Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1iKi8kMQr53_Gx6aZIalz5TLirY.roa
File: 1iKi8kMQr53_Gx6aZIalz5TLirY.roa (raw, json)
Hash identifier: p1QAXa9ymM61Hz6uF11UIRokWQfj4QG49bor3u2kqus=
Subject key identifier: D6:22:A2:F2:43:10:AF:9D:FF:1B:1E:9A:64:86:A5:CF:94:CB:8A:B6
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A2383930D31EB6723DF30E6FA6F8D65FD
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1iKi8kMQr53_Gx6aZIalz5TLirY.roa
Signing time: Wed 23 Aug 2023 17:48:59 +0000
ROA not before: Wed 23 Aug 2023 17:48:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.196.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.22.0/23 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Aug 2023 07:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:23:83:93:0d:31:eb:67:23:df:30:e6:fa:6f:8d:65:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 23 17:48:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d622a2f24310af9dff1b1e9a6486a5cf94cb8ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:fb:32:07:5b:4a:c3:6b:4f:d6:f2:be:30:
4b:32:79:20:4f:ce:68:f1:4d:cc:f3:49:90:ce:da:
07:29:5a:76:a6:a6:7f:cd:38:7f:ce:d7:00:54:a0:
a5:84:fc:26:4b:59:5c:ec:d3:55:ea:a1:ca:38:b0:
02:1c:1f:d6:3f:42:e7:b7:a0:0b:c6:c7:cb:20:83:
34:52:ec:b3:5b:51:75:84:d3:fa:75:22:fc:e0:9a:
75:b0:ca:68:85:ea:ab:61:68:1a:96:75:5a:65:c1:
ae:ca:5f:f8:1e:85:ca:e1:a6:01:39:48:14:59:14:
8d:66:a1:69:2a:f5:4a:07:f1:76:22:21:6a:5a:97:
17:92:27:cc:6e:66:6c:94:7e:cd:ee:74:d4:60:10:
8c:e6:7b:85:42:4d:10:4a:f3:4a:8f:a4:1e:03:c4:
27:45:d6:c1:15:c7:b9:e1:83:ac:cd:f2:b2:b2:14:
4d:1b:cd:5d:f7:f5:d6:d5:d3:19:4d:7d:0d:af:28:
05:9a:0d:6e:00:c9:76:15:28:5d:0d:d1:c1:f7:40:
6e:65:b3:69:4e:a8:94:75:32:e8:c1:01:40:34:aa:
f2:c2:85:6c:39:ee:fd:06:b1:82:6c:68:ef:ce:91:
75:28:88:57:08:8c:9a:5f:9e:3e:7f:b1:78:01:17:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:A2:F2:43:10:AF:9D:FF:1B:1E:9A:64:86:A5:CF:94:CB:8A:B6
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1iKi8kMQr53_Gx6aZIalz5TLirY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.196.0/22
91.186.216.0/22
94.241.168.0/21
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
64:6b:0e:ee:03:57:67:27:fc:a7:ed:ad:55:52:4a:2c:99:ed:
47:1c:a3:46:35:be:ca:43:22:52:ec:64:51:8f:47:e7:58:45:
24:d8:c3:f9:2f:54:e1:49:43:a9:6b:b0:fb:64:52:bc:ea:f2:
e5:6f:2d:8e:e1:18:fb:27:ac:00:be:ea:d1:b4:64:3d:6a:af:
d8:10:9e:8b:11:48:e8:40:25:b2:ac:c4:a1:c0:df:fe:ee:1c:
3a:f4:70:24:d7:62:b2:77:ad:2d:de:92:84:e0:e8:25:0a:d3:
73:f2:d9:e3:c7:b0:36:53:be:93:55:1b:a4:02:18:09:94:2c:
7e:b1:1c:07:a3:95:5b:b2:1c:77:b3:06:39:7b:79:8a:89:c7:
fa:d9:67:59:25:dc:56:91:80:46:01:8c:4b:77:4e:94:01:80:
c2:0c:45:53:2c:b4:59:c5:09:ef:f8:bd:bf:f5:18:6c:ca:92:
6d:89:6f:e4:7b:ca:65:05:b2:a6:79:14:46:87:d6:47:ca:22:
61:67:95:97:a9:12:87:a3:74:94:47:b8:13:82:d9:55:bc:78:
dc:57:e1:98:06:fb:5f:3b:a7:cd:28:e4:03:88:fa:76:df:01:
20:99:06:96:8d:25:0a:aa:16:51:7f:15:73:6d:57:b0:cc:30:
37:57:9b:5b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYojg5MNMetnI98w5vpvjWX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwODIzMTc0ODU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjIyYTJmMjQzMTBhZjlkZmYxYjFlOWE2NDg2YTVjZjk0Y2I4YWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtn7MgdbSsNrT9byvjBLMnkgT85o
8U3M80mQztoHKVp2pqZ/zTh/ztcAVKClhPwmS1lc7NNV6qHKOLACHB/WP0Lnt6AL
xsfLIIM0UuyzW1F1hNP6dSL84Jp1sMpoheqrYWgalnVaZcGuyl/4HoXK4aYBOUgU
WRSNZqFpKvVKB/F2IiFqWpcXkifMbmZslH7N7nTUYBCM5nuFQk0QSvNKj6QeA8Qn
RdbBFce54YOszfKyshRNG81d9/XW1dMZTX0NrygFmg1uAMl2FShdDdHB90BuZbNp
TqiUdTLowQFANKrywoVsOe79BrGCbGjvzpF1KIhXCIyaX54+f7F4ARfUCwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNYiovJDEK+d/xsemmSGpc+Uy4q2MB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvMWlLaThrTVFyNTNfR3g2YVpJYWx6NVRMaXJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCU5P0AwQC
U5P8AwQCW7rEAwQCW7rYAwQDXvGoAwQBsv0WMA0GCSqGSIb3DQEBCwUAA4IBAQBk
aw7uA1dnJ/yn7a1VUkosme1HHKNGNb7KQyJS7GRRj0fnWEUk2MP5L1ThSUOpa7D7
ZFK86vLlby2O4Rj7J6wAvurRtGQ9aq/YEJ6LEUjoQCWyrMShwN/+7hw69HAk12Ky
d60t3pKE4OglCtNz8tnjx7A2U76TVRukAhgJlCx+sRwHo5Vbshx3swY5e3mKicf6
2WdZJdxWkYBGAYxLd06UAYDCDEVTLLRZxQnv+L2/9RhsypJtiW/ke8plBbKmeRRG
h9ZHyiJhZ5WXqRKHo3SUR7gTgtlVvHjcV+GYBvtfO6fNKOQDiPp23wEgmQaWjSUK
qhZRfxVzbVewzDA3V5tb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org