Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/yGnnKZjVpyeWVYNmFExtS5g1i1k.roa
File: yGnnKZjVpyeWVYNmFExtS5g1i1k.roa (raw, json)
Hash identifier: CFw5g4WxHFTXoUiVtEZtxHkcSSbbwbMoYccMQVggnNI=
Subject key identifier: C8:69:E7:29:98:D5:A7:27:96:55:83:66:14:4C:6D:4B:98:35:8B:59
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018C827BE387C622A023F16EF2FB14047B2C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/yGnnKZjVpyeWVYNmFExtS5g1i1k.roa
Signing time: Tue 19 Dec 2023 14:30:06 +0000
ROA not before: Tue 19 Dec 2023 14:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.48.0/22 maxlen: 24
83.147.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 04:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:7b:e3:87:c6:22:a0:23:f1:6e:f2:fb:14:04:7b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 19 14:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c869e72998d5a72796558366144c6d4b98358b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:2f:2c:5f:90:62:9f:ca:13:f0:bd:b2:31:
6d:5f:d4:6b:85:eb:79:3c:c1:44:b1:30:15:69:92:
a5:05:c2:8e:26:87:3d:7f:a4:62:e7:8d:14:9d:26:
3e:9c:af:74:01:94:a6:59:96:db:d9:dc:0a:5e:8d:
46:e7:a3:10:02:32:ff:61:67:1f:0f:4b:a5:f6:cb:
05:69:a8:c8:55:32:36:61:0c:4e:09:1f:46:34:57:
71:e5:67:81:7d:de:56:33:29:ab:2f:f1:82:04:20:
42:f7:5d:dc:a3:17:17:49:23:d1:f2:d0:2b:bf:33:
45:b0:ca:b6:55:0c:ac:11:38:35:aa:6a:36:5f:ef:
49:fc:6b:b1:33:ae:89:66:2d:3b:42:4c:fb:6f:73:
9c:6f:05:89:c0:21:07:3d:7e:e5:5d:57:5f:a6:32:
a0:15:1e:c2:03:c0:aa:08:27:e7:e0:74:bf:df:89:
17:6d:9c:cb:9c:60:52:4a:43:09:38:2e:40:14:91:
87:eb:f8:f1:43:e0:5d:89:cd:5c:41:7e:b9:55:7d:
35:17:e4:82:e6:d8:cd:09:47:fe:fd:c6:14:d2:8c:
60:39:09:25:1a:0c:08:42:96:32:20:26:c3:2c:ac:
fa:6a:8a:36:aa:df:ba:28:d9:cf:10:e0:cf:09:3f:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:E7:29:98:D5:A7:27:96:55:83:66:14:4C:6D:4B:98:35:8B:59
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/yGnnKZjVpyeWVYNmFExtS5g1i1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.40.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
15:d6:a4:91:5e:3f:68:61:12:1f:7c:9d:d4:06:5a:07:4a:f5:
e2:eb:a5:0f:74:81:b3:05:f0:36:fb:90:01:d6:f3:43:5a:16:
bb:d1:85:a9:e6:8a:36:03:ec:bb:11:7d:ae:bd:7e:76:4f:eb:
16:31:2a:db:af:e1:52:24:49:5d:46:23:ed:aa:8d:15:3a:a4:
3e:5b:ca:91:16:8b:bf:9e:91:c9:2c:97:41:e6:00:5f:ab:bb:
80:11:ef:25:b4:02:6e:60:df:01:66:44:50:67:20:a8:7b:1e:
6b:11:08:9c:a1:30:b7:f2:3d:90:4a:84:f4:88:17:b7:37:02:
83:85:59:25:3c:b2:ae:54:0e:5e:d9:46:63:92:71:0d:51:03:
e6:01:be:9f:33:f6:b6:f1:23:1f:8a:ba:e0:2e:fe:12:b6:9c:
e4:3a:df:ba:65:bb:07:a2:21:32:62:aa:58:a1:72:36:59:b3:
59:45:2a:e6:1f:05:8b:72:12:00:26:a7:8a:7b:15:07:c7:44:
a1:c6:aa:5a:6a:51:a9:3c:0e:8f:3a:1c:ab:d5:ad:d8:5b:1a:
4e:cf:3f:28:be:f8:36:98:9f:2a:15:af:18:63:8f:49:0d:cc:
03:32:24:6a:4c:93:4c:b9:05:dd:64:44:13:24:a1:ab:9f:24:
f1:98:65:02
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYyCe+OHxiKgI/Fu8vsUBHssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMxMjE5MTQzMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODY5ZTcyOTk4ZDVhNzI3OTY1NTgzNjYxNDRjNmQ0Yjk4MzU4YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcAvLF+QYp/KE/C9sjFtX9Rrhet5
PMFEsTAVaZKlBcKOJoc9f6Ri540UnSY+nK90AZSmWZbb2dwKXo1G56MQAjL/YWcf
D0ul9ssFaajIVTI2YQxOCR9GNFdx5WeBfd5WMymrL/GCBCBC913coxcXSSPR8tAr
vzNFsMq2VQysETg1qmo2X+9J/GuxM66JZi07Qkz7b3OcbwWJwCEHPX7lXVdfpjKg
FR7CA8CqCCfn4HS/34kXbZzLnGBSSkMJOC5AFJGH6/jxQ+Bdic1cQX65VX01F+SC
5tjNCUf+/cYU0oxgOQklGgwIQpYyICbDLKz6aoo2qt+6KNnPEODPCT/6SQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMhp5ymY1acnllWDZhRMbUuYNYtZMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEveUdubktaalZweWVXVllObUZFeHRTNWcxaTFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCU5MAAwQC
U5MoAwQCU5MwMA0GCSqGSIb3DQEBCwUAA4IBAQAV1qSRXj9oYRIffJ3UBloHSvXi
66UPdIGzBfA2+5AB1vNDWha70YWp5oo2A+y7EX2uvX52T+sWMSrbr+FSJEldRiPt
qo0VOqQ+W8qRFou/npHJLJdB5gBfq7uAEe8ltAJuYN8BZkRQZyCoex5rEQicoTC3
8j2QSoT0iBe3NwKDhVklPLKuVA5e2UZjknENUQPmAb6fM/a28SMfirrgLv4Stpzk
Ot+6ZbsHoiEyYqpYoXI2WbNZRSrmHwWLchIAJqeKexUHx0ShxqpaalGpPA6POhyr
1a3YWxpOzz8ovvg2mJ8qFa8YY49JDcwDMiRqTJNMuQXdZEQTJKGrnyTxmGUC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org