Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/o8l0XKBjpEILckTwbBSs6HmwTDw.roa
File: o8l0XKBjpEILckTwbBSs6HmwTDw.roa (raw, json)
Hash identifier: ixavXyQmruN2AT7DB9OAA3KCaJ3YdB49zgLUcN0Oi9U=
Subject key identifier: A3:C9:74:5C:A0:63:A4:42:0B:72:44:F0:6C:14:AC:E8:79:B0:4C:3C
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0186C4CD4A445D5C5AC9FBF11AEBC58BB208
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/o8l0XKBjpEILckTwbBSs6HmwTDw.roa
Signing time: Thu 09 Mar 2023 05:17:13 +0000
ROA not before: Thu 09 Mar 2023 05:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 83.147.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 01:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c4:cd:4a:44:5d:5c:5a:c9:fb:f1:1a:eb:c5:8b:b2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 9 05:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3c9745ca063a4420b7244f06c14ace879b04c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:58:8e:e2:4b:85:71:12:b6:0c:d8:b3:5f:
36:c7:0d:84:86:a2:42:75:b4:03:c3:62:8c:36:05:
a5:9f:cc:2e:4b:00:39:a1:f7:19:ce:d9:00:dd:e1:
aa:af:5e:91:cf:e0:e7:ee:50:2c:0d:0a:5e:d4:c4:
35:1c:2e:54:d2:c1:6a:34:a2:b3:32:f5:97:bc:cd:
8c:a1:22:f4:87:1b:ed:d0:a1:52:b3:d1:58:e9:cd:
a8:ca:8a:fb:cb:0f:c3:c2:08:9c:1c:c7:2b:f8:24:
50:e2:2c:f0:0b:58:e8:d9:bf:ab:ae:f1:e0:21:02:
7a:cd:21:84:3e:3e:02:20:45:06:1b:6d:82:4b:7b:
dd:59:ac:35:94:4b:b4:86:a2:50:aa:18:4a:9a:46:
f1:20:16:73:a9:e0:57:48:9f:73:15:d4:be:94:6d:
34:6f:dc:3a:13:98:2b:51:f2:a9:c3:24:fa:8b:bf:
e9:38:13:a2:36:65:44:78:82:35:5f:fd:bc:bf:8f:
ab:b2:2b:c4:ff:3f:b5:e1:de:b0:a5:b1:63:f0:a9:
ef:16:b0:ed:d3:d1:1f:c6:42:c1:9d:51:fb:d8:ab:
05:9b:8c:fb:f0:03:22:24:59:ed:0d:d3:b9:3e:f9:
c4:b2:18:6b:de:5c:ea:66:93:20:a5:1d:54:56:5f:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C9:74:5C:A0:63:A4:42:0B:72:44:F0:6C:14:AC:E8:79:B0:4C:3C
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/o8l0XKBjpEILckTwbBSs6HmwTDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:77:5b:21:fc:18:25:fd:c5:59:7d:67:96:1b:f9:25:e0:4d:
33:56:a4:b4:ea:ec:43:b0:b3:82:b3:b8:33:91:c6:1c:c8:ba:
fe:15:b8:e2:e6:9e:a6:77:a4:0f:1c:b0:a8:1c:08:61:70:46:
03:68:09:65:80:ae:3f:5b:4d:77:a4:df:0e:07:bb:84:70:be:
ec:95:88:06:81:9f:15:ea:62:ad:2c:6b:3d:7d:b1:ac:2c:34:
1f:46:a2:ad:9c:fa:2a:f5:26:dd:f4:c7:61:58:0d:26:2d:1e:
43:53:89:7c:ed:27:8d:cc:a2:99:70:52:59:bf:ef:42:5e:82:
f2:a7:cd:ca:ed:ab:84:3d:ec:65:63:20:57:d4:46:93:63:b2:
6b:6f:e5:b6:48:1a:10:10:a3:ec:0c:16:26:be:5d:04:9f:c9:
cb:f0:b2:b4:df:14:ea:ca:bb:a5:d0:5b:90:3a:07:d0:b5:08:
f2:b1:5b:c6:15:01:b6:f5:ca:43:01:e1:7d:c1:c1:82:ee:5a:
84:62:e3:0b:a8:0f:62:c7:ed:6b:16:48:a9:59:2b:6c:11:53:
8e:2d:4a:49:a0:c0:42:62:d5:76:d6:a6:00:6a:dc:ff:8d:bc:
d1:86:46:24:fe:9b:0d:7c:50:30:66:3b:43:0e:16:50:92:77:
91:e4:ec:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbEzUpEXVxayfvxGuvFi7IIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMwMzA5MDUxNzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2M5NzQ1Y2EwNjNhNDQyMGI3MjQ0ZjA2YzE0YWNlODc5YjA0YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh29YjuJLhXEStgzYs182xw2EhqJC
dbQDw2KMNgWln8wuSwA5ofcZztkA3eGqr16Rz+Dn7lAsDQpe1MQ1HC5U0sFqNKKz
MvWXvM2MoSL0hxvt0KFSs9FY6c2oyor7yw/DwgicHMcr+CRQ4izwC1jo2b+rrvHg
IQJ6zSGEPj4CIEUGG22CS3vdWaw1lEu0hqJQqhhKmkbxIBZzqeBXSJ9zFdS+lG00
b9w6E5grUfKpwyT6i7/pOBOiNmVEeII1X/28v4+rsivE/z+14d6wpbFj8KnvFrDt
09EfxkLBnVH72KsFm4z78AMiJFntDdO5PvnEshhr3lzqZpMgpR1UVl+2DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKPJdFygY6RCC3JE8GwUrOh5sEw8MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvbzhsMFhLQmpwRUlMY2tUd2JCU3M2SG13VER3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5MJMA0G
CSqGSIb3DQEBCwUAA4IBAQBOd1sh/Bgl/cVZfWeWG/kl4E0zVqS06uxDsLOCs7gz
kcYcyLr+Fbji5p6md6QPHLCoHAhhcEYDaAllgK4/W013pN8OB7uEcL7slYgGgZ8V
6mKtLGs9fbGsLDQfRqKtnPoq9Sbd9MdhWA0mLR5DU4l87SeNzKKZcFJZv+9CXoLy
p83K7auEPexlYyBX1EaTY7Jrb+W2SBoQEKPsDBYmvl0En8nL8LK03xTqyrul0FuQ
OgfQtQjysVvGFQG29cpDAeF9wcGC7lqEYuMLqA9ix+1rFkipWStsEVOOLUpJoMBC
YtV21qYAatz/jbzRhkYk/psNfFAwZjtDDhZQkneR5Oxx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org