Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rLEkVo9HhKO4d403Nselx53KFLo.roa
File: rLEkVo9HhKO4d403Nselx53KFLo.roa (raw, json)
Hash identifier: DBLTX/OoDGhEo57OWPKGFHh+VMQqMOz9JiyfwQYPQyI=
Subject key identifier: AC:B1:24:56:8F:47:84:A3:B8:77:8D:37:36:C7:A5:C7:9D:CA:14:BA
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0187A2D1A7A6BB4863300D797E5928AA708B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rLEkVo9HhKO4d403Nselx53KFLo.roa
Signing time: Fri 21 Apr 2023 07:57:41 +0000
ROA not before: Fri 21 Apr 2023 07:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 83.147.61.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 17:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:d1:a7:a6:bb:48:63:30:0d:79:7e:59:28:aa:70:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 21 07:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acb124568f4784a3b8778d3736c7a5c79dca14ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:d1:5f:2f:90:03:37:d9:2e:61:31:e7:ee:
c2:91:86:51:0f:f7:79:d5:e6:cc:f9:a1:97:b0:e6:
58:81:b9:86:cb:38:37:9d:9e:5a:25:0f:65:a8:ae:
d5:bd:f0:5c:66:8d:21:82:63:97:8d:de:2f:34:dd:
6d:03:ee:22:c2:50:a1:67:d8:29:69:c8:fd:cf:db:
fb:ed:de:bf:bc:40:65:19:b6:cf:8e:e2:09:2a:98:
99:64:97:1d:f1:59:de:66:94:fb:8c:5f:fa:3b:ee:
dd:a6:7b:b0:f0:57:dd:85:a0:93:0d:ac:97:3b:b9:
ce:bb:e0:42:c0:85:ae:33:a9:14:d1:92:79:55:0b:
0b:f1:72:ef:7a:bd:c4:68:77:8f:7e:f4:16:79:a3:
c9:bb:22:3a:24:80:32:43:d6:9a:90:1c:c2:c7:cf:
aa:5a:c3:eb:3b:21:e6:27:c7:fa:81:9d:34:ee:28:
4c:a7:d5:96:7e:f0:ec:fd:6b:3b:8f:2d:03:34:15:
a0:a1:3d:aa:6a:27:d9:a7:97:61:0d:22:cf:14:2e:
ec:fa:2e:77:c7:75:22:d3:de:50:4a:47:a4:c7:fe:
a4:ba:2e:0e:82:20:66:fd:3c:b7:c3:10:b3:3f:54:
49:9e:2a:5e:77:2d:60:59:e2:c5:88:67:98:b9:7d:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:24:56:8F:47:84:A3:B8:77:8D:37:36:C7:A5:C7:9D:CA:14:BA
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rLEkVo9HhKO4d403Nselx53KFLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.27.0/24
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:35:3d:d4:c4:5f:39:c3:23:cb:c4:61:6c:13:11:6f:8e:3a:
42:7a:d7:6a:b1:2e:ae:f8:16:fe:9a:3e:8d:34:c1:3e:a5:9c:
c2:b6:9c:64:8f:5f:36:5d:f3:30:77:d8:4b:d3:a3:94:52:a8:
b9:fb:c5:e2:21:e4:f4:d2:53:dd:7d:3d:a0:71:87:9d:7e:65:
ea:a7:2b:e2:9f:ef:30:e5:c1:f7:1a:9a:37:24:df:84:6b:75:
5a:63:71:df:d0:ca:13:e3:80:3d:24:55:26:e8:be:6a:c2:cc:
fe:18:f6:51:0e:d7:89:6b:b4:16:e0:bd:1f:6d:cf:27:12:b2:
76:d1:fc:a7:68:37:fb:98:48:ca:ab:0b:46:e9:ac:08:88:f9:
e2:b7:db:dd:8c:6a:26:0d:5b:8f:48:8a:41:3f:99:43:30:79:
25:c8:99:15:d7:6e:ae:d2:ab:83:bd:fc:ab:c2:ee:97:7b:8a:
78:b8:7e:aa:cc:42:96:f0:0f:0c:ce:8d:d9:46:cb:36:d3:d3:
0a:f4:c7:2e:e6:00:5b:09:63:19:53:c2:15:7b:ca:00:18:22:
fb:50:b6:81:78:ba:07:d6:7c:c3:af:af:2c:dc:34:31:47:cd:
02:c8:52:2f:cd:8d:3b:f3:43:f7:c0:c0:2d:3c:35:ae:89:f7:
c2:09:29:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYei0aemu0hjMA15flkoqnCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMwNDIxMDc1NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2IxMjQ1NjhmNDc4NGEzYjg3NzhkMzczNmM3YTVjNzlkY2ExNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqzRXy+QAzfZLmEx5+7CkYZRD/d5
1ebM+aGXsOZYgbmGyzg3nZ5aJQ9lqK7VvfBcZo0hgmOXjd4vNN1tA+4iwlChZ9gp
acj9z9v77d6/vEBlGbbPjuIJKpiZZJcd8VneZpT7jF/6O+7dpnuw8FfdhaCTDayX
O7nOu+BCwIWuM6kU0ZJ5VQsL8XLver3EaHePfvQWeaPJuyI6JIAyQ9aakBzCx8+q
WsPrOyHmJ8f6gZ007ihMp9WWfvDs/Ws7jy0DNBWgoT2qaifZp5dhDSLPFC7s+i53
x3Ui095QSkekx/6kui4OgiBm/Ty3wxCzP1RJnipedy1gWeLFiGeYuX0RwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKyxJFaPR4SjuHeNNzbHpcedyhS6MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvckxFa1ZvOUhoS080ZDQwM05zZWx4NTNLRkxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU5MbAwQA
U5M9MA0GCSqGSIb3DQEBCwUAA4IBAQC2NT3UxF85wyPLxGFsExFvjjpCetdqsS6u
+Bb+mj6NNME+pZzCtpxkj182XfMwd9hL06OUUqi5+8XiIeT00lPdfT2gcYedfmXq
pyvin+8w5cH3Gpo3JN+Ea3VaY3Hf0MoT44A9JFUm6L5qwsz+GPZRDteJa7QW4L0f
bc8nErJ20fynaDf7mEjKqwtG6awIiPnit9vdjGomDVuPSIpBP5lDMHklyJkV126u
0quDvfyrwu6Xe4p4uH6qzEKW8A8Mzo3ZRss209MK9Mcu5gBbCWMZU8IVe8oAGCL7
ULaBeLoH1nzDr68s3DQxR80CyFIvzY0780P3wMAtPDWuiffCCSkV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org