Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uL4bvj-K3Lyt02m4FRyOc7luSVE.roa
File: uL4bvj-K3Lyt02m4FRyOc7luSVE.roa (raw, json)
Hash identifier: GTXa7D/PdhuZYIdMMfUYwo7JyiUY0Iet5T1pbzAdDRs=
Subject key identifier: B8:BE:1B:BE:3F:8A:DC:BC:AD:D3:69:B8:15:1C:8E:73:B9:6E:49:51
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CD98DF4FE02B3E403EC28B12E37FEE340
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uL4bvj-K3Lyt02m4FRyOc7luSVE.roa
Signing time: Fri 05 Jan 2024 12:16:48 +0000
ROA not before: Fri 05 Jan 2024 12:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 05:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:8d:f4:fe:02:b3:e4:03:ec:28:b1:2e:37:fe:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 5 12:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8be1bbe3f8adcbcadd369b8151c8e73b96e4951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:09:13:90:d3:05:a5:37:51:6b:78:bf:8b:
72:71:ca:61:7c:1c:67:03:5a:68:8e:f4:7a:40:62:
70:9c:75:6e:7e:d6:f0:55:51:ee:d3:19:42:bd:07:
29:f2:2a:27:c9:46:60:53:b3:66:62:06:e3:41:62:
ce:51:88:2e:74:35:41:20:e8:14:5d:e1:16:5b:a0:
e8:de:d3:6a:90:80:0f:61:59:a7:63:bd:ca:6f:8f:
09:12:d5:ff:73:4c:df:d8:14:28:25:43:81:4d:43:
b1:c0:8d:46:28:58:eb:1b:95:a1:84:fe:7c:4d:59:
67:09:58:35:6e:85:13:06:6a:07:96:e3:d2:78:0b:
b7:b5:69:c8:70:b8:88:26:ee:a4:bf:75:0f:b0:87:
bc:52:b0:a7:a6:45:2a:3f:6a:b5:c4:b3:05:42:e4:
bc:9a:11:0b:aa:ed:22:f6:57:d6:79:5f:80:a6:27:
0a:7a:6e:ee:af:3d:c0:10:d6:36:81:61:c9:b7:ee:
bf:f8:32:85:ce:58:7c:01:1d:43:b5:f9:8c:63:60:
f0:30:df:a3:6f:54:ea:83:4a:48:b5:30:44:f0:a9:
c8:8b:9d:70:4e:a4:a0:dd:b8:86:4d:fa:99:01:51:
08:94:5a:e6:1d:d4:c1:92:31:e8:15:18:5e:b9:51:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BE:1B:BE:3F:8A:DC:BC:AD:D3:69:B8:15:1C:8E:73:B9:6E:49:51
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uL4bvj-K3Lyt02m4FRyOc7luSVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a7:ce:94:3c:64:e2:2f:a7:a6:c6:74:24:ed:63:14:a4:48:
ab:20:29:42:96:fe:cd:34:aa:da:49:89:04:cb:e9:48:ba:f7:
49:a8:6c:f3:2b:62:ac:b4:38:a8:07:87:a1:6e:f7:7a:92:9f:
5a:2e:e7:bc:03:b1:26:32:a5:ce:29:8f:d9:1d:18:81:8c:c1:
ce:3f:1e:9d:ea:f7:5d:1f:ec:54:e4:00:ac:bf:de:10:50:49:
bb:f5:a1:73:2f:6f:b4:43:2a:18:b0:a8:33:7f:7d:b1:f9:cf:
85:93:dd:eb:ca:ee:31:03:1d:45:8c:15:16:00:cd:64:5b:75:
9a:45:7c:0e:7c:c6:ad:f6:e9:75:03:c6:13:46:23:d6:71:c0:
0e:9d:9f:a1:ff:c1:58:ef:c5:0c:89:4b:f9:eb:82:2a:37:dd:
9c:a5:ac:a1:2a:40:77:29:66:a6:5c:de:33:aa:ca:e3:d1:a0:
c6:35:c4:7a:3e:4e:7b:25:dd:49:79:d4:88:46:4a:e2:3a:d7:
76:fd:ec:6f:ac:c7:be:e1:f7:56:bc:c0:9a:dc:ec:55:c9:f8:
98:04:45:44:57:97:e2:a8:d7:aa:c6:ce:75:9b:e8:59:bb:84:
ea:58:58:36:0e:38:10:33:f3:4e:a3:bb:33:0d:84:d6:70:b5:
0f:c7:df:d0
-----BEGIN CERTIFICATE-----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Generated at Mon Jan 29 08:36:10 2024 by rpki-client on console-ams.rpki-client.org