Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-tmNZvFBepFHgd8kbsJTYyrsObU.roa
File: 1-tmNZvFBepFHgd8kbsJTYyrsObU.roa (raw, json)
Hash identifier: GzKgmpfFAp5EKEg3xNgOLnKa4uoYKOwYs+VD3l9fndA=
Subject key identifier: FA:D9:8D:66:F1:41:7A:91:47:81:DF:24:6E:C2:53:63:2A:EC:39:B5
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018D259497AE04BAC9151C339A24E9D1BBE9
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-tmNZvFBepFHgd8kbsJTYyrsObU.roa
Signing time: Sat 20 Jan 2024 06:35:11 +0000
ROA not before: Sat 20 Jan 2024 06:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 83.147.232.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
178.253.26.0/23 maxlen: 24
178.253.26.0/24 maxlen: 24
178.253.27.0/24 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 06:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:25:94:97:ae:04:ba:c9:15:1c:33:9a:24:e9:d1:bb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 20 06:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fad98d66f1417a914781df246ec253632aec39b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:ff:07:1f:c3:3d:06:c5:f2:9f:7c:e8:b8:
33:04:ae:76:14:3d:90:04:59:34:70:9f:41:2b:30:
23:54:23:64:2c:fa:ee:f9:e9:fd:f3:8f:c9:38:a9:
ed:36:6e:c3:e0:32:32:79:99:8d:78:5b:57:ca:03:
c8:91:6f:dd:7e:0e:c3:76:df:d8:f1:49:53:9e:63:
43:ba:5f:da:11:98:34:35:f0:d8:a7:ad:8f:00:22:
46:4f:8e:61:c3:28:4a:5c:5f:bb:af:fb:81:2c:59:
55:bf:c0:d7:c3:0e:8e:4c:4e:dc:d0:40:1f:a1:0b:
b7:86:a8:ee:1c:0b:e8:5e:5b:9e:63:11:35:39:21:
17:dc:01:f8:c3:55:03:71:a0:29:aa:4c:c0:a3:be:
f5:cb:fc:7f:de:30:3a:d5:0c:99:4a:4a:16:fc:fd:
6e:03:c4:d1:5e:2d:54:c6:b3:b9:e2:9c:6e:4a:70:
6b:4f:4f:09:0b:fc:af:13:20:9b:f8:1c:9b:12:fb:
98:2a:ab:fd:a7:c2:b3:ee:04:28:85:6d:6c:23:6c:
fe:00:57:cf:c6:28:41:43:5f:20:bd:e2:9d:c0:43:
07:49:b8:7c:3a:fc:7b:16:5f:63:10:f2:95:ba:67:
15:61:6f:4b:49:b6:6e:1e:1d:1f:4e:e4:81:2d:5a:
02:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:8D:66:F1:41:7A:91:47:81:DF:24:6E:C2:53:63:2A:EC:39:B5
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-tmNZvFBepFHgd8kbsJTYyrsObU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.252.0/22
91.186.216.0/22
178.253.26.0/23
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
57:89:7c:d1:bd:1c:c5:00:28:aa:b5:a0:5a:d3:5a:d5:56:a4:
78:fc:4a:43:37:24:70:fd:e4:e0:72:50:96:38:31:a3:03:be:
c7:18:6a:ac:f3:bf:a9:13:25:30:96:55:7c:7c:19:18:ae:fb:
3c:69:3c:f7:22:dd:9c:38:66:a2:33:d6:73:b9:3a:09:a9:9b:
a3:c2:6a:97:44:31:7f:30:f7:75:a9:bf:31:28:ce:00:95:94:
3c:4b:7b:b2:2c:43:cb:8a:81:30:51:3c:af:e9:63:76:c7:47:
07:76:bb:9c:bb:72:2d:12:d9:c0:58:ad:37:e3:2e:cb:1f:a2:
23:c7:0d:54:97:96:26:13:40:40:0f:79:44:f3:34:05:94:e9:
e0:52:4f:fb:0c:52:2e:29:69:00:2a:1b:bc:4a:81:e1:1b:2f:
d6:17:60:59:74:06:c8:42:1f:0c:49:d3:2a:32:83:8c:08:5d:
cc:62:ab:b5:01:69:e8:9d:75:db:54:46:b5:aa:34:99:44:12:
e7:e3:01:a4:dc:3a:5f:6d:4b:e9:d3:73:78:68:ef:7a:24:eb:
16:37:38:59:41:cd:2e:a9:06:80:b9:65:2e:28:5c:b1:c9:2c:
c8:00:3c:c9:e9:fc:a9:6c:56:d8:48:af:1b:c5:58:0e:49:3b:
0f:7d:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org