Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/yE3xrBSnAkE2owUygf2cuMptPiA.roa
File: yE3xrBSnAkE2owUygf2cuMptPiA.roa (raw, json)
Hash identifier: s6yiW0mnO1dx4KnFdteMxn8gXgqB/zrS95CmgVuNR24=
Subject key identifier: C8:4D:F1:AC:14:A7:02:41:36:A3:05:32:81:FD:9C:B8:CA:6D:3E:20
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01856CE63DCE2DF68775565EF770F07D9EEB
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/yE3xrBSnAkE2owUygf2cuMptPiA.roa
Signing time: Sun 01 Jan 2023 10:35:06 +0000
ROA not before: Sun 01 Jan 2023 10:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 83.147.13.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 05:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:3d:ce:2d:f6:87:75:56:5e:f7:70:f0:7d:9e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 10:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c84df1ac14a7024136a3053281fd9cb8ca6d3e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d3:65:3f:61:1c:9b:03:00:65:f0:c8:04:70:
61:17:32:65:2c:ab:86:c3:fd:47:1e:43:06:77:37:
e4:49:9a:e7:b1:ae:ff:9f:38:68:70:25:64:a7:f7:
01:50:3e:41:8f:d4:a2:69:7f:eb:de:a5:7b:8c:9e:
2f:6f:6e:6b:b9:11:f4:07:c2:16:a7:95:c9:6e:4e:
9c:4b:ec:2d:f1:60:82:58:40:ab:a7:73:a1:f0:51:
6e:55:16:9f:73:ab:36:52:26:0e:d1:11:8b:1f:bb:
02:51:cb:84:ea:12:6f:53:5c:c6:b4:10:d1:5a:a2:
ef:00:dd:45:a6:8e:a9:c2:83:55:41:0e:f2:ab:3e:
b0:bb:7c:e5:7f:8f:15:62:19:38:a3:b5:85:a6:fe:
00:09:cf:84:dc:c2:f9:25:72:d7:47:d0:80:23:de:
c0:25:5c:49:d1:33:05:d2:7f:70:38:8f:4a:08:68:
f5:0a:05:85:78:e3:7b:1e:d7:bd:75:5e:ac:08:c7:
d9:e9:6a:f2:90:a7:fa:14:df:8d:1e:bf:96:5e:b5:
0b:f9:e4:76:77:f9:f7:20:f4:37:70:29:92:3b:78:
cb:14:16:dd:a7:ba:37:b9:07:83:b0:0a:be:38:25:
b0:c8:17:86:97:9e:7e:dc:72:42:02:94:6a:97:7b:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:F1:AC:14:A7:02:41:36:A3:05:32:81:FD:9C:B8:CA:6D:3E:20
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/yE3xrBSnAkE2owUygf2cuMptPiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.13.0/24
83.147.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:95:e4:74:06:ff:39:67:2a:05:83:10:5d:85:66:03:b4:50:
fc:9a:7d:12:dd:71:19:f0:6e:0c:ed:80:1b:5c:5d:5a:e1:cb:
ba:1e:1f:13:5c:55:2c:bd:c3:6c:b2:bc:57:b1:e8:2e:a8:b1:
3d:33:a0:f5:08:7a:48:15:93:eb:4d:f8:4b:c8:23:7f:a2:7d:
f4:6c:a2:5b:db:f6:de:94:c3:67:4e:13:61:99:23:b1:f9:58:
64:86:9e:85:ad:0c:fd:80:b5:ae:20:ee:7d:29:73:f4:e9:bb:
fb:c3:bd:d7:ce:ee:5e:bf:29:e1:f2:e3:0e:b5:42:cb:75:5b:
e5:59:a0:f6:32:94:59:c2:77:e2:27:5b:15:23:5c:64:8b:ab:
20:49:06:86:56:aa:c4:3e:34:bd:c1:f0:ba:9c:9d:40:38:71:
de:97:7f:80:1e:2d:f9:93:0c:a8:47:e5:c5:ee:2f:4c:57:b2:
7e:1b:1f:9f:a3:22:8b:a8:30:83:92:c7:5a:44:33:32:2c:ac:
55:3b:79:df:25:23:33:a4:2b:2e:c6:46:44:9a:57:a1:83:eb:
4f:f6:5f:40:72:9c:a3:9a:32:99:0c:51:fa:45:8f:70:79:40:
8c:b4:cd:89:6a:48:ad:c0:6d:03:88:f0:84:e3:6f:fc:44:f8:
ce:fc:2b:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVs5j3OLfaHdVZe93DwfZ7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMwMTAxMTAzNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODRkZjFhYzE0YTcwMjQxMzZhMzA1MzI4MWZkOWNiOGNhNmQzZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNNlP2EcmwMAZfDIBHBhFzJlLKuG
w/1HHkMGdzfkSZrnsa7/nzhocCVkp/cBUD5Bj9SiaX/r3qV7jJ4vb25ruRH0B8IW
p5XJbk6cS+wt8WCCWECrp3Oh8FFuVRafc6s2UiYO0RGLH7sCUcuE6hJvU1zGtBDR
WqLvAN1Fpo6pwoNVQQ7yqz6wu3zlf48VYhk4o7WFpv4ACc+E3ML5JXLXR9CAI97A
JVxJ0TMF0n9wOI9KCGj1CgWFeON7Hte9dV6sCMfZ6WrykKf6FN+NHr+WXrUL+eR2
d/n3IPQ3cCmSO3jLFBbdp7o3uQeDsAq+OCWwyBeGl55+3HJCApRql3sWOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMhN8awUpwJBNqMFMoH9nLjKbT4gMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEveUUzeHJCU25Ba0Uyb3dVeWdmMmN1TXB0UGlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU5MNAwQA
U5MXMA0GCSqGSIb3DQEBCwUAA4IBAQBqleR0Bv85ZyoFgxBdhWYDtFD8mn0S3XEZ
8G4M7YAbXF1a4cu6Hh8TXFUsvcNssrxXseguqLE9M6D1CHpIFZPrTfhLyCN/on30
bKJb2/belMNnThNhmSOx+Vhkhp6FrQz9gLWuIO59KXP06bv7w73Xzu5evynh8uMO
tULLdVvlWaD2MpRZwnfiJ1sVI1xki6sgSQaGVqrEPjS9wfC6nJ1AOHHel3+AHi35
kwyoR+XF7i9MV7J+Gx+foyKLqDCDksdaRDMyLKxVO3nfJSMzpCsuxkZEmlehg+tP
9l9AcpyjmjKZDFH6RY9weUCMtM2JakitwG0DiPCE42/8RPjO/Ct0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org