Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ea8JZlQnb0CtR2XfP5ch-wKq_e0.roa
File: ea8JZlQnb0CtR2XfP5ch-wKq_e0.roa (raw, json)
Hash identifier: H6gEKQNmrIgGeWwSTFNvKlD+UbePn1PGDV+VaonBgHc=
Subject key identifier: 79:AF:09:66:54:27:6F:40:AD:47:65:DF:3F:97:21:FB:02:AA:FD:ED
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0187B97D2607B8BD3E05508116B72E6262B9
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ea8JZlQnb0CtR2XfP5ch-wKq_e0.roa
Signing time: Tue 25 Apr 2023 17:36:39 +0000
ROA not before: Tue 25 Apr 2023 17:36:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 30 Apr 2023 04:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:7d:26:07:b8:bd:3e:05:50:81:16:b7:2e:62:62:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 25 17:36:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79af096654276f40ad4765df3f9721fb02aafded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:ad:27:8a:92:8c:fd:a6:36:43:f3:d5:95:
6c:aa:63:1f:b7:fd:d1:1a:f1:99:6f:fa:a7:5a:2d:
b7:41:28:69:8c:a9:80:aa:8d:32:10:e2:17:b9:1d:
24:e0:85:ef:84:a9:18:e7:fe:e2:43:8a:25:30:32:
33:d0:77:89:fd:4b:2d:4c:0e:ee:dc:fc:46:1d:f4:
43:9a:4b:db:b8:57:cf:4c:99:e9:5d:12:6c:22:a8:
c9:d2:15:b7:5e:50:b9:67:43:95:22:34:01:45:ba:
7c:c2:52:8f:4d:7d:0f:dc:0e:7b:54:6d:e3:ba:1f:
12:42:19:d9:3c:9e:5a:ba:91:93:00:53:8e:5f:36:
61:ba:7b:f9:f8:d7:6b:84:a4:d6:1b:84:33:1f:80:
56:25:a4:9a:2d:a3:3b:53:f9:ec:82:8e:dc:33:8b:
5b:91:c2:4e:9b:78:09:37:9d:19:8f:ad:64:02:65:
fb:c2:e3:83:14:70:df:aa:21:c9:7f:d8:b7:3a:24:
50:03:dc:c6:88:f1:7c:dc:2d:78:ba:57:65:4e:03:
4c:48:07:dd:0a:26:d5:3a:83:54:4d:aa:65:4b:50:
c4:0f:5b:b6:f7:a6:52:45:f6:55:99:d5:36:33:f1:
e2:a1:b1:50:0f:c7:61:8f:b9:3f:7c:b5:b3:38:15:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AF:09:66:54:27:6F:40:AD:47:65:DF:3F:97:21:FB:02:AA:FD:ED
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ea8JZlQnb0CtR2XfP5ch-wKq_e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
83.147.27.0/24
83.147.36.0-83.147.43.255
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:28:85:f2:c3:3a:0b:12:57:99:fe:47:91:d6:f3:7e:71:97:
90:0d:92:c6:b3:ec:d1:44:ac:31:1d:73:8b:7f:e2:50:ce:43:
de:0b:16:1a:34:0f:ec:ac:16:07:54:cd:cf:97:14:10:95:ea:
b3:4c:4b:0c:c2:d6:3d:ed:3d:47:c7:36:f8:2e:b0:d7:83:e1:
41:d3:17:51:db:b4:08:a7:fb:63:e4:e7:00:0b:05:40:55:13:
d8:43:0d:43:56:e1:97:b2:07:98:35:4a:93:2b:76:b8:e5:f4:
42:d0:cc:21:09:a1:fe:13:54:a8:78:7d:56:f7:35:48:1e:5f:
b2:72:dd:51:92:f1:bd:51:05:d0:c8:59:d4:ff:b7:af:d0:79:
6c:53:58:fd:a6:30:97:22:13:1e:da:a0:60:08:2d:e3:bf:1f:
49:ea:05:82:4f:be:d0:74:2d:9a:18:c6:ed:4c:66:c0:c0:5e:
47:22:f3:a2:01:c5:48:13:74:85:80:24:62:08:c7:db:b1:07:
cf:01:c4:1e:b7:71:c4:fe:51:d0:69:fb:09:88:a7:17:8f:62:
7b:2c:af:63:67:2f:1e:45:18:d8:09:86:5a:d8:2a:ca:40:33:
b3:bd:94:04:47:b5:9e:08:de:e0:71:a0:a8:84:b3:dd:92:57:
25:20:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org