Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/VBswGyGYDZzJ3oWqQgXr-cHvTMY.roa
File: VBswGyGYDZzJ3oWqQgXr-cHvTMY.roa (raw, json)
Hash identifier: 437w0LrvhISPlA5UUGU3Nmk0EgkT+Ou/fgfRVf6oFds=
Subject key identifier: 54:1B:30:1B:21:98:0D:9C:C9:DE:85:AA:42:05:EB:F9:C1:EF:4C:C6
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01933DB98A9577949EF7F7857410E45F0E2D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/VBswGyGYDZzJ3oWqQgXr-cHvTMY.roa
Signing time: Mon 18 Nov 2024 05:23:09 +0000
ROA not before: Mon 18 Nov 2024 05:23:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 04:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3d:b9:8a:95:77:94:9e:f7:f7:85:74:10:e4:5f:0e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 18 05:23:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=541b301b21980d9cc9de85aa4205ebf9c1ef4cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:b7:8a:f6:56:7b:03:e6:8f:48:6a:cb:08:
d1:0d:24:20:fc:a1:9c:12:72:cb:ad:74:bc:5a:97:
bd:d6:f2:d0:fb:5b:8c:92:09:12:5f:52:04:ad:42:
f8:f1:7b:3a:81:30:c5:82:a6:98:3c:ca:3d:7f:a9:
22:1d:3b:d0:24:48:9b:94:02:23:76:ee:96:da:c6:
57:23:4a:2c:8c:56:0d:0d:a9:49:6d:c9:91:33:51:
6b:a6:9f:f5:8d:ba:1c:0a:38:0a:4a:fb:51:77:a7:
ea:e6:e2:43:9f:28:56:15:ae:cd:74:10:2f:df:96:
7d:6b:e3:51:c4:cc:93:98:a0:4d:e1:50:dc:9a:f5:
84:56:ac:8b:d9:05:28:68:e4:87:01:56:16:61:5c:
68:1a:77:26:1b:97:55:f5:a7:ac:b5:53:a7:80:74:
1d:ab:f6:17:a8:70:3d:32:9b:8a:14:48:0c:58:cb:
b8:ed:6f:6d:c8:3e:c4:a9:a7:7b:97:82:43:34:22:
d4:64:dd:88:eb:04:01:60:c3:1d:2a:aa:cd:c9:36:
3e:ee:ed:96:57:33:48:1e:11:4d:1e:78:64:1f:18:
8f:e9:6a:a7:75:81:7e:d4:90:03:0e:41:c2:c1:ef:
19:e4:80:ad:de:b1:3b:9e:69:2c:2f:8f:30:06:fd:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1B:30:1B:21:98:0D:9C:C9:DE:85:AA:42:05:EB:F9:C1:EF:4C:C6
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/VBswGyGYDZzJ3oWqQgXr-cHvTMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.21.255
83.147.26.0-83.147.28.255
Signature Algorithm: sha256WithRSAEncryption
7c:94:16:be:1e:7d:94:3f:e4:64:64:bb:25:41:10:6a:a2:1f:
77:9d:8f:bf:3f:2c:15:84:92:01:dd:1a:98:14:d5:2d:86:cb:
16:4f:98:e1:7e:57:6e:b2:3b:22:84:10:cd:f6:c3:4a:f8:d2:
2e:79:4a:9f:57:8a:8d:54:ad:37:f4:6c:71:f4:a8:1e:8f:49:
b9:1d:ba:2e:8a:2a:bf:48:e0:c7:41:01:93:1a:02:07:fb:eb:
87:dc:31:c2:54:23:78:32:6d:01:0a:de:63:72:2c:fe:a2:69:
0a:32:bf:78:25:3c:df:7e:70:8e:4c:f5:63:39:ca:50:40:2a:
c9:d8:e4:3e:1f:cd:fe:6c:8a:24:05:8d:71:fd:47:9e:23:3f:
83:07:76:3d:29:8e:e6:6e:7c:6b:e1:fd:4a:d2:41:51:70:26:
a0:b9:14:c6:64:74:3c:dc:29:89:a0:f9:e7:47:40:be:05:11:
9e:15:58:0a:b1:91:5a:3c:2d:44:c9:82:47:ed:2a:54:44:8b:
23:12:fa:e9:06:c9:e0:6a:20:24:cc:c6:fc:2e:29:f8:4f:5b:
f4:6f:48:9f:3b:2e:9b:6b:b3:af:54:d7:7c:90:e9:8e:b8:96:
b9:3c:2b:f1:84:02:6c:25:ab:67:29:a1:ce:5d:49:26:5a:00:
d6:89:5d:05
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZM9uYqVd5Se9/eFdBDkXw4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQxMTE4MDUyMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDFiMzAxYjIxOTgwZDljYzlkZTg1YWE0MjA1ZWJmOWMxZWY0Y2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoe3ivZWewPmj0hqywjRDSQg/KGc
EnLLrXS8Wpe91vLQ+1uMkgkSX1IErUL48Xs6gTDFgqaYPMo9f6kiHTvQJEiblAIj
du6W2sZXI0osjFYNDalJbcmRM1Frpp/1jbocCjgKSvtRd6fq5uJDnyhWFa7NdBAv
35Z9a+NRxMyTmKBN4VDcmvWEVqyL2QUoaOSHAVYWYVxoGncmG5dV9aestVOngHQd
q/YXqHA9MpuKFEgMWMu47W9tyD7Eqad7l4JDNCLUZN2I6wQBYMMdKqrNyTY+7u2W
VzNIHhFNHnhkHxiP6WqndYF+1JADDkHCwe8Z5ICt3rE7nmksL48wBv0GjQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFFQbMBshmA2cyd6FqkIF6/nB70zGMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvVkJzd0d5R1lEWnpKM29XcVFnWHItY0h2VE1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBARTkxAD
BAFTkxQwDAMEAVOTGgMEAFOTHDANBgkqhkiG9w0BAQsFAAOCAQEAfJQWvh59lD/k
ZGS7JUEQaqIfd52Pvz8sFYSSAd0amBTVLYbLFk+Y4X5XbrI7IoQQzfbDSvjSLnlK
n1eKjVStN/RscfSoHo9JuR26Looqv0jgx0EBkxoCB/vrh9wxwlQjeDJtAQreY3Is
/qJpCjK/eCU8335wjkz1YznKUEAqydjkPh/N/myKJAWNcf1HniM/gwd2PSmO5m58
a+H9StJBUXAmoLkUxmR0PNwpiaD550dAvgURnhVYCrGRWjwtRMmCR+0qVESLIxL6
6QbJ4GogJMzG/C4p+E9b9G9Inzsum2uzr1TXfJDpjriWuTwr8YQCbCWrZymhzl1J
JloA1oldBQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:23 2025 by rpki-client