Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/WA-wHxEVLv2Zb7pH4Yrwn1_Nt9A.roa
File: WA-wHxEVLv2Zb7pH4Yrwn1_Nt9A.roa (raw, json)
Hash identifier: a79YCJH9Zt+fl7pMDORri8YBSPk8boZnrVgOXdQsFy8=
Subject key identifier: 58:0F:B0:1F:11:15:2E:FD:99:6F:BA:47:E1:8A:F0:9F:5F:CD:B7:D0
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018BB33CF0192AFA45BBA667509224B4CE62
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/WA-wHxEVLv2Zb7pH4Yrwn1_Nt9A.roa
Signing time: Thu 09 Nov 2023 08:39:57 +0000
ROA not before: Thu 09 Nov 2023 08:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.52.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.8.0/22 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
83.147.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Nov 2023 05:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:3c:f0:19:2a:fa:45:bb:a6:67:50:92:24:b4:ce:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 9 08:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=580fb01f11152efd996fba47e18af09f5fcdb7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:65:8f:a5:ba:a9:89:38:06:e5:6d:c5:55:13:
90:5e:59:81:3d:82:9d:aa:87:7b:d0:81:3b:2c:59:
81:12:de:ac:7e:91:84:6c:c2:e8:d4:d0:4d:40:99:
da:e8:01:a3:d8:59:8c:a8:1f:b7:92:18:d4:ab:50:
0b:97:cb:3f:45:d6:77:10:e4:10:ca:25:39:9c:2f:
8c:b5:b7:0f:6b:8a:4a:73:a2:a3:20:d6:ca:9a:fd:
2e:8b:4b:a6:c0:31:97:34:2d:8e:24:b6:41:a5:81:
61:48:c6:99:d0:92:e3:96:51:52:b4:16:43:6e:2f:
de:4c:d7:22:6e:1e:cf:3b:d4:25:a2:34:f3:d1:37:
e2:ad:b3:25:04:77:db:de:a9:3f:ec:c7:e6:9b:f1:
28:d3:02:54:2f:5b:82:22:88:42:0a:f0:dc:df:94:
d3:d6:e4:0d:ef:4c:d3:a3:8f:4f:09:71:2c:d0:d3:
af:e6:82:9f:88:cb:cb:5c:65:cc:ba:bf:a0:3e:ab:
d3:31:c9:68:02:34:61:43:7b:6e:3d:61:4a:94:2f:
84:21:f5:d2:6b:3e:07:c5:14:64:8d:a3:3e:2a:42:
36:6c:45:e1:c2:7f:05:a3:2a:84:11:86:2a:44:58:
b5:21:dd:c2:7c:99:2b:12:78:94:68:de:e6:82:94:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:B0:1F:11:15:2E:FD:99:6F:BA:47:E1:8A:F0:9F:5F:CD:B7:D0
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/WA-wHxEVLv2Zb7pH4Yrwn1_Nt9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.8.0/22
83.147.20.0/23
83.147.23.0/24
83.147.26.0-83.147.31.255
83.147.40.0/22
83.147.52.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f5:d7:c6:cc:7a:c8:9f:2a:a0:83:8e:84:ba:59:bc:7d:41:
32:56:7c:7f:8b:f4:89:3a:df:37:d5:24:af:f5:18:1a:c2:17:
d5:9a:76:c4:e2:ef:09:14:70:12:e6:de:1d:31:0d:c8:c3:aa:
f8:e5:b7:89:7c:2d:1d:a2:f8:f4:9f:2e:f3:a6:d9:8b:5d:ae:
27:27:34:9b:bf:18:28:28:f9:86:cb:9e:af:4b:28:0d:60:0c:
f6:b8:fd:c6:ae:30:64:4d:3a:8f:24:04:e1:d8:1f:6e:c6:e6:
fc:74:ae:03:f4:5c:c3:fc:db:5b:29:30:47:b4:f9:30:90:09:
d9:07:fc:43:e0:38:5b:3d:3a:7f:62:fa:90:6b:20:92:ad:e1:
aa:3d:da:d8:3a:fc:54:f8:a2:e6:10:28:5c:9b:ea:e7:f2:86:
1f:ec:fb:59:42:de:cd:4e:f1:6b:f1:06:07:f2:54:7c:7c:18:
31:1b:e9:1f:f8:1b:41:b9:47:b8:86:44:b7:1a:03:1f:f3:37:
b1:b7:44:3b:90:a0:96:3c:98:26:59:38:1f:f8:8e:ab:4d:1f:
ea:37:3c:8e:d9:de:de:32:8f:39:c9:66:47:ec:29:fc:5d:3c:
2d:cf:71:4c:8d:2c:91:2b:69:2b:65:4e:46:f5:6b:3a:95:d5:
96:06:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org