Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/dC_DLeU59Jyy92owXKAq6BHHaRc.roa
File: dC_DLeU59Jyy92owXKAq6BHHaRc.roa (raw, json)
Hash identifier: iGtn1J+GZIiKL2tOQmdhodXaIs65xgjwsndANFlfgAk=
Subject key identifier: 74:2F:C3:2D:E5:39:F4:9C:B2:F7:6A:30:5C:A0:2A:E8:11:C7:69:17
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0189FDB0616F96A6798CEB932738A069DF09
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/dC_DLeU59Jyy92owXKAq6BHHaRc.roa
Signing time: Wed 16 Aug 2023 09:32:22 +0000
ROA not before: Wed 16 Aug 2023 09:32:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.14.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 07:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:b0:61:6f:96:a6:79:8c:eb:93:27:38:a0:69:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 16 09:32:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=742fc32de539f49cb2f76a305ca02ae811c76917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:9c:cf:be:d4:0e:82:e5:6b:76:f5:21:e8:
8a:4e:a9:0e:55:03:b3:2b:e0:f0:3f:2e:d6:7c:a9:
76:58:03:a3:79:25:26:25:8a:32:79:95:0d:81:a2:
29:84:bc:11:c7:fe:fa:95:94:18:13:b2:5e:ba:9b:
6f:01:2a:80:98:74:ed:32:2a:60:90:b7:e4:7a:e7:
0b:70:20:8e:c0:20:37:ae:06:49:bd:bd:50:40:31:
57:a9:52:c9:6f:68:a1:99:98:66:93:66:b1:f1:5a:
11:43:20:4d:e0:b5:0c:fa:bc:91:19:da:f5:25:20:
bb:41:0d:1b:e0:ee:04:0a:8a:a5:51:c8:08:1d:9b:
7a:d8:ab:42:98:fe:a7:cf:5f:cd:d1:a0:53:59:84:
41:ec:db:43:f1:24:4c:85:66:30:55:42:35:74:5c:
3f:19:76:08:5c:4d:de:77:ef:f1:e3:55:57:9b:7d:
94:d0:ae:f9:63:51:b0:00:a3:f5:2d:12:d3:de:92:
f9:ee:fe:1d:5c:ad:cb:83:1a:b1:86:c9:6a:e9:5d:
97:c1:16:8d:c3:02:db:6f:d1:79:5f:d6:4f:02:5a:
4e:c8:85:f0:2a:21:d4:6b:39:57:21:4e:7d:c1:1c:
4d:78:db:67:8a:7d:9d:8d:ef:a9:49:31:34:5a:d1:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:C3:2D:E5:39:F4:9C:B2:F7:6A:30:5C:A0:2A:E8:11:C7:69:17
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/dC_DLeU59Jyy92owXKAq6BHHaRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.9.0/24
83.147.11.0/24
83.147.14.0/24
83.147.23.0/24
83.147.28.0/22
83.147.40.0/21
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:c0:46:94:34:ee:fc:4c:00:c8:12:a7:91:db:4b:ae:71:69:
ac:d5:86:91:bd:bb:d0:f9:cb:bb:f7:e5:a8:17:71:c6:1a:a2:
94:ba:d6:4f:77:c8:6e:4a:ed:cd:14:55:cc:bc:4b:b7:d5:e0:
67:22:75:80:bd:cf:da:d4:1d:7d:b9:e0:5e:16:47:ed:2d:68:
c1:47:10:d3:e3:a7:24:73:a5:cd:80:15:2a:cb:e0:24:2d:ea:
6a:61:90:bb:9c:30:97:90:68:38:12:df:af:d0:e5:e2:16:cb:
f7:ba:50:ee:71:e3:7c:ad:29:f8:41:ef:c3:c0:48:52:c2:d4:
b9:95:a3:ba:1f:ba:fe:f0:36:98:10:2d:fd:75:80:a6:bd:1b:
ab:2c:0d:00:2d:17:92:39:d2:40:35:cc:51:8d:68:f1:dd:0b:
f5:4a:bb:d6:e7:01:92:6b:43:fd:2a:c7:bf:4c:45:6a:67:45:
08:ef:15:55:ce:7c:9f:dc:7b:fc:35:56:c0:36:17:7c:28:f0:
5d:59:3f:67:b3:15:4c:64:7d:a8:3d:4a:ee:c1:8a:a7:f0:ca:
d4:4b:fd:65:d4:98:ff:39:3f:44:1f:d3:4b:84:ea:75:35:5d:
cb:0a:2d:9f:04:22:97:e4:31:b3:c3:a1:cb:49:08:11:0c:77:
a0:ce:fb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org