96:15:e4:d7:12:e3:73:45:c1:f1:
05:9e:1b:0e:81:9f:aa:53:46:31:84:4d:dc:ea:65:d5:da:1e:
1e:c0:33:69:fb:15:20:9a:9f:74:df:d3:cf:6c:7e:b7:6a:08:
75:53:46:8e:62:c7:0c:d5:e4:96:98:20:09:4e:48:a2:72:da:
93:12:4d:ad:ed:e8:fb:a1:96:e7:2d:8a:fd:21:46:c4:8f:59:
b7:61:f1:e1:a6:c7:66:07:53:68:f9:7f:34:0b:29:eb:6c:1a:
4e:34:79:31:41:a0:26:5e:bf:9c:b8:af:75:20:f0:e7:6a:4d:
55:50:d4:11:a5:9c:7c:5e:49:ae:e6:cc:49:1f:4c:2f:29:52:
6b:34:96:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org