Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/d5A9WI5tQHCe65J__UA6ltnXxKU.roa
File: d5A9WI5tQHCe65J__UA6ltnXxKU.roa (raw, json)
Hash identifier: ToOKhdnyi6NwPGxBuqWqKN8XFn5PQJO9AubqIT6dw6Y=
Subject key identifier: 77:90:3D:58:8E:6D:40:70:9E:EB:92:7F:FD:40:3A:96:D9:D7:C4:A5
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB17AE61CC8411334F52477A3A94B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/d5A9WI5tQHCe65J__UA6ltnXxKU.roa
Signing time: Tue 02 Jan 2024 08:29:24 +0000
ROA not before: Tue 02 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 09:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b1:7a:e6:1c:c8:41:13:34:f5:24:77:a3:a9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77903d588e6d40709eeb927ffd403a96d9d7c4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ed:9d:d4:9d:b0:6e:3e:13:0e:f2:8e:86:d7:
8b:86:d4:fa:b8:2d:f4:62:8e:e8:73:95:10:46:1e:
89:70:18:9b:f5:95:c7:ab:b4:67:5d:d8:88:fd:d2:
f1:32:33:71:0e:fd:d0:08:4c:d3:d9:f5:c1:a0:fa:
28:96:29:eb:6a:54:7e:e5:fb:49:3d:06:29:7c:29:
54:61:a7:48:47:7b:00:99:be:bb:4b:04:66:e4:15:
c7:f9:3d:8a:db:18:d0:14:f9:f9:8c:f7:ef:3d:8c:
b7:d8:08:2a:07:93:91:fd:2a:cd:08:1b:39:a2:66:
ab:31:3c:79:de:ae:76:7c:cf:46:00:f3:00:f7:17:
bc:b9:84:2b:2b:82:90:ef:57:bd:33:ed:90:6a:58:
14:4a:87:3d:b8:9e:df:58:17:a9:9e:eb:f3:d9:2f:
fe:0b:7b:bb:39:b7:bc:b9:d1:87:d4:57:d9:0e:21:
58:9d:83:6c:e8:32:e1:1a:a5:a9:51:f0:10:38:ce:
6c:9d:ee:89:77:39:8f:42:ea:76:e9:1f:c6:0f:ba:
e1:33:24:e2:46:06:b2:5e:e0:bd:c8:dc:3e:b3:ec:
41:5c:7a:da:ee:a9:12:9e:28:b9:c8:46:38:97:1a:
09:f7:13:df:61:73:56:c2:1d:42:7e:4c:13:52:26:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:90:3D:58:8E:6D:40:70:9E:EB:92:7F:FD:40:3A:96:D9:D7:C4:A5
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/d5A9WI5tQHCe65J__UA6ltnXxKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.29.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:06:fa:05:2a:5c:a8:97:7a:a3:7a:ab:05:5b:88:13:6a:6a:
53:f7:82:81:f0:57:0d:0e:60:31:f9:95:d7:93:86:51:3b:86:
94:38:aa:46:8d:d7:da:18:86:fd:dd:3c:9e:d3:87:6c:ce:73:
e2:fa:b6:2a:51:4f:2c:79:57:3b:2e:e0:50:c5:de:4b:c3:28:
09:f0:e4:30:fb:72:b6:6a:8e:99:da:3c:4e:66:b2:73:34:a0:
5d:c2:de:8c:8a:ae:d4:2e:34:bf:82:f4:4a:d4:fc:07:4b:b7:
a6:64:d6:3f:3b:bb:b1:71:32:56:11:a9:20:09:bb:3f:bf:d6:
8a:0a:4b:cc:45:7c:be:d4:02:eb:7b:80:7b:75:df:04:bd:1d:
cc:87:a5:e1:29:39:41:e0:7b:9b:9f:d9:7d:82:8b:19:97:e2:
5e:a0:46:1f:59:78:29:c9:26:0c:35:34:b9:c1:30:f9:ef:65:
0d:8e:5f:fd:3f:17:a4:45:d1:47:fe:25:d3:dc:df:6a:8b:87:
f6:2f:87:86:cd:e3:bd:68:9c:ce:aa:92:0b:fa:b7:be:54:21:
4b:23:c8:b0:10:a8:53:3e:95:a2:68:03:c9:03:3f:ce:8e:8a:
ea:52:c0:da:4f:ab:b6:47:32:57:1d:b0:9e:75:8a:45:10:45:
c2:de:2d:37
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJSrF65hzIQRM09SR3o6lLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQwMTAyMDgyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzkwM2Q1ODhlNmQ0MDcwOWVlYjkyN2ZmZDQwM2E5NmQ5ZDdjNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+2d1J2wbj4TDvKOhteLhtT6uC30
Yo7oc5UQRh6JcBib9ZXHq7RnXdiI/dLxMjNxDv3QCEzT2fXBoPoolinralR+5ftJ
PQYpfClUYadIR3sAmb67SwRm5BXH+T2K2xjQFPn5jPfvPYy32AgqB5OR/SrNCBs5
omarMTx53q52fM9GAPMA9xe8uYQrK4KQ71e9M+2QalgUSoc9uJ7fWBepnuvz2S/+
C3u7Obe8udGH1FfZDiFYnYNs6DLhGqWpUfAQOM5sne6JdzmPQup26R/GD7rhMyTi
RgayXuC9yNw+s+xBXHra7qkSnii5yEY4lxoJ9xPfYXNWwh1CfkwTUiZ0KwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHeQPViObUBwnuuSf/1AOpbZ18SlMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvZDVBOVdJNXRRSENlNjVKX19VQTZsdG5YeEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCU5MAAwQA
U5MdMA0GCSqGSIb3DQEBCwUAA4IBAQCtBvoFKlyol3qjeqsFW4gTampT94KB8FcN
DmAx+ZXXk4ZRO4aUOKpGjdfaGIb93Tye04dsznPi+rYqUU8seVc7LuBQxd5LwygJ
8OQw+3K2ao6Z2jxOZrJzNKBdwt6Miq7ULjS/gvRK1PwHS7emZNY/O7uxcTJWEakg
Cbs/v9aKCkvMRXy+1ALre4B7dd8EvR3Mh6XhKTlB4Hubn9l9gosZl+JeoEYfWXgp
ySYMNTS5wTD572UNjl/9PxekRdFH/iXT3N9qi4f2L4eGzeO9aJzOqpIL+re+VCFL
I8iwEKhTPpWiaAPJAz/OjorqUsDaT6u2RzJXHbCedYpFEEXC3i03
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org