Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aQbLWXIVuqOTeuuJwCIaXlHja_o.roa
File: aQbLWXIVuqOTeuuJwCIaXlHja_o.roa (raw, json)
Hash identifier: EtkohQQwKn9cQYKWy0+O5d6OS56zpnEUcLYKZVK2oxc=
Subject key identifier: 69:06:CB:59:72:15:BA:A3:93:7A:EB:89:C0:22:1A:5E:51:E3:6B:FA
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018639B76E8C69BD8B7C8892B79CEC6453F4
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aQbLWXIVuqOTeuuJwCIaXlHja_o.roa
Signing time: Fri 10 Feb 2023 05:06:07 +0000
ROA not before: Fri 10 Feb 2023 05:06:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.13.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 04:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:39:b7:6e:8c:69:bd:8b:7c:88:92:b7:9c:ec:64:53:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Feb 10 05:06:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6906cb597215baa3937aeb89c0221a5e51e36bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f8:35:20:6b:e1:53:8e:6b:79:32:6d:b8:39:
72:4d:01:5b:95:d8:05:3f:05:2d:39:6e:68:d1:be:
6d:07:cc:4d:82:99:7d:0d:0f:4f:3f:a2:75:27:60:
4d:41:7d:01:0f:23:2e:98:50:13:ba:90:5a:17:3c:
d0:a5:40:d6:8d:20:91:73:fa:52:74:72:eb:9a:6f:
ed:02:d0:95:54:53:74:09:1e:0a:4b:78:7a:de:ba:
da:db:93:a7:9b:dc:ca:c7:73:92:e5:6e:a2:fb:2c:
59:f7:07:23:83:23:da:24:d1:44:3d:4c:53:48:5a:
3d:35:22:20:13:5f:b7:22:a0:ec:b9:3d:c1:f7:9a:
58:c4:c9:27:bf:e8:05:61:d3:a8:d7:fb:48:d2:c8:
dd:01:18:e3:c3:1c:2e:b4:2f:58:52:2d:59:76:af:
27:63:19:8d:68:2d:35:4c:2d:17:ec:3b:a7:1d:84:
aa:a2:2e:59:76:e3:6a:0d:ed:7f:8e:c8:c9:11:66:
ab:42:7b:de:5d:89:b9:4b:1d:29:f4:ee:c7:a9:76:
45:17:6d:21:ba:77:da:ec:fb:d9:b1:01:a3:ff:0e:
8e:70:3f:fe:9d:6e:26:bc:8c:33:bc:0e:d7:01:02:
93:79:47:b1:c3:75:73:f1:a2:9e:60:41:f1:04:d0:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:CB:59:72:15:BA:A3:93:7A:EB:89:C0:22:1A:5E:51:E3:6B:FA
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aQbLWXIVuqOTeuuJwCIaXlHja_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.13.0/24
83.147.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2c:85:34:e5:c3:e5:bc:4e:31:47:25:34:aa:da:a2:f4:49:
8e:ac:32:ee:b2:dd:e3:9a:2f:db:02:63:e4:dc:8f:67:da:a0:
e6:53:e6:15:51:27:95:e0:a5:fb:37:5e:32:49:79:59:21:3e:
35:ff:16:44:f3:b0:66:5a:20:06:16:d3:dd:ff:83:ec:aa:6f:
ea:c4:7d:19:bb:b2:94:90:fb:db:92:ce:34:d9:d5:c6:33:94:
6b:39:24:9c:e5:60:dc:cd:98:1c:1b:02:10:42:e7:90:d3:3d:
db:94:43:dc:a2:4e:4d:ba:82:45:03:d6:0d:47:6f:c0:da:ac:
56:84:e0:e3:e6:4b:33:42:07:d8:e3:65:9c:37:ea:b6:cb:05:
bb:da:38:a9:ca:8f:5a:6d:d1:26:9b:de:e5:c3:8d:17:f9:48:
21:a3:21:34:de:48:6b:c0:66:41:9e:e5:70:03:f5:dc:1b:f1:
5e:48:1c:92:64:22:95:6b:15:00:3a:bb:76:60:77:c1:c2:d4:
09:de:af:bd:9f:b1:fd:4c:6b:a6:6d:90:7f:d1:d9:37:07:e2:
8b:ac:f1:f3:52:a5:ba:6c:20:8e:0c:a9:30:6e:4e:3e:60:aa:
c1:6b:61:7d:9c:71:ab:80:e2:81:0b:32:b2:1e:84:b3:47:82:
a4:10:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org