Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/cOALVf8RNo0VFAvo8Vy_TIemV54.roa
File: cOALVf8RNo0VFAvo8Vy_TIemV54.roa (raw, json)
Hash identifier: hpU6Zgg5Ydw72iRKvlx6Pjihl5s08Sgi8HzhCdE546c=
Subject key identifier: 70:E0:0B:55:FF:11:36:8D:15:14:0B:E8:F1:5C:BF:4C:87:A6:57:9E
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018D4C74CD8180207E6B248AF16AB2D0994E
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/cOALVf8RNo0VFAvo8Vy_TIemV54.roa
Signing time: Sat 27 Jan 2024 19:45:39 +0000
ROA not before: Sat 27 Jan 2024 19:45:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 83.147.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 31 Jan 2024 07:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4c:74:cd:81:80:20:7e:6b:24:8a:f1:6a:b2:d0:99:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 27 19:45:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70e00b55ff11368d15140be8f15cbf4c87a6579e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:47:24:1b:36:fb:a6:70:9e:b5:14:ea:a7:
a5:66:98:08:69:0b:4c:d7:43:22:6f:c0:46:b9:6a:
ba:ec:71:24:81:27:f2:e6:f2:32:df:b6:b2:b4:f7:
be:13:e5:79:b0:55:4b:ba:63:1c:21:92:ad:e3:62:
30:37:ad:a4:8b:49:26:15:29:41:51:8b:33:4a:e8:
89:96:4b:ff:b6:4c:9c:a2:30:d9:e3:97:f5:02:f3:
e2:05:38:45:f7:d6:59:08:0c:ea:b6:36:99:a0:d7:
b1:c5:9e:ad:f3:cb:a5:bb:8b:0c:22:53:17:fd:00:
be:b5:4e:91:bc:f3:21:d9:ce:5f:56:69:49:9d:40:
e5:37:87:03:19:1a:4a:1c:fa:fc:b8:db:7e:0a:66:
e6:48:7f:09:78:e2:de:ba:ab:1f:16:ab:9e:2a:64:
43:a4:cd:9f:69:32:56:11:3a:a1:e4:4a:97:17:e5:
28:d0:97:a8:83:46:38:8d:1c:18:b0:d9:ce:52:d5:
fd:63:fb:1c:6a:02:5a:bd:88:37:b5:a5:3e:4f:3a:
d5:ce:01:e1:36:b4:9b:3b:39:e5:98:02:6a:c9:52:
0e:d4:37:58:2e:3c:6d:56:67:1d:54:46:1b:01:2d:
ea:52:22:c4:85:d9:2b:37:f8:28:37:4a:53:a2:f0:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:0B:55:FF:11:36:8D:15:14:0B:E8:F1:5C:BF:4C:87:A6:57:9E
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/cOALVf8RNo0VFAvo8Vy_TIemV54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
98:b5:b8:ff:3b:c0:85:5e:21:7b:a6:5b:ee:dc:0a:18:ff:15:
32:a0:05:8a:18:bd:9c:d0:e3:1e:e9:f2:6c:58:78:34:c7:7e:
db:53:dc:36:00:fa:af:c4:97:21:51:e5:a9:cb:de:8a:79:48:
8f:3a:c6:35:eb:60:63:17:f0:6b:fe:7a:f4:3c:07:88:39:e8:
c7:7e:d7:63:fd:4e:18:fa:62:80:19:a9:63:2f:13:b8:8d:7a:
99:c6:33:92:6b:38:e9:7f:56:04:35:e4:a3:db:2f:c8:df:40:
91:d6:da:1d:98:be:19:c0:30:90:7b:19:4b:69:e6:f8:7f:fc:
41:5b:6c:17:71:fd:25:c3:6d:81:2a:d2:34:ea:4b:cc:22:ef:
d4:04:46:52:1c:87:ea:aa:1a:c4:13:5c:a9:ab:e5:8b:c8:0e:
f9:5c:89:9d:d5:69:c9:81:3e:4f:ba:ab:31:a2:d4:2b:a0:c7:
d9:cf:48:3f:0f:84:89:eb:6f:3b:2f:5a:84:3f:ba:74:fd:af:
d0:9c:8c:57:e2:9b:cc:fe:88:68:df:b3:24:04:38:e9:b0:11:
bb:ae:f1:09:37:41:9e:69:b6:7c:eb:5d:90:c5:da:4f:d4:5f:
64:2b:50:e4:d1:43:68:6f:33:d4:c8:3f:31:a2:33:3b:07:ac:
cf:fd:49:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1MdM2BgCB+aySK8Wqy0JlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQwMTI3MTk0NTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGUwMGI1NWZmMTEzNjhkMTUxNDBiZThmMTVjYmY0Yzg3YTY1NzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8JHJBs2+6ZwnrUU6qelZpgIaQtM
10Mib8BGuWq67HEkgSfy5vIy37aytPe+E+V5sFVLumMcIZKt42IwN62ki0kmFSlB
UYszSuiJlkv/tkycojDZ45f1AvPiBThF99ZZCAzqtjaZoNexxZ6t88ulu4sMIlMX
/QC+tU6RvPMh2c5fVmlJnUDlN4cDGRpKHPr8uNt+CmbmSH8JeOLeuqsfFqueKmRD
pM2faTJWETqh5EqXF+Uo0Jeog0Y4jRwYsNnOUtX9Y/scagJavYg3taU+TzrVzgHh
NrSbOznlmAJqyVIO1DdYLjxtVmcdVEYbAS3qUiLEhdkrN/goN0pTovAq4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHDgC1X/ETaNFRQL6PFcv0yHpleeMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvY09BTFZmOFJObzBWRkF2bzhWeV9USWVtVjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MwMA0G
CSqGSIb3DQEBCwUAA4IBAQCYtbj/O8CFXiF7plvu3AoY/xUyoAWKGL2c0OMe6fJs
WHg0x37bU9w2APqvxJchUeWpy96KeUiPOsY162BjF/Br/nr0PAeIOejHftdj/U4Y
+mKAGaljLxO4jXqZxjOSazjpf1YENeSj2y/I30CR1todmL4ZwDCQexlLaeb4f/xB
W2wXcf0lw22BKtI06kvMIu/UBEZSHIfqqhrEE1ypq+WLyA75XImd1WnJgT5Puqsx
otQroMfZz0g/D4SJ6287L1qEP7p0/a/QnIxX4pvM/oho37MkBDjpsBG7rvEJN0Ge
abZ8612QxdpP1F9kK1Dk0UNobzPUyD8xojM7B6zP/UkE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org