Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/mM4nHxaZffur6d1QcgDttINzvb0.roa
File: mM4nHxaZffur6d1QcgDttINzvb0.roa (raw, json)
Hash identifier: 43ILCow7dpffjSR94oi2SR7GrHff62njLc2C+3o64NQ=
Subject key identifier: 98:CE:27:1F:16:99:7D:FB:AB:E9:DD:50:72:00:ED:B4:83:73:BD:BD
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018B8ED094956D636E0375BFE30355A23F43
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/mM4nHxaZffur6d1QcgDttINzvb0.roa
Signing time: Thu 02 Nov 2023 06:55:16 +0000
ROA not before: Thu 02 Nov 2023 06:55:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 83.147.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Dec 2023 06:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:d0:94:95:6d:63:6e:03:75:bf:e3:03:55:a2:3f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 2 06:55:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98ce271f16997dfbabe9dd507200edb48373bdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:b3:5a:66:11:87:3d:c7:f0:bc:20:1d:83:
21:5e:03:7a:6f:22:87:57:ea:b7:0e:9e:7a:f8:40:
34:1a:1e:0e:e4:27:5d:b1:58:c9:e0:a9:91:c1:00:
24:94:0c:a0:ea:56:a9:a6:36:88:35:c4:77:55:1d:
5b:43:c6:d0:2e:5b:12:c8:50:4b:23:f7:37:d1:97:
a6:2e:85:04:11:b6:3b:ee:51:b4:da:55:04:c3:69:
10:3c:a0:36:0c:70:67:ac:2c:e5:2d:96:0a:41:47:
aa:64:08:be:34:05:d7:c0:b0:7c:e9:ec:29:fd:02:
c5:66:87:b3:93:a9:80:47:66:c7:bb:6e:c2:f7:73:
2e:43:20:01:56:e0:87:a3:85:92:dc:59:9a:f0:d6:
be:85:99:1a:ae:d9:eb:6d:c1:81:ad:62:ec:0e:69:
96:9e:30:eb:3d:3d:62:2c:2b:31:19:1d:bc:df:a6:
a9:6e:0d:c2:71:fb:4c:b4:0b:19:a2:96:56:6a:db:
f8:d7:f7:4d:cf:91:45:0e:c4:78:09:f2:8a:73:39:
e7:db:8d:66:d4:c7:60:be:99:b1:7c:0b:f4:21:a7:
4d:32:59:9d:da:18:b2:64:0f:c0:96:a7:09:6d:de:
82:57:58:b1:3e:39:ed:29:fd:8f:b1:37:7a:8d:5c:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:27:1F:16:99:7D:FB:AB:E9:DD:50:72:00:ED:B4:83:73:BD:BD
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/mM4nHxaZffur6d1QcgDttINzvb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
Signature Algorithm: sha256WithRSAEncryption
21:ea:5c:4e:e0:59:aa:b6:07:79:49:21:94:b8:73:34:74:66:
cc:12:13:9b:3c:1d:89:af:c6:51:d5:64:f3:55:65:80:00:ad:
79:a7:ef:44:80:27:fc:b0:16:5f:b1:14:0d:ed:2e:f8:28:10:
c8:2a:f1:29:4b:8c:a1:3e:00:53:79:ea:83:4d:ab:5e:4d:d7:
57:70:b9:3d:a9:29:4d:ff:7a:f7:82:0f:b2:b0:0c:09:26:b3:
ca:a7:cc:88:bb:5a:a0:61:47:b1:ac:3c:45:22:97:4b:cb:b3:
35:ef:06:f2:3c:73:97:55:5e:84:d3:6a:20:d8:39:d9:f2:94:
77:49:80:6c:4c:91:15:3c:24:97:9a:12:35:34:99:11:99:21:
f2:91:83:7a:c1:69:bf:24:0f:6c:bc:72:60:02:c5:2f:9a:2a:
ae:c3:7b:3a:fc:e8:a4:a3:10:f8:14:18:ef:1c:e8:5e:0b:d7:
56:86:63:06:78:de:cb:91:17:67:c4:a3:b3:79:9f:99:54:5f:
ca:18:20:6a:87:dd:1e:1b:f3:91:f9:94:08:97:3f:f7:36:1e:
80:67:8d:70:94:ac:d5:2f:09:3e:69:79:41:08:2b:f2:fb:44:
24:fb:3f:db:d8:9f:5b:09:78:ef:43:8f:45:10:13:8f:99:46:
9e:a3:92:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuO0JSVbWNuA3W/4wNVoj9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMxMTAyMDY1NTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGNlMjcxZjE2OTk3ZGZiYWJlOWRkNTA3MjAwZWRiNDgzNzNiZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGizWmYRhz3H8LwgHYMhXgN6byKH
V+q3Dp56+EA0Gh4O5CddsVjJ4KmRwQAklAyg6lappjaINcR3VR1bQ8bQLlsSyFBL
I/c30ZemLoUEEbY77lG02lUEw2kQPKA2DHBnrCzlLZYKQUeqZAi+NAXXwLB86ewp
/QLFZoezk6mAR2bHu27C93MuQyABVuCHo4WS3Fma8Na+hZkartnrbcGBrWLsDmmW
njDrPT1iLCsxGR2836apbg3CcftMtAsZopZWatv41/dNz5FFDsR4CfKKcznn241m
1MdgvpmxfAv0IadNMlmd2hiyZA/AlqcJbd6CV1ixPjntKf2PsTd6jVwwnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJjOJx8WmX37q+ndUHIA7bSDc729MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvbU00bkh4YVpmZnVyNmQxUWNnRHR0SU56dmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MAMA0G
CSqGSIb3DQEBCwUAA4IBAQAh6lxO4Fmqtgd5SSGUuHM0dGbMEhObPB2Jr8ZR1WTz
VWWAAK15p+9EgCf8sBZfsRQN7S74KBDIKvEpS4yhPgBTeeqDTateTddXcLk9qSlN
/3r3gg+ysAwJJrPKp8yIu1qgYUexrDxFIpdLy7M17wbyPHOXVV6E02og2DnZ8pR3
SYBsTJEVPCSXmhI1NJkRmSHykYN6wWm/JA9svHJgAsUvmiquw3s6/OikoxD4FBjv
HOheC9dWhmMGeN7LkRdnxKOzeZ+ZVF/KGCBqh90eG/OR+ZQIlz/3Nh6AZ41wlKzV
Lwk+aXlBCCvy+0Qk+z/b2J9bCXjvQ49FEBOPmUaeo5Iy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org