Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1MSQ7vj21zURNYYCjdtphTyWgsw.roa
File: 1MSQ7vj21zURNYYCjdtphTyWgsw.roa (raw, json)
Hash identifier: +q5iHHM6qKHSLQpkwKEel7/K4VBenpyPe1v6tRJy3mY=
Subject key identifier: D4:C4:90:EE:F8:F6:D7:35:11:35:86:02:8D:DB:69:85:3C:96:82:CC
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01926B7D61ED9101F2CC5EE913537F57BD66
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1MSQ7vj21zURNYYCjdtphTyWgsw.roa
Signing time: Tue 08 Oct 2024 09:37:12 +0000
ROA not before: Tue 08 Oct 2024 09:37:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.248.0/22 maxlen: 24
94.241.164.0/23 maxlen: 23
178.253.12.0/23 maxlen: 24
178.253.16.0/24 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:7d:61:ed:91:01:f2:cc:5e:e9:13:53:7f:57:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 8 09:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c490eef8f6d735113586028ddb69853c9682cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:80:f0:0c:e9:ce:6e:68:b5:50:0b:e1:37:
9e:65:73:4d:9d:7b:3f:f8:e8:4c:6e:ae:c9:53:a6:
ee:db:82:5e:63:11:b4:41:22:f9:79:8a:e1:11:b6:
09:fc:d2:34:ad:bb:32:20:d9:b9:62:98:85:71:43:
4a:78:e2:0b:cd:8f:ce:46:03:69:2b:43:05:8a:eb:
e4:39:18:b6:51:3b:05:ac:94:23:65:0f:8d:96:83:
6b:6a:23:1c:ba:06:5f:e0:90:4b:51:fb:64:af:a7:
b6:db:02:4d:36:d5:a8:a7:07:6a:06:a4:5b:3e:2a:
80:ad:1a:e8:ab:61:4b:5e:29:3f:51:ef:79:d6:74:
a5:68:8c:ea:10:38:d8:a7:ce:c0:fd:fa:ca:17:5a:
14:cb:8b:1b:de:9f:39:3a:9b:cb:81:7a:20:db:61:
22:8a:8c:6b:82:1f:70:1e:9c:88:be:5e:b2:7b:b5:
03:1c:37:29:a6:b1:90:b7:46:d6:c3:a8:55:f2:06:
76:41:f9:2d:c3:c0:36:60:10:23:5d:36:43:e6:12:
b8:72:13:6f:1d:5c:44:6a:e8:2a:aa:83:98:4a:68:
7f:df:9a:a8:be:a1:9a:80:db:ff:9d:15:65:f0:98:
cf:92:66:11:c0:27:0d:8a:09:43:67:ee:9c:45:c8:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C4:90:EE:F8:F6:D7:35:11:35:86:02:8D:DB:69:85:3C:96:82:CC
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1MSQ7vj21zURNYYCjdtphTyWgsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
94.241.164.0/23
178.253.12.0/23
178.253.16.0/24
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:3f:4b:d7:3b:8b:8d:a4:1e:f7:81:8c:97:14:2f:be:1f:48:
5f:6f:f6:dc:20:83:dc:4b:25:13:a7:d6:70:78:ce:4e:70:13:
5f:40:a5:67:ac:7f:e1:42:1d:e1:03:d1:cf:2f:96:8f:4a:1b:
fb:73:bd:6d:72:51:ac:e7:8d:f3:db:07:0c:d9:63:5e:04:b7:
04:bc:c6:0e:3e:ff:6d:78:76:c7:53:64:08:73:02:ef:b9:87:
6c:d9:ea:31:c0:00:7f:3b:92:49:15:98:76:5f:0e:3e:50:4a:
ad:bd:c9:4f:45:b7:a5:33:2f:7b:4e:6b:07:3f:37:b8:92:7f:
c9:57:95:68:b5:b1:26:24:2e:a6:0b:6d:2a:3c:83:3c:59:fa:
6a:f5:fa:c2:da:e3:d4:46:44:b4:89:10:98:56:db:b5:5b:7b:
81:4b:2a:e7:b7:77:99:e4:d3:2a:79:a9:45:55:2d:b3:d6:87:
d2:8f:9f:7a:8a:5b:7a:85:7c:e9:aa:4d:e1:0c:7c:25:59:a9:
df:a5:e7:7c:d0:a7:32:e8:55:cf:fe:65:4d:32:4b:39:5a:f0:
cb:dc:ac:bf:06:2b:4d:91:a4:d8:bd:57:85:01:32:99:77:13:
89:b1:d2:d1:0a:a2:15:78:16:e0:c2:fb:e8:b8:93:da:1e:4a:
6f:0d:7b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 17:14:56 2024 by rpki-client on console-fra.rpki-client.org