Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uxzJVE9I1VbVu5EIj-f24rr1KJQ.roa
File: uxzJVE9I1VbVu5EIj-f24rr1KJQ.roa (raw, json)
Hash identifier: wSWDwMBKPayLG3PChmkvapTUjyjmDgoILHv4beVg6mM=
Subject key identifier: BB:1C:C9:54:4F:48:D5:56:D5:BB:91:08:8F:E7:F6:E2:BA:F5:28:94
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018DF3519C8374568D02FC563AEB35A2C37D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uxzJVE9I1VbVu5EIj-f24rr1KJQ.roa
Signing time: Thu 29 Feb 2024 05:23:48 +0000
ROA not before: Thu 29 Feb 2024 05:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 19:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:51:9c:83:74:56:8d:02:fc:56:3a:eb:35:a2:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Feb 29 05:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb1cc9544f48d556d5bb91088fe7f6e2baf52894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:b4:77:c9:24:b5:36:26:76:0c:86:b0:73:
12:53:d5:92:d3:16:d3:95:66:18:ab:26:71:04:e0:
e8:8c:df:1c:d0:ad:75:0e:ac:52:7d:e5:77:7e:41:
92:fd:cc:2b:21:2f:7f:52:27:98:36:12:21:5b:c2:
76:7a:2c:97:56:01:a0:51:08:20:49:6d:44:19:ff:
15:2e:7d:b2:97:12:29:81:fe:92:94:fb:b5:9d:58:
b0:2d:45:f1:5f:b8:72:54:82:70:f9:16:a8:63:a6:
86:e3:a6:cf:20:09:27:e7:90:13:0c:9c:9b:31:21:
d9:68:8c:fe:70:6d:69:d8:17:00:21:7f:b1:35:3a:
28:ef:dd:d1:83:f0:11:54:83:7b:48:94:46:1c:64:
c0:e3:d2:45:e7:da:d2:54:29:b8:3f:73:4e:a8:a7:
22:80:aa:59:a3:56:30:f3:5f:2c:4e:d6:51:bd:e9:
22:11:68:4b:63:bd:44:2e:44:9b:12:0e:77:a1:9c:
2a:c1:b3:43:e5:f1:95:72:7a:d1:63:d1:67:99:1d:
9e:71:bd:f5:7f:0f:3c:d2:f1:24:c0:9f:83:16:c7:
2e:bd:88:24:fe:72:30:53:ed:48:29:c8:1a:7f:f5:
d8:5b:29:27:e2:5e:26:e2:f3:24:bd:01:1d:9f:aa:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1C:C9:54:4F:48:D5:56:D5:BB:91:08:8F:E7:F6:E2:BA:F5:28:94
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uxzJVE9I1VbVu5EIj-f24rr1KJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.21.0/24
83.147.40.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
77:71:b5:45:ba:44:48:a3:ef:81:54:00:44:a7:c0:66:2d:ac:
ab:d1:c9:6a:f6:d9:20:a3:2b:20:b8:a7:75:53:71:10:e2:b0:
c5:3b:47:e2:c7:d7:74:f0:3a:3e:23:e7:69:0c:81:07:48:2b:
60:ed:ef:1a:99:51:e4:cf:fa:91:4c:c4:4d:3c:56:cc:89:74:
cc:21:e7:a9:92:f4:99:67:66:06:58:50:eb:b4:9e:58:41:2f:
e8:7a:21:97:74:c4:bc:70:43:b8:3c:fa:3b:9b:21:6d:b6:28:
0b:e9:bf:a1:97:f3:5a:0c:40:49:3d:c3:50:66:81:bf:31:99:
cc:1b:2b:38:a7:a1:43:cb:b6:71:9d:0b:f2:87:79:e4:b7:5f:
52:52:af:7c:14:fd:6d:cd:2d:22:28:d6:0a:44:a9:67:2f:36:
4b:8d:26:84:5a:58:b3:97:d4:8f:a5:4f:f9:12:ed:59:a8:f0:
52:b0:f1:ec:19:d8:13:42:e6:9b:9d:a7:e0:01:98:ad:ad:8d:
3c:05:32:cb:51:27:24:e1:99:ba:8f:16:d6:33:81:fe:29:64:
d4:75:05:7a:5b:1d:d2:a0:03:84:c6:50:01:dd:dc:81:0b:89:
83:5d:1c:00:7f:5e:4f:9f:0a:70:76:76:bf:bb:af:c0:06:c7:
09:b6:55:fe
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY3zUZyDdFaNAvxWOus1osN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQwMjI5MDUyMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjFjYzk1NDRmNDhkNTU2ZDViYjkxMDg4ZmU3ZjZlMmJhZjUyODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhi0d8kktTYmdgyGsHMSU9WS0xbT
lWYYqyZxBODojN8c0K11DqxSfeV3fkGS/cwrIS9/UieYNhIhW8J2eiyXVgGgUQgg
SW1EGf8VLn2ylxIpgf6SlPu1nViwLUXxX7hyVIJw+RaoY6aG46bPIAkn55ATDJyb
MSHZaIz+cG1p2BcAIX+xNToo793Rg/ARVIN7SJRGHGTA49JF59rSVCm4P3NOqKci
gKpZo1Yw818sTtZRvekiEWhLY71ELkSbEg53oZwqwbND5fGVcnrRY9FnmR2ecb31
fw880vEkwJ+DFscuvYgk/nIwU+1IKcgaf/XYWykn4l4m4vMkvQEdn6oxGwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLscyVRPSNVW1buRCI/n9uK69SiUMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvdXh6SlZFOUkxVmJWdTVFSWotZjI0cnIxS0pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCU5MAAwQA
U5MVAwQCU5MoAwQCU5MwMA0GCSqGSIb3DQEBCwUAA4IBAQB3cbVFukRIo++BVABE
p8BmLayr0clq9tkgoysguKd1U3EQ4rDFO0fix9d08Do+I+dpDIEHSCtg7e8amVHk
z/qRTMRNPFbMiXTMIeepkvSZZ2YGWFDrtJ5YQS/oeiGXdMS8cEO4PPo7myFttigL
6b+hl/NaDEBJPcNQZoG/MZnMGys4p6FDy7ZxnQvyh3nkt19SUq98FP1tzS0iKNYK
RKlnLzZLjSaEWlizl9SPpU/5Eu1ZqPBSsPHsGdgTQuabnafgAZitrY08BTLLUSck
4Zm6jxbWM4H+KWTUdQV6Wx3SoAOExlAB3dyBC4mDXRwAf15Pnwpwdna/u6/ABscJ
tlX+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org