Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uWc9KEZGtxUwZFIZ_-Upx2Em0rE.roa
File: uWc9KEZGtxUwZFIZ_-Upx2Em0rE.roa (raw, json)
Hash identifier: 1SqisT3Hz7yIKrtgG/vEWt/ZQ8yTej+brk+PyVnKCOQ=
Subject key identifier: B9:67:3D:28:46:46:B7:15:30:64:52:19:FF:E5:29:C7:61:26:D2:B1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018B8963B9B506E3B4D181A49E97F04EEEA3
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uWc9KEZGtxUwZFIZ_-Upx2Em0rE.roa
Signing time: Wed 01 Nov 2023 05:38:16 +0000
ROA not before: Wed 01 Nov 2023 05:38:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.0.0/22 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
83.147.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 06:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:63:b9:b5:06:e3:b4:d1:81:a4:9e:97:f0:4e:ee:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 1 05:38:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9673d284646b71530645219ffe529c76126d2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:f4:48:5d:d9:22:d0:dd:e6:76:5f:51:9e:
02:ad:c3:75:21:27:3b:db:f2:80:85:b7:43:53:75:
84:a2:2c:b4:1c:7d:b1:38:e1:2b:3c:0d:af:9e:73:
83:27:7e:93:e0:12:a2:a7:cc:d5:e5:cd:52:ce:94:
df:1b:4e:b6:93:83:ff:18:6d:48:57:b6:53:68:60:
0a:68:1d:fe:72:27:03:26:70:98:61:84:b5:b8:c0:
84:e6:0e:ad:84:95:6a:65:b0:de:5b:d3:0a:47:22:
24:3a:90:3b:64:f0:4b:45:75:9f:29:52:f3:5e:e4:
50:1f:8f:d9:f7:09:aa:44:2d:2c:a5:53:60:c5:c6:
68:e8:d9:53:d2:4d:07:0e:e9:70:b7:8f:d1:ad:3c:
26:cc:fb:97:bb:d2:9e:ea:7a:47:71:7c:5c:cd:6e:
08:9e:ef:6e:f5:5c:72:29:c4:ec:79:b3:c5:52:f4:
19:21:1d:d3:c0:4f:df:83:d1:4c:83:3e:dc:14:20:
79:28:e0:d8:c5:1a:bc:18:90:ca:45:b2:eb:83:23:
9a:48:fc:d4:15:8f:66:0c:80:24:94:58:98:23:3c:
1c:03:cc:26:49:d8:21:29:34:ae:10:e4:18:7b:fb:
1e:10:30:82:18:4d:bf:07:06:7f:9b:03:a1:a7:01:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:67:3D:28:46:46:B7:15:30:64:52:19:FF:E5:29:C7:61:26:D2:B1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uWc9KEZGtxUwZFIZ_-Upx2Em0rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.20.0/23
83.147.23.0/24
83.147.26.0-83.147.31.255
83.147.40.0/21
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:3c:67:2a:0f:99:22:99:d5:70:b6:30:7f:aa:99:4c:f9:4e:
16:00:38:10:72:86:9b:c4:2d:cf:32:34:72:d1:ee:21:71:0c:
a2:77:1e:ef:b7:1c:6d:cb:bf:f2:bf:4e:90:8d:b4:d2:01:12:
58:fc:35:b7:ce:1d:c4:72:b0:40:4d:e7:89:b5:35:20:97:55:
84:bf:f5:93:76:81:c6:62:10:a8:c4:38:26:a0:16:2f:0e:3e:
ba:4d:bb:d7:0a:3a:a4:e3:9f:33:5a:e8:95:bf:61:d8:89:da:
de:5e:91:b6:73:9d:a4:ba:24:fc:7a:43:c9:e3:30:1d:15:0c:
fd:c5:cf:54:5b:6c:11:f3:45:43:ed:e2:69:3f:dc:10:0f:26:
d2:32:a0:8d:fa:d6:03:69:36:fd:48:42:f0:70:00:15:e2:e4:
87:bb:f7:b3:dc:86:29:91:20:df:c3:12:00:dd:19:72:8c:27:
5b:d1:f6:3c:d7:c0:5e:24:cb:ae:12:cd:d3:65:47:b9:6a:fc:
dc:4a:e1:29:08:33:f0:d8:25:02:54:5e:e8:ee:91:76:16:e8:
1b:ba:62:84:cb:e9:e4:1b:a8:77:b8:88:31:58:26:65:8b:b0:
28:56:71:0c:76:28:06:92:86:b5:6e:d8:28:7f:91:54:db:9e:
de:15:8e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org