Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/r-ZaRTZoW8tqjjxRzOuCN1tY_qw.roa
File: r-ZaRTZoW8tqjjxRzOuCN1tY_qw.roa (raw, json)
Hash identifier: hZo1v7A7QRrIUGAfBNLdzJNGJ7UZ4xmklHPRLGkvR+I=
Subject key identifier: AF:E6:5A:45:36:68:5B:CB:6A:8E:3C:51:CC:EB:82:37:5B:58:FE:AC
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018865ABECB4BF4135101F9CA3BD5624BB43
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/r-ZaRTZoW8tqjjxRzOuCN1tY_qw.roa
Signing time: Mon 29 May 2023 04:02:25 +0000
ROA not before: Mon 29 May 2023 04:02:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.56.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 04:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:65:ab:ec:b4:bf:41:35:10:1f:9c:a3:bd:56:24:bb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 29 04:02:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afe65a4536685bcb6a8e3c51cceb82375b58feac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:9e:29:45:a2:a0:a1:bb:ab:78:d9:2d:a1:
6f:c3:d3:cc:7a:64:48:9f:11:28:ee:76:47:7d:2c:
54:5c:83:f4:90:13:dc:15:5c:96:de:63:58:1e:52:
f9:19:a9:83:7f:90:f9:32:20:d2:ed:c3:d9:2d:06:
74:56:62:4b:7f:12:f6:dd:2c:ed:78:07:f2:8b:32:
d8:a1:c1:15:74:ee:ca:de:8a:31:49:fd:c7:a3:2b:
70:96:21:93:08:5b:f9:93:e5:63:d9:bb:84:ea:2f:
af:e1:3b:cf:69:9a:f9:88:74:c0:a7:c5:2a:8a:42:
1f:b8:3b:29:5c:5a:89:a5:c6:92:09:62:ac:a9:b4:
0a:42:c5:88:33:87:1a:4b:5b:68:fc:5b:ba:05:0a:
36:8b:c4:02:49:20:ce:3f:cb:bb:2a:19:48:46:e9:
4f:11:81:0a:8a:55:97:6c:b4:7b:75:47:ce:1f:1c:
67:8b:bd:86:c0:d9:af:8e:50:af:3e:e7:51:20:a9:
45:ed:fe:21:08:5e:f0:96:09:f9:5b:a3:16:1a:10:
dc:b7:0f:8c:e6:e1:1c:7c:fd:3b:df:6a:cd:22:6c:
eb:15:dc:f4:f8:a4:b2:45:45:f0:40:d6:17:6c:1c:
86:6a:64:39:cc:33:74:b1:1f:e9:57:13:f9:39:9f:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:5A:45:36:68:5B:CB:6A:8E:3C:51:CC:EB:82:37:5B:58:FE:AC
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/r-ZaRTZoW8tqjjxRzOuCN1tY_qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
83.147.23.0/24
83.147.27.0/24
83.147.56.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a8:e3:72:1b:11:bc:de:b0:47:9c:80:2d:43:87:6b:b3:8a:
ef:85:d6:0f:c7:a4:c1:66:30:c1:96:e8:90:a5:ce:6c:8f:c7:
37:e7:8c:74:fc:f8:fc:d7:6e:31:4c:81:c9:86:10:5a:00:0c:
84:35:15:c9:a9:4a:3e:a4:2c:74:6f:35:38:08:3e:34:62:a2:
a3:fd:df:5d:31:d7:88:de:a8:3a:0a:6f:bd:22:d7:ab:6b:7f:
b6:ea:af:c2:a5:36:e1:7d:c6:04:54:0c:c7:f1:d5:02:ca:b6:
8e:ab:7a:a3:bc:85:74:62:7f:21:7d:41:fa:b1:d4:3e:01:4c:
39:a8:e1:f5:17:9c:d6:6d:c1:0e:f0:a9:50:9c:1d:7c:70:09:
ae:6c:62:39:23:d4:40:7d:d7:06:ee:4e:f5:ca:75:db:fa:c4:
b2:82:d9:f0:89:5b:91:6e:02:57:19:3d:4c:d1:87:a7:77:22:
3b:34:64:76:ff:a6:0a:57:a2:83:80:3d:eb:10:a6:41:18:26:
05:9a:ad:2a:98:c4:22:84:e3:ae:a9:aa:1c:bc:8c:7b:f6:54:
ee:ed:17:0d:4a:69:aa:57:4e:15:b5:9b:c1:47:e5:e9:59:63:
98:3e:01:57:e2:fb:57:2e:da:12:4b:42:99:76:b6:a0:f3:a2:
ec:a5:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org