Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/hGkP1ffZLB-Z9AbOzlUPMMI_KWM.roa
File: hGkP1ffZLB-Z9AbOzlUPMMI_KWM.roa (raw, json)
Hash identifier: aWAOAOullwduiMs4QquZ0PpF92be1wmILigb7611zQI=
Subject key identifier: 84:69:0F:D5:F7:D9:2C:1F:99:F4:06:CE:CE:55:0F:30:C2:3F:29:63
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01926AE163D2DC4375601CFA4CB1F172B4F1
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/hGkP1ffZLB-Z9AbOzlUPMMI_KWM.roa
Signing time: Tue 08 Oct 2024 06:46:48 +0000
ROA not before: Tue 08 Oct 2024 06:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 07 Nov 2024 08:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:e1:63:d2:dc:43:75:60:1c:fa:4c:b1:f1:72:b4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 8 06:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84690fd5f7d92c1f99f406cece550f30c23f2963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:8e:35:57:69:a5:3d:17:73:2a:04:72:c5:
2c:2a:fa:97:c2:9f:36:88:a7:ee:14:85:c4:b5:c3:
7c:d2:25:17:08:95:77:b6:79:ad:56:02:ab:35:46:
04:9c:73:ce:2a:e7:9d:2d:f0:de:21:45:c8:26:05:
62:7a:9a:c9:c4:d2:28:92:5d:e0:4e:83:bf:52:ec:
c3:76:84:1f:20:f0:20:16:5f:fd:3b:25:a4:c7:ca:
5c:3d:b5:10:e2:9e:dc:e1:62:fe:a7:15:90:39:10:
66:90:16:fc:c2:29:fd:76:d8:4f:33:0e:56:4b:a5:
86:f9:18:57:36:8a:c9:67:a8:ae:d1:f4:45:dc:47:
46:95:78:e0:23:29:2a:d6:d7:31:31:86:45:79:12:
60:93:c9:cb:af:09:d4:8d:e6:14:da:49:5a:1b:2c:
b0:b7:c7:20:63:b4:ca:66:63:5b:08:48:26:38:6e:
41:52:f7:f0:8c:bf:12:21:6e:06:6d:4e:ac:ea:3c:
2f:ae:a4:47:7e:24:b0:b9:d1:eb:18:46:95:1b:7b:
9f:b2:6c:d4:37:dd:82:75:07:eb:b0:1f:f0:32:7b:
81:a6:e6:0a:96:c8:5d:92:1b:00:0b:fd:27:1a:9b:
44:c4:6c:f9:25:eb:c7:0f:2a:24:df:9e:90:a3:42:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:69:0F:D5:F7:D9:2C:1F:99:F4:06:CE:CE:55:0F:30:C2:3F:29:63
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/hGkP1ffZLB-Z9AbOzlUPMMI_KWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ac:40:3e:9c:04:0d:47:a9:e9:bc:a1:4a:54:ff:4d:80:80:
72:56:25:7a:fa:44:7a:c0:4c:29:a9:ec:23:79:41:60:90:61:
93:0d:4d:c0:09:ab:64:b3:a7:00:4b:22:3f:62:4a:3a:a4:24:
f2:0e:e4:d5:96:cc:54:fa:7e:53:7c:87:a0:cc:6c:9c:13:cb:
b9:a6:d3:36:f7:1e:41:c7:82:e0:4b:82:27:95:4e:63:3a:b4:
03:2a:02:40:32:44:26:69:77:54:78:b7:2e:3e:4c:ec:5e:13:
ab:7a:21:53:05:b4:8f:0c:6f:87:86:cc:4e:bd:48:1c:11:7d:
26:97:ee:fc:e2:17:42:59:59:ac:16:79:c6:f8:8e:0c:51:3d:
bd:e1:cb:be:92:22:5e:a0:5d:ce:51:0f:73:9e:77:bd:8b:ab:
ee:87:dd:9e:88:64:8d:29:e2:bb:25:33:75:5e:c0:6a:7f:7a:
13:53:c3:00:2c:ef:2b:cc:ef:ac:2b:6c:a3:36:cf:24:50:f4:
89:79:66:44:1c:55:ec:61:f5:f6:34:66:7d:6d:84:ac:7c:e9:
d1:91:ae:c8:d0:7c:5e:de:2d:68:1e:63:24:81:93:13:59:4a:
e3:54:81:d7:1b:a5:bd:17:43:79:52:e1:41:48:7a:02:e7:76:
f6:6f:e8:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJq4WPS3EN1YBz6TLHxcrTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQxMDA4MDY0NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDY5MGZkNWY3ZDkyYzFmOTlmNDA2Y2VjZTU1MGYzMGMyM2YyOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNiONVdppT0XcyoEcsUsKvqXwp82
iKfuFIXEtcN80iUXCJV3tnmtVgKrNUYEnHPOKuedLfDeIUXIJgVieprJxNIokl3g
ToO/UuzDdoQfIPAgFl/9OyWkx8pcPbUQ4p7c4WL+pxWQORBmkBb8win9dthPMw5W
S6WG+RhXNorJZ6iu0fRF3EdGlXjgIykq1tcxMYZFeRJgk8nLrwnUjeYU2klaGyyw
t8cgY7TKZmNbCEgmOG5BUvfwjL8SIW4GbU6s6jwvrqRHfiSwudHrGEaVG3ufsmzU
N92CdQfrsB/wMnuBpuYKlshdkhsAC/0nGptExGz5JevHDyok356Qo0I7nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIRpD9X32SwfmfQGzs5VDzDCPyljMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvaEdrUDFmZlpMQi1aOUFiT3psVVBNTUlfS1dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MsMA0G
CSqGSIb3DQEBCwUAA4IBAQAtrEA+nAQNR6npvKFKVP9NgIByViV6+kR6wEwpqewj
eUFgkGGTDU3ACatks6cASyI/Yko6pCTyDuTVlsxU+n5TfIegzGycE8u5ptM29x5B
x4LgS4InlU5jOrQDKgJAMkQmaXdUeLcuPkzsXhOreiFTBbSPDG+HhsxOvUgcEX0m
l+784hdCWVmsFnnG+I4MUT294cu+kiJeoF3OUQ9znne9i6vuh92eiGSNKeK7JTN1
XsBqf3oTU8MALO8rzO+sK2yjNs8kUPSJeWZEHFXsYfX2NGZ9bYSsfOnRka7I0Hxe
3i1oHmMkgZMTWUrjVIHXG6W9F0N5UuFBSHoC53b2b+gE
-----END CERTIFICATE-----
Generated at Thu Nov 7 10:45:02 2024 by rpki-client on console-ams.rpki-client.org