Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/V9XdpUj-jVEu6LDp7sc8kPNpydU.roa
File: V9XdpUj-jVEu6LDp7sc8kPNpydU.roa (raw, json)
Hash identifier: cTbzPhBQzZqbPJ7HO/c2iQn9GMjuB2CIR5b/8RpR8sw=
Subject key identifier: 57:D5:DD:A5:48:FE:8D:51:2E:E8:B0:E9:EE:C7:3C:90:F3:69:C9:D5
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0188B82CCC81BF8F5DE2A55DE9B5459E2462
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/V9XdpUj-jVEu6LDp7sc8kPNpydU.roa
Signing time: Wed 14 Jun 2023 04:32:03 +0000
ROA not before: Wed 14 Jun 2023 04:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:2c:cc:81:bf:8f:5d:e2:a5:5d:e9:b5:45:9e:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jun 14 04:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57d5dda548fe8d512ee8b0e9eec73c90f369c9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:2c:3b:f5:39:fa:d2:1e:88:a3:1b:1d:06:
27:6c:52:39:c5:ab:0a:51:07:5c:0f:93:26:0c:77:
62:c4:f7:b8:9f:f7:0e:1c:c0:ac:ab:4c:ca:83:96:
fb:3f:e1:4e:9f:97:5c:87:2a:2d:cc:73:84:dd:13:
c5:70:7d:29:c1:94:47:71:13:a9:3b:cd:35:d9:7b:
d4:d0:bc:33:d4:cc:22:94:b2:bf:68:72:84:ac:1f:
71:54:d2:3e:ba:19:88:a8:5a:12:ef:45:79:f2:fe:
7f:58:a9:ea:59:cc:ec:cc:20:a8:27:20:cf:da:2b:
2c:17:a5:29:39:ec:65:b5:7a:62:a0:47:02:87:ab:
74:06:61:9d:39:61:30:da:72:59:15:ce:44:c3:d9:
a1:41:c1:2b:9a:01:6e:72:f2:cc:be:f3:6e:65:94:
44:6e:bc:c6:6c:06:cc:81:93:7a:16:7d:b3:e6:71:
b8:4f:5b:10:5e:87:04:09:0b:fb:31:c7:91:fa:b3:
8d:16:27:97:57:c6:d4:3e:cc:f9:d5:b7:d0:50:a0:
c0:10:4f:84:60:b9:0b:9e:7f:d5:7c:cd:d0:75:fa:
d2:b8:cd:20:50:65:4a:71:76:cb:10:32:0b:4a:c1:
23:ef:60:b1:ab:36:b4:28:9c:88:25:14:db:c4:68:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:DD:A5:48:FE:8D:51:2E:E8:B0:E9:EE:C7:3C:90:F3:69:C9:D5
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/V9XdpUj-jVEu6LDp7sc8kPNpydU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
83.147.11.0/24
83.147.27.0/24
83.147.44.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:89:cc:0e:ab:52:32:0d:63:21:d5:a4:e4:a3:dc:84:2d:d5:
18:fa:34:f2:98:16:6e:f7:5b:9f:31:a6:9d:99:ac:79:22:a1:
bf:6e:d7:9d:8b:d5:26:e9:b9:b6:50:c1:71:5a:11:ae:bc:38:
07:5a:a4:3b:d5:2f:9d:5a:2a:5f:9a:44:bf:62:ee:ea:1e:47:
08:59:ba:4e:0e:f5:7b:38:2e:0f:43:18:53:d5:99:dc:37:fb:
55:49:65:61:9c:47:e8:7e:ac:36:ae:90:bb:24:b8:c7:53:6a:
58:68:7c:8e:6c:7b:c7:ad:76:f0:f9:1d:0b:55:48:28:41:14:
1c:17:c2:2c:1d:ed:f9:b1:d6:ef:08:22:e0:cc:ae:06:3d:22:
c0:08:35:dc:84:a7:a1:da:7f:e0:6b:77:58:e5:b6:69:b2:54:
07:c7:c1:d4:99:f7:7d:80:09:33:c4:b7:3e:c7:48:79:2d:95:
f9:ac:30:6e:b3:ca:b5:a5:20:51:d3:8f:ea:ea:ae:69:55:68:
1c:18:a2:4f:0e:19:54:b6:9a:f0:58:60:b1:50:fc:36:41:47:
30:e1:01:52:0d:3b:e1:7c:f3:9b:a6:64:60:cb:0d:d1:c6:02:
3b:3d:c8:9c:d0:ec:bd:7e:28:86:9c:2a:eb:09:92:cf:87:78:
46:0c:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:32 2023 by rpki-client on console-ams.rpki-client.org