Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/yKK9XyAYDTb6w49GJMdq0O84EuE.roa
File: yKK9XyAYDTb6w49GJMdq0O84EuE.roa (raw, json)
Hash identifier: 4uI0PBOurlOTVJGV3CdICStEnQVOjG1pMGK73ZxZcqc=
Subject key identifier: C8:A2:BD:5F:20:18:0D:36:FA:C3:8F:46:24:C7:6A:D0:EF:38:12:E1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019125D0C640C6CDEF99CD0863D1C9735B98
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/yKK9XyAYDTb6w49GJMdq0O84EuE.roa
Signing time: Tue 06 Aug 2024 03:52:04 +0000
ROA not before: Tue 06 Aug 2024 03:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 10:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:25:d0:c6:40:c6:cd:ef:99:cd:08:63:d1:c9:73:5b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 6 03:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8a2bd5f20180d36fac38f4624c76ad0ef3812e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:da:57:db:27:cf:1b:88:3f:ab:b9:a5:2a:
80:2b:84:40:76:97:01:89:ec:27:8e:66:98:fb:8d:
5f:e2:e3:99:da:85:81:58:d1:73:0f:9d:8e:36:1a:
c8:4f:86:3f:12:6d:0b:b4:31:de:f6:a2:45:a6:5c:
b5:08:9b:fd:49:3b:23:6e:75:d9:db:9d:a7:89:c8:
84:a4:10:d8:6e:bc:89:88:27:3c:3c:f5:a6:7f:1e:
99:43:ef:0b:db:5c:ea:d8:5a:95:ae:65:5c:c2:7a:
59:53:75:f1:69:c2:2b:92:04:7f:ab:2c:24:b7:77:
4e:2c:d6:b0:79:e5:09:1b:8f:a6:57:15:1d:48:4a:
52:49:7b:f5:51:8c:3c:36:13:4e:68:ef:3c:46:4f:
c7:50:b5:42:11:d1:38:92:a0:9c:e9:3d:1f:af:ce:
48:e8:db:f5:09:6d:d0:5d:14:82:6b:e1:09:91:ec:
08:8b:37:3d:33:a3:af:ce:68:83:f6:5f:b2:40:89:
e4:1f:ed:db:ba:60:f7:1f:88:c8:f2:52:f3:0d:43:
27:33:8a:5e:ad:5e:02:a9:c2:3d:d4:32:58:ba:24:
1f:bb:4c:11:fb:e9:2b:4b:fb:fe:bd:13:3f:a9:35:
16:f4:f5:ad:dd:92:b9:7c:85:cd:cb:b7:f6:a3:82:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A2:BD:5F:20:18:0D:36:FA:C3:8F:46:24:C7:6A:D0:EF:38:12:E1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/yKK9XyAYDTb6w49GJMdq0O84EuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.16.0/22
83.147.21.0/24
83.147.26.0-83.147.28.255
83.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a1:88:11:59:4d:38:27:9e:49:20:1e:07:42:31:cf:a6:b0:
ed:ab:bd:90:7f:b5:ba:01:64:de:61:3d:a1:44:48:c2:fe:73:
2a:a5:e3:fd:0d:60:d6:98:85:8c:8f:40:92:1e:cf:9a:0c:c6:
6f:50:09:c3:ac:70:57:79:12:93:24:24:39:9d:ac:a5:78:2f:
8b:9b:23:a0:d3:79:71:ee:4d:09:af:b2:ea:98:c7:09:f9:e3:
03:e3:16:c3:37:9e:45:c4:17:bb:bd:97:f8:c7:e9:89:57:e6:
95:43:6a:81:d0:3c:42:63:66:96:30:1c:64:74:f9:68:4b:8c:
fe:7c:2c:04:44:22:38:3c:f9:47:be:9a:7c:b4:ba:cd:f8:a3:
bd:f4:ea:ff:26:99:16:7e:c9:d8:c1:49:b9:08:04:99:f5:ca:
4d:05:1e:2a:e6:61:92:2e:24:97:e8:4d:39:6d:3a:86:49:cc:
59:19:62:28:a3:52:ba:d9:7b:25:94:42:4b:c0:39:d8:4d:dd:
11:85:30:98:c9:2d:8c:40:f0:a9:35:6b:f2:7c:77:b2:8f:a5:
cc:de:a6:01:3d:db:1f:ad:92:10:9e:fe:09:6b:8d:53:c0:9b:
52:ad:6c:ec:91:53:1f:a1:5b:e9:2b:d1:f6:06:ef:6b:85:d2:
92:17:3a:50
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZEl0MZAxs3vmc0IY9HJc1uYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQwODA2MDM1MjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGEyYmQ1ZjIwMTgwZDM2ZmFjMzhmNDYyNGM3NmFkMGVmMzgxMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSzaV9snzxuIP6u5pSqAK4RAdpcB
iewnjmaY+41f4uOZ2oWBWNFzD52ONhrIT4Y/Em0LtDHe9qJFply1CJv9STsjbnXZ
252niciEpBDYbryJiCc8PPWmfx6ZQ+8L21zq2FqVrmVcwnpZU3XxacIrkgR/qywk
t3dOLNaweeUJG4+mVxUdSEpSSXv1UYw8NhNOaO88Rk/HULVCEdE4kqCc6T0fr85I
6Nv1CW3QXRSCa+EJkewIizc9M6OvzmiD9l+yQInkH+3bumD3H4jI8lLzDUMnM4pe
rV4CqcI91DJYuiQfu0wR++krS/v+vRM/qTUW9PWt3ZK5fIXNy7f2o4KA5wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFMiivV8gGA02+sOPRiTHatDvOBLhMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEveUtLOVh5QVlEVGI2dzQ5R0pNZHEwTzg0RXVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCU5MAAwQC
U5MQAwQAU5MVMAwDBAFTkxoDBABTkxwDBABTkz4wDQYJKoZIhvcNAQELBQADggEB
AFihiBFZTTgnnkkgHgdCMc+msO2rvZB/tboBZN5hPaFESML+cyql4/0NYNaYhYyP
QJIez5oMxm9QCcOscFd5EpMkJDmdrKV4L4ubI6DTeXHuTQmvsuqYxwn54wPjFsM3
nkXEF7u9l/jH6YlX5pVDaoHQPEJjZpYwHGR0+WhLjP58LAREIjg8+Ue+mny0us34
o7306v8mmRZ+ydjBSbkIBJn1yk0FHirmYZIuJJfoTTltOoZJzFkZYiijUrrZeyWU
QkvAOdhN3RGFMJjJLYxA8Kk1a/J8d7KPpczepgE92x+tkhCe/glrjVPAm1KtbOyR
Ux+hW+kr0fYG72uF0pIXOlA=
-----END CERTIFICATE-----
Generated at Fri Aug 16 15:30:37 2024 by rpki-client on console-ams.rpki-client.org