Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/56o92ZAik3tRMIiisrEmoWddRdY.roa
File: 56o92ZAik3tRMIiisrEmoWddRdY.roa (raw, json)
Hash identifier: oW9SARpw4bv6lQlFJEgQi8BYAD9m9foEUp30QXctBMY=
Subject key identifier: E7:AA:3D:D9:90:22:93:7B:51:30:88:A2:B2:B1:26:A1:67:5D:45:D6
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A38C12FF2FA8629E89AAD6658E9DB15E7
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/56o92ZAik3tRMIiisrEmoWddRdY.roa
Signing time: Sun 27 Aug 2023 20:48:19 +0000
ROA not before: Sun 27 Aug 2023 20:48:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 19:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:38:c1:2f:f2:fa:86:29:e8:9a:ad:66:58:e9:db:15:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 27 20:48:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7aa3dd99022937b513088a2b2b126a1675d45d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:87:c2:09:4f:fa:8e:9d:41:eb:d1:fb:16:
2a:65:6a:0f:6c:e3:bf:20:e0:2c:d7:af:9d:57:2f:
c4:4a:1a:12:35:e1:59:f9:b1:7f:ce:3a:33:e0:49:
60:5d:89:09:f7:d7:41:75:ed:7a:a6:17:31:7c:15:
39:96:d5:e5:d6:bd:9e:90:18:4c:42:64:67:9a:99:
2a:f6:da:c7:ad:a3:c8:93:78:a4:d3:fd:b9:3a:c4:
1c:29:ad:4a:f8:9b:5b:e1:45:9e:6c:f9:6a:60:07:
3c:36:7c:a6:23:c6:32:79:e4:b6:7e:b3:80:d0:57:
cf:1b:27:fd:61:6b:b6:d5:70:06:3b:c0:66:84:d1:
4f:23:72:b5:bf:72:00:34:47:6e:0f:85:c1:7a:87:
c1:66:c7:71:07:85:8c:89:95:c1:c4:c6:d0:f5:64:
d9:6d:c3:23:e3:93:8d:2e:10:88:a5:b0:80:ed:b7:
aa:08:88:64:eb:9c:16:f8:d6:7d:e1:0a:2b:c5:24:
e2:5d:94:7c:d1:e8:82:f1:b9:71:7f:1a:5d:90:3f:
6c:43:68:b6:ed:ba:47:18:58:ab:96:5f:bf:0c:12:
d7:1e:07:7d:e8:a3:74:26:92:d7:dd:94:a4:06:3c:
38:e7:ac:fe:c2:7c:c4:89:b1:48:f4:9a:02:f9:0c:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AA:3D:D9:90:22:93:7B:51:30:88:A2:B2:B1:26:A1:67:5D:45:D6
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/56o92ZAik3tRMIiisrEmoWddRdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
92:8c:33:29:21:b9:2d:23:f4:49:22:5d:2f:ae:10:2b:e3:76:
c0:b9:b5:e5:82:a4:61:2b:c1:a6:33:78:51:60:ab:1b:ac:0f:
a9:ed:75:c5:ad:3c:d6:9c:a4:c0:7e:ce:7f:65:d0:9b:aa:56:
38:a2:4a:36:2b:1b:4a:f9:2c:87:4e:fb:9f:9a:73:cd:27:8c:
eb:9c:76:ca:26:95:7c:31:b2:b6:59:10:e8:e4:14:71:73:b6:
a7:c6:4b:e3:2a:e9:40:4d:50:61:09:97:00:46:9e:ac:36:14:
50:d5:e4:fe:ba:4b:12:5c:12:c3:38:e0:b0:b1:0a:70:15:07:
1f:5d:2b:3c:ee:39:0e:b3:8d:ec:20:de:80:39:f4:ab:91:5c:
ec:8a:65:06:da:12:48:51:5b:e8:1a:d6:78:ff:9e:18:c1:45:
52:07:d0:cc:0c:1c:ef:59:d5:96:64:b4:b1:1d:d1:e5:39:ac:
d2:35:e8:3b:73:76:53:3c:1e:72:a8:a0:ba:35:4a:c6:6e:30:
1a:25:4d:8e:47:4c:6b:42:22:82:61:73:a7:3b:b9:56:21:4a:
63:bc:40:0f:3f:38:3a:86:51:b9:d1:c5:b1:f9:17:a0:08:d8:
fb:63:92:14:e8:2e:13:49:f9:8e:6a:15:24:0f:ab:40:ca:91:
e8:68:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org