Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6vAqcIznrJaLw0zyT2eLW7RMPDk.roa
File: 6vAqcIznrJaLw0zyT2eLW7RMPDk.roa (raw, json)
Hash identifier: ibMeh4jBM3WNi3mHQNChuSMBDmpHkyIilqMnyirav5k=
Subject key identifier: EA:F0:2A:70:8C:E7:AC:96:8B:C3:4C:F2:4F:67:8B:5B:B4:4C:3C:39
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01914DB47C481C174B3D6763C1E4F9391ED3
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6vAqcIznrJaLw0zyT2eLW7RMPDk.roa
Signing time: Tue 13 Aug 2024 21:45:59 +0000
ROA not before: Tue 13 Aug 2024 21:45:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.222.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 06:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:b4:7c:48:1c:17:4b:3d:67:63:c1:e4:f9:39:1e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 13 21:45:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaf02a708ce7ac968bc34cf24f678b5bb44c3c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:a3:ba:07:9f:41:ea:68:fd:67:f8:4c:20:
42:1c:7c:6b:97:cd:c1:19:14:81:b4:65:63:3c:92:
6d:d4:1e:ad:ca:2c:2f:51:6b:5b:a7:1d:9b:01:af:
56:a2:2c:18:c0:39:d2:85:8c:2d:11:2a:ac:8e:7b:
a1:07:0d:e3:ed:46:19:4a:1d:17:61:99:86:01:2f:
88:67:12:27:6c:69:14:f9:c0:90:45:a0:15:22:f1:
c0:42:85:94:cf:35:96:0d:fe:ee:89:7e:ff:90:18:
05:6f:29:cf:06:2d:30:38:be:ac:71:a9:e8:a3:73:
61:7f:6b:4b:e0:30:8c:90:09:97:03:f6:4a:e1:53:
97:e3:c2:f0:a2:a5:9b:d7:50:27:0c:c1:c3:3c:ab:
76:6c:8a:f9:44:de:b7:05:d0:c7:d8:4a:e9:b7:8d:
10:03:9e:71:6b:b0:7e:d8:a1:a7:b1:40:ba:ab:48:
4c:33:7f:72:8c:1f:5a:02:77:5b:40:1d:2b:71:d5:
0b:10:37:c3:9c:a2:7f:6d:c7:30:bd:0e:6c:94:28:
69:25:31:ea:b6:27:34:85:52:53:51:36:bc:68:e2:
df:6b:03:03:cb:46:2e:5c:b3:ed:bc:38:5b:69:b8:
9a:6f:59:62:14:5b:50:48:1c:21:7a:20:72:11:2d:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:2A:70:8C:E7:AC:96:8B:C3:4C:F2:4F:67:8B:5B:B4:4C:3C:39
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6vAqcIznrJaLw0zyT2eLW7RMPDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
83.147.244.0/22
91.186.200.0/21
91.186.216.0/23
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:8c:f8:b3:59:46:a4:18:b7:77:76:ad:85:2e:70:f5:14:9e:
38:2a:0e:79:59:fb:6b:b3:79:51:a9:06:a3:4f:c2:7e:31:4f:
1f:3f:2c:43:9a:02:c4:d5:bf:2e:59:0b:0e:60:c7:0c:1c:e0:
19:0e:3d:b9:b6:4e:e7:dd:03:c3:c8:30:ed:ed:95:d3:97:00:
0d:6c:d1:12:7a:11:46:81:1b:96:fb:f5:8b:7a:6a:c2:30:b2:
d8:7a:1e:e2:1c:79:ed:87:9f:0e:c0:4d:b7:29:b0:b8:33:fe:
78:fd:3f:4b:0e:20:21:da:6a:64:07:11:1b:c0:c9:bd:30:0c:
fc:5b:c7:35:87:a0:06:e9:97:53:0a:94:1d:f4:4c:65:f6:85:
de:38:ab:8f:1a:fe:5c:35:96:e7:b6:df:da:e7:c1:8d:87:47:
e6:09:6a:7e:9d:89:c4:ff:a0:f4:0d:d0:41:8f:e4:41:01:a1:
fe:40:e4:8b:f9:50:d8:71:e7:f6:df:91:64:de:27:ce:8a:6b:
25:ee:31:7f:b3:7e:e0:f5:07:c8:db:5d:7f:cd:ee:b8:6c:04:
a5:f5:d2:ea:e9:6a:e0:d9:55:12:fb:d5:5f:8f:28:bd:f4:05:
5b:b7:ce:5a:2e:a3:f0:f5:ad:73:d2:91:be:56:98:3e:a2:89:
4e:e4:37:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 09:29:21 2024 by rpki-client on console-ams.rpki-client.org