Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6HR_aRYmmeRa9fX6XIEw-LU7OgY.roa
File: 6HR_aRYmmeRa9fX6XIEw-LU7OgY.roa (raw, json)
Hash identifier: VR/P7/aJf5WnKafzWqo5hjgNdx6VvVYlDk59wZd06qU=
Subject key identifier: E8:74:7F:69:16:26:99:E4:5A:F5:F5:FA:5C:81:30:F8:B5:3B:3A:06
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01899325FC84A1117B50661A1C79F9E9A919
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6HR_aRYmmeRa9fX6XIEw-LU7OgY.roa
Signing time: Wed 26 Jul 2023 17:01:27 +0000
ROA not before: Wed 26 Jul 2023 17:01:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.22.0/23 maxlen: 24
83.147.223.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:25:fc:84:a1:11:7b:50:66:1a:1c:79:f9:e9:a9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 26 17:01:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8747f69162699e45af5f5fa5c8130f8b53b3a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:c8:e8:eb:df:9e:f3:ef:45:b3:bf:fb:8f:
18:f1:7b:c6:94:b2:ee:b5:b5:ac:88:6a:f5:e6:e3:
88:ba:17:c1:d2:14:f4:5e:1f:36:09:07:33:4b:c3:
4c:e3:54:6f:fe:09:d3:d4:e8:5d:33:6e:94:54:52:
93:b7:7e:0f:9f:c0:ea:84:e1:e3:26:35:63:a9:d6:
7a:41:2f:ee:51:2e:39:3a:ef:b2:65:9d:20:d9:99:
f3:ad:7a:89:b1:d0:13:1b:93:41:5c:59:e7:a9:9f:
05:e9:6d:80:d3:22:d9:9a:e8:5d:26:17:4b:f9:52:
4f:0a:8a:f4:a7:26:4f:68:fb:47:90:37:a4:cf:e5:
fe:a7:85:0e:32:fd:3f:dd:97:85:e6:c2:c4:ca:84:
e1:c3:a3:ec:b8:88:ff:18:73:bc:7b:77:e6:5f:d4:
f7:d0:c3:9c:32:0f:b7:b6:90:9e:fa:8e:1d:67:6a:
f7:2d:06:dc:96:b1:39:09:2e:3e:50:a4:3b:92:ae:
5f:57:4c:3b:b1:42:2f:35:66:09:7e:8b:46:b7:6a:
2e:77:3f:c4:dc:a6:0f:3e:b1:c0:62:5c:6a:83:23:
c8:3f:16:30:0d:40:6d:18:29:bd:70:55:e8:68:4c:
73:ca:2f:27:2a:50:41:fb:a1:63:4c:5f:0b:87:1c:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:7F:69:16:26:99:E4:5A:F5:F5:FA:5C:81:30:F8:B5:3B:3A:06
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6HR_aRYmmeRa9fX6XIEw-LU7OgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
35:f5:cc:bf:7e:25:e7:cb:66:68:cf:91:e9:32:72:f0:b2:d0:
1d:bd:7f:c0:d7:d9:02:a0:1b:4d:d0:4e:ef:62:55:a2:12:2a:
09:8e:f7:b5:67:b0:a3:3f:87:c2:55:14:cd:fa:f6:cd:3d:8c:
01:a0:23:87:59:d1:33:c9:7e:a7:2e:49:75:59:4f:3f:01:17:
09:52:69:38:ee:09:1f:45:2d:1f:6c:76:24:b3:0c:8e:b1:f4:
f0:64:04:26:55:27:8e:b4:5d:a1:a3:78:4e:81:de:f3:2f:8e:
d7:f5:d9:7f:3d:08:c5:d5:13:9f:1e:f2:f9:74:8a:52:41:41:
df:8f:5a:64:d9:aa:5c:c8:6b:27:98:4d:69:ff:23:b8:90:d9:
97:52:46:9e:4e:35:91:8c:b4:48:59:b3:fc:59:e9:24:19:87:
c7:ea:75:1b:66:1b:9a:51:cf:5f:b1:57:f5:82:06:95:7c:ba:
52:0c:39:00:e6:fe:90:e7:cf:fe:29:6c:c7:18:92:d5:80:d2:
8e:7a:37:48:62:bd:1b:58:22:89:f0:f7:a3:54:28:7b:28:76:
b8:93:ac:47:6e:90:11:69:e6:7e:cf:1b:9c:3d:7c:64:cb:9d:
19:c9:00:54:6c:cc:0e:05:d1:23:24:3d:1b:53:12:ef:b7:49:
22:68:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 16:35:09 2023 by rpki-client on console-ams.rpki-client.org