Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gaofVFe8qD_E22ub58R_qVsDYL0.roa
File: gaofVFe8qD_E22ub58R_qVsDYL0.roa (raw, json)
Hash identifier: Ph00CrgvU6ewamuIanlRYr0h/MecyaFyjdrmC4/JuyM=
Subject key identifier: 81:AA:1F:54:57:BC:A8:3F:C4:DB:6B:9B:E7:C4:7F:A9:5B:03:60:BD
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01926011BF805BD3B590E7CB4CB7E0CDA4E7
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gaofVFe8qD_E22ub58R_qVsDYL0.roa
Signing time: Sun 06 Oct 2024 04:23:48 +0000
ROA not before: Sun 06 Oct 2024 04:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 06:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:60:11:bf:80:5b:d3:b5:90:e7:cb:4c:b7:e0:cd:a4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 6 04:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81aa1f5457bca83fc4db6b9be7c47fa95b0360bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:f8:99:cb:28:f1:7f:b9:a8:79:29:86:96:
f1:e7:c9:3a:b2:0f:b1:b5:89:ca:62:76:bf:38:d7:
55:3a:dc:17:a5:12:84:06:9d:37:5c:bc:d4:9d:d9:
8a:50:d2:f4:2a:78:83:63:7f:8b:11:c9:07:b2:68:
0f:4f:43:e3:ca:95:e1:73:2d:bd:30:83:47:42:73:
38:14:c5:ec:38:9a:17:9d:27:51:ee:9d:7e:e0:25:
62:5f:5e:ca:c4:75:d8:9b:21:72:25:7f:4c:ba:01:
9f:14:88:8d:cc:2a:8f:b6:9b:6d:47:6c:2f:28:9c:
79:69:b6:f9:6f:02:49:8f:a5:e8:a1:36:fe:67:6a:
44:aa:20:5f:c8:24:3c:ee:94:3f:65:a1:aa:96:68:
33:d8:94:97:ae:2f:81:04:cb:94:bc:6f:28:c7:e3:
5b:ea:9b:ab:e3:10:6e:01:c5:28:ad:e8:d1:67:dd:
3f:a4:f6:9e:2e:9a:11:ee:3b:f7:63:31:fa:64:ac:
de:bc:76:8f:73:96:31:aa:c5:0f:80:7c:4d:1d:fa:
ea:08:b1:42:f5:7f:b4:51:60:d6:1d:b4:40:86:4e:
49:ea:b9:30:f4:25:a6:df:75:dc:06:2a:cc:59:4f:
bd:e4:cd:2c:32:7b:96:06:f3:ae:37:3c:5f:02:1d:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:1F:54:57:BC:A8:3F:C4:DB:6B:9B:E7:C4:7F:A9:5B:03:60:BD
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gaofVFe8qD_E22ub58R_qVsDYL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.21.255
83.147.26.0-83.147.28.255
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:83:49:76:31:e0:87:54:98:6c:3b:30:9c:df:7d:17:17:ae:
78:2f:e9:3d:a9:9e:29:4d:83:88:40:fd:6b:7f:ba:97:26:c3:
09:07:f8:5f:d0:1e:eb:94:0e:23:1e:73:56:84:6d:99:1c:8a:
1e:68:a2:05:ac:e2:e9:2b:82:bb:a1:3f:bd:de:3e:cc:92:4c:
c3:e1:02:c8:eb:de:46:87:fb:c5:24:ad:04:08:f2:9b:8a:d0:
c6:20:c5:92:db:22:5a:ab:5d:66:5b:1b:d8:c6:90:fe:df:cf:
87:83:d0:d1:dc:11:cd:b1:4a:24:81:f0:d8:a7:35:60:01:b1:
b7:27:a3:1d:c7:5c:13:8c:01:eb:92:6d:0e:e9:97:5f:f4:13:
85:db:a8:e8:b5:bc:6c:82:6d:81:73:47:4d:ce:f3:9b:31:29:
e7:22:ed:1d:a8:f7:52:4c:30:3b:da:df:d9:b6:90:56:bf:38:
22:d4:e3:c7:51:bc:75:b4:59:ae:cf:e9:42:1f:b1:7e:c2:c7:
f6:40:46:55:8b:a2:ed:82:e6:9a:ad:cf:df:2c:2b:55:4a:a1:
f3:e9:dc:e6:25:98:4d:19:ab:38:98:16:23:94:b8:9a:e4:07:
d3:ec:28:fa:0a:f3:c2:44:67:76:7f:8f:15:63:4a:5f:39:48:
97:01:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 09:36:57 2024 by rpki-client on console-ams.rpki-client.org