Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/WtwwfNDyId80Y6EWdLu5euRhJlE.roa
File: WtwwfNDyId80Y6EWdLu5euRhJlE.roa (raw, json)
Hash identifier: WZQMVleYKzahBvwyJQQLT9XKexuij207DdEgfrviUa0=
Subject key identifier: 5A:DC:30:7C:D0:F2:21:DF:34:63:A1:16:74:BB:B9:7A:E4:61:26:51
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018AFE27394C70B1113C0E152F105BEA436D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/WtwwfNDyId80Y6EWdLu5euRhJlE.roa
Signing time: Thu 05 Oct 2023 04:44:57 +0000
ROA not before: Thu 05 Oct 2023 04:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.4.0/22 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.13.0/24 maxlen: 24
83.147.14.0/24 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:27:39:4c:70:b1:11:3c:0e:15:2f:10:5b:ea:43:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 5 04:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5adc307cd0f221df3463a11674bbb97ae4612651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:55:09:1e:54:d4:1f:67:9b:9b:40:61:06:
7a:12:c6:d3:ce:d0:b9:57:9c:c8:ef:80:e9:40:92:
0f:bf:94:c1:be:78:fc:55:56:8a:4b:fa:7f:8f:98:
2c:a8:b6:33:cc:76:12:39:ea:8a:88:33:ad:43:65:
2a:0a:d6:d6:19:6b:37:82:e3:db:ef:43:62:39:38:
5b:06:17:4c:e0:cd:e8:89:a1:68:1e:fe:d8:68:39:
68:75:42:2d:84:43:f2:e1:5a:4f:7d:77:70:1d:fd:
b0:15:fe:a7:83:7d:50:9e:7b:6c:84:43:4e:a8:6a:
39:bf:3c:b0:24:c7:5c:fb:5e:85:98:0f:51:8f:c7:
b0:45:5d:4f:98:39:e0:71:d9:13:c7:60:95:7d:13:
85:09:d1:4e:1f:d4:21:9a:7e:34:13:d3:a6:10:9e:
3e:77:2b:62:c9:05:97:7b:cb:48:c2:2b:96:13:b1:
fa:78:73:14:18:bb:ff:40:8f:2a:be:6d:a5:6b:99:
20:7d:f8:16:c5:93:f9:7c:8a:cb:06:31:c8:14:82:
27:85:ba:8d:4e:ef:04:65:02:1d:25:91:ce:21:db:
88:3c:f5:bc:ea:68:34:39:83:88:49:99:91:fd:b2:
f9:8d:43:7c:72:df:25:98:e5:d4:34:2e:79:e8:43:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:30:7C:D0:F2:21:DF:34:63:A1:16:74:BB:B9:7A:E4:61:26:51
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/WtwwfNDyId80Y6EWdLu5euRhJlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/21
83.147.9.0/24
83.147.11.0/24
83.147.13.0-83.147.14.255
83.147.20.0/23
83.147.23.0/24
83.147.28.0/22
83.147.40.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ce:38:49:a3:fc:e4:48:0d:cc:c9:09:ea:4b:78:c5:d4:a1:
ce:51:f8:28:b6:f0:de:d0:39:90:5a:67:07:07:ec:0b:82:1f:
7a:4e:cd:5b:48:52:5e:13:79:14:49:eb:dd:22:3e:33:83:80:
b4:08:13:e7:4d:8c:14:4e:63:c4:d8:97:69:a0:b1:90:f9:34:
84:17:9d:a5:b7:18:e3:68:87:b6:c7:6a:cd:6a:c4:26:e7:dd:
bd:b5:89:6f:8c:67:8e:b1:ab:84:de:d7:57:36:81:26:c4:95:
18:47:66:c1:d1:2d:09:7c:9f:43:fb:ac:0c:cb:c2:da:6b:07:
15:96:fe:8f:8f:de:b8:26:09:4c:a6:8b:8b:12:7f:0c:51:75:
23:75:2b:c0:e2:37:03:45:ac:e2:31:6b:78:f6:a1:aa:cb:3b:
17:fa:e0:af:ae:b7:4d:83:bc:59:eb:81:58:d4:6b:46:33:6a:
02:c8:0e:17:6d:6e:df:6d:99:d3:09:e5:1b:21:c5:57:fd:61:
96:11:11:85:30:97:86:ed:04:1c:31:63:26:fd:55:65:ba:c3:
20:d5:c2:9a:3b:2d:8a:44:cb:ec:16:2a:43:ed:8c:18:d9:6c:
d9:a3:c4:9a:53:7d:4f:6d:0f:a8:b3:00:9c:72:ce:05:bc:33:
50:e5:ec:cb
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 7 05:40:01 2023 by rpki-client on console-ams.rpki-client.org