Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6LHPY0FozTU2hSS3fcY1BEVdLLc.roa
File: 6LHPY0FozTU2hSS3fcY1BEVdLLc.roa (raw, json)
Hash identifier: gMBtT9qTa6J6mDr/F8rBD4z7ZSXnzaH6uJCmP0La24o=
Subject key identifier: E8:B1:CF:63:41:68:CD:35:36:85:24:B7:7D:C6:35:04:45:5D:2C:B7
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01892C15580241FE95FA03CD4ACF2F593CA3
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6LHPY0FozTU2hSS3fcY1BEVdLLc.roa
Signing time: Thu 06 Jul 2023 16:42:23 +0000
ROA not before: Thu 06 Jul 2023 16:42:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202492
IP address blocks: 83.147.196.0/22 maxlen: 22
83.147.195.0/24 maxlen: 24
94.241.188.0/22 maxlen: 22
83.147.200.0/22 maxlen: 22
83.147.204.0/22 maxlen: 22
83.147.208.0/24 maxlen: 24
83.147.210.0/24 maxlen: 24
83.147.211.0/24 maxlen: 24
83.147.209.0/24 maxlen: 24
83.147.218.0/23 maxlen: 23
83.147.220.0/23 maxlen: 23
83.147.224.0/22 maxlen: 22
83.147.228.0/22 maxlen: 22
83.147.236.0/22 maxlen: 22
178.253.0.0/21 maxlen: 21
94.241.144.0/21 maxlen: 21
178.253.14.0/23 maxlen: 23
178.253.17.0/24 maxlen: 24
178.253.18.0/23 maxlen: 23
178.253.20.0/23 maxlen: 23
178.253.24.0/23 maxlen: 23
178.253.28.0/23 maxlen: 24
178.253.30.0/24 maxlen: 24
178.253.36.0/23 maxlen: 23
178.253.34.0/23 maxlen: 23
178.253.46.0/23 maxlen: 23
178.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:15:58:02:41:fe:95:fa:03:cd:4a:cf:2f:59:3c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 6 16:42:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8b1cf634168cd35368524b77dc63504455d2cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:1e:2e:6c:d4:66:4a:3b:25:9a:0c:a4:d6:
ec:03:75:62:5b:29:dc:3f:b2:a5:1d:1b:54:c7:db:
3e:78:89:98:84:cc:b9:cd:ff:d4:0f:82:db:ac:3d:
3a:21:c1:20:59:d5:be:f9:45:34:40:d0:15:a3:59:
62:43:cb:dc:b1:e3:ce:e2:97:66:33:a6:7e:ad:6c:
8d:89:3c:13:6a:99:2e:3b:32:1d:42:ff:e2:c1:27:
36:78:9e:dd:19:bb:8b:b8:f4:05:c5:42:91:49:8b:
39:4b:6d:bc:1d:aa:d4:a6:5e:65:3e:9c:54:0b:b3:
23:f8:05:eb:37:bd:b4:b1:49:1e:6b:11:e1:5c:07:
83:03:f8:ac:8c:85:b0:38:7f:8a:0f:e8:ec:3e:ed:
7c:4b:96:28:05:49:80:9c:8b:9c:c1:5c:e7:83:87:
c9:8b:1d:76:8f:e8:4c:6f:4e:00:34:5f:27:1c:de:
91:a8:71:d7:87:65:99:06:c2:b4:c9:54:8d:9e:b1:
55:64:3c:95:3d:89:48:1f:2d:f8:2a:dd:e9:4b:33:
2a:74:9e:fe:02:1a:3d:39:f4:6b:0c:a9:95:cc:7e:
9b:d8:fa:2c:95:5d:ea:d6:6e:30:24:92:54:dd:11:
de:de:3d:7b:6f:15:46:e9:d3:6c:b2:98:dd:a6:15:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B1:CF:63:41:68:CD:35:36:85:24:B7:7D:C6:35:04:45:5D:2C:B7
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6LHPY0FozTU2hSS3fcY1BEVdLLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.195.0-83.147.211.255
83.147.218.0-83.147.221.255
83.147.224.0/21
83.147.236.0/22
94.241.144.0/21
94.241.188.0/22
178.253.0.0/21
178.253.14.0/23
178.253.17.0-178.253.21.255
178.253.24.0/23
178.253.28.0-178.253.30.255
178.253.34.0-178.253.37.255
178.253.46.0/23
178.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fa:02:b7:d6:10:1e:9e:41:6c:2d:b5:75:44:bb:aa:e3:25:
3a:64:45:d3:03:0b:c2:d5:4a:04:04:b5:6b:82:06:23:f2:f1:
da:a6:ca:d0:22:f2:20:8d:02:30:a9:6a:19:16:c1:58:43:c2:
a6:d3:55:5a:4c:3d:32:b9:b4:8f:b4:87:46:29:c7:4d:f5:ba:
0b:2c:25:c8:37:59:ec:57:8b:bd:e3:91:30:47:22:f1:e8:5a:
2e:2b:30:2f:f6:4a:b7:a0:0f:12:66:20:5f:b6:48:cf:8b:34:
7b:b3:1e:8d:18:b8:40:a1:7d:1d:b2:e3:99:04:19:39:f0:ce:
fe:b5:47:32:8f:d5:ae:76:d3:8e:34:5b:99:71:dd:52:75:45:
ad:20:fc:66:60:b8:42:65:55:bb:9c:ba:64:ce:05:6f:f4:21:
7e:e6:3b:56:4a:a4:30:9b:4b:a7:8e:52:34:cc:ae:21:7f:06:
65:c4:2c:f1:fb:22:c8:ac:76:df:7b:49:e2:e3:97:3d:6f:b0:
51:c4:6f:50:b5:73:34:8b:5e:53:d4:a4:f4:0d:44:f7:12:67:
6f:0c:3a:8e:77:2c:8b:f8:4a:d6:a3:47:53:32:24:93:a8:7e:
02:73:0c:26:30:bd:dd:b0:6a:86:e0:ac:04:ec:e9:8d:f8:1a:
62:75:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:36 2024 by rpki-client on console-ams.rpki-client.org