Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-FUuyevR_cOIZJku27hMZxsCiOU.roa
File: 1-FUuyevR_cOIZJku27hMZxsCiOU.roa (raw, json)
Hash identifier: kXKlA69epHPeyTLLAyFaOBWZVimwp3JpklJ0J+2vBfA=
Subject key identifier: F8:55:2E:C9:EB:D1:FD:C3:88:64:99:2E:DB:B8:4C:67:1B:02:88:E5
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A13561AEA14BE9701BC44B9215B92ECEC
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-FUuyevR_cOIZJku27hMZxsCiOU.roa
Signing time: Sun 20 Aug 2023 14:25:24 +0000
ROA not before: Sun 20 Aug 2023 14:25:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.196.0/22 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.22.0/23 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:13:56:1a:ea:14:be:97:01:bc:44:b9:21:5b:92:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 20 14:25:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8552ec9ebd1fdc38864992edbb84c671b0288e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:10:73:54:43:a8:c1:29:d9:e8:ad:ab:74:
b3:cb:51:81:72:0d:6f:06:d2:86:b4:bc:4b:df:9b:
52:24:c3:d2:08:66:0e:52:bb:9b:b5:7b:50:b9:38:
d8:64:d1:0a:2b:ee:99:10:b2:4f:9a:2f:96:f1:4d:
91:ec:e6:90:0a:d8:97:2c:45:65:66:b9:3f:17:3a:
d1:98:c6:82:2c:93:0b:ba:b7:c8:aa:66:8a:cd:13:
6b:a8:c5:46:43:0c:c8:99:6d:46:b1:d2:1e:54:b7:
4e:13:89:91:0f:1c:a6:71:b5:14:63:e8:42:68:f4:
2a:cf:94:05:de:de:a9:0a:79:7e:51:ff:e9:dc:52:
2f:e5:86:a0:fd:a9:bc:b3:87:ae:9a:4f:fe:e0:91:
9c:53:50:12:f5:65:e5:e4:d6:e0:20:1b:b3:dd:40:
88:d9:7b:35:e1:8e:12:d8:56:4e:7f:99:4a:34:25:
67:70:3d:f7:fd:69:38:c6:70:f7:40:45:2d:12:77:
c1:cb:e6:5e:06:28:c5:b2:60:46:c1:36:85:f6:17:
00:8c:79:89:93:cb:a2:e1:ec:9a:f9:4f:1f:ec:2b:
17:c7:53:e1:47:55:3d:88:eb:a3:ca:61:15:55:ea:
87:ec:8d:be:a1:d2:f0:98:14:69:91:5e:1c:7f:4f:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:55:2E:C9:EB:D1:FD:C3:88:64:99:2E:DB:B8:4C:67:1B:02:88:E5
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-FUuyevR_cOIZJku27hMZxsCiOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.196.0/22
91.186.216.0/22
94.241.136.0/21
94.241.168.0/21
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:37:30:68:7d:bf:dc:25:3b:12:d8:5f:04:cc:94:dd:9e:c7:
6d:ea:c1:4c:bb:ae:3a:47:81:81:af:71:22:b9:5d:d8:69:0a:
7b:ad:45:6a:b2:26:6d:eb:d8:51:69:4a:27:6e:9c:4c:f2:31:
c5:55:a4:61:0d:53:8b:ec:15:1a:de:03:7c:92:82:b4:52:73:
a3:5e:8c:d2:3b:e6:46:63:c8:1a:5f:bb:2e:2c:64:48:f5:c8:
52:ee:34:f1:67:93:c4:ea:ab:96:80:cb:39:a3:67:f7:b0:c6:
5b:ac:28:23:5c:da:56:a7:cd:e9:ae:5b:cd:3d:62:74:ea:66:
b7:9f:5d:27:38:89:03:d3:b9:02:67:46:dc:3c:d3:45:8f:a4:
01:a8:6d:51:ae:77:53:bd:f9:0f:31:0b:8a:6e:75:e0:ac:e7:
39:de:f3:b9:4a:fe:af:6d:e1:89:80:f7:47:36:54:80:88:1c:
d5:0b:ed:fd:2b:a9:b5:12:14:a3:98:d4:77:e7:89:86:05:6f:
4e:b8:72:7f:76:83:f2:49:08:8e:6b:d8:fc:04:8a:9d:05:5c:
bb:18:e3:75:25:e9:86:53:4a:1a:e1:3c:ad:33:07:3e:ef:08:
3b:96:a4:56:17:59:ee:3a:4b:7b:cc:44:e7:c0:50:6a:58:9e:
25:19:58:09
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 23 18:17:09 2023 by rpki-client on console-fra.rpki-client.org