Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/75Go6iNWsGp6OFiw0AxGRewpB7s.roa
File: 75Go6iNWsGp6OFiw0AxGRewpB7s.roa (raw, json)
Hash identifier: S8+BttsGMA7twbKmM8CVatL/2cib0dL7/hFwLR8ctTs=
Subject key identifier: EF:91:A8:EA:23:56:B0:6A:7A:38:58:B0:D0:0C:46:45:EC:29:07:BB
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0191AC47F5B5E27B9ADDABDD78EABA245ABB
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/75Go6iNWsGp6OFiw0AxGRewpB7s.roa
Signing time: Sun 01 Sep 2024 06:31:22 +0000
ROA not before: Sun 01 Sep 2024 06:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.222.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.248.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.12.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 22:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ac:47:f5:b5:e2:7b:9a:dd:ab:dd:78:ea:ba:24:5a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 1 06:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef91a8ea2356b06a7a3858b0d00c4645ec2907bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:a8:9a:92:2d:0c:53:9c:ec:47:b3:8c:dd:
e0:8f:9e:b4:94:e7:2c:68:7b:08:4d:07:ae:28:a8:
1a:c2:3b:4a:a5:40:5b:14:b7:66:b6:ae:76:79:81:
b7:4e:60:c3:50:6d:65:43:28:2b:51:8b:64:6f:fe:
ce:17:bc:37:03:17:36:5d:10:55:25:40:fa:bf:12:
d4:82:9c:57:19:57:82:79:bb:d9:af:ed:d4:23:8d:
27:fb:06:ad:56:76:c4:e3:b0:5c:2d:5b:03:3b:c9:
b8:7e:3a:dc:e7:65:7a:4a:2c:ae:52:69:87:b5:83:
be:7b:de:e6:87:4e:61:4d:f0:6d:ca:be:28:5e:86:
51:49:67:cf:ac:4c:cc:00:9a:ab:90:2e:34:0a:77:
70:bf:06:6f:93:0e:77:e5:14:9d:fb:c3:10:ee:d4:
ac:5b:7b:69:ec:07:db:c9:7d:f6:f7:3d:02:74:cf:
71:de:2a:0e:b4:53:46:ca:f5:3c:a1:2d:da:c2:00:
3b:af:34:d5:55:2e:ad:89:7c:0b:20:15:f6:d9:bd:
2c:6f:52:59:fb:ba:ac:a5:33:c2:7a:c1:f1:9b:d3:
60:78:67:1a:53:f7:2f:61:24:f5:bc:fe:87:98:ce:
e7:25:24:eb:5e:94:7e:fd:d7:97:9c:72:b1:5d:11:
b8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:91:A8:EA:23:56:B0:6A:7A:38:58:B0:D0:0C:46:45:EC:29:07:BB
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/75Go6iNWsGp6OFiw0AxGRewpB7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
83.147.244.0-83.147.251.255
91.186.200.0/21
91.186.216.0/23
94.241.168.0/21
178.253.12.0/23
Signature Algorithm: sha256WithRSAEncryption
73:dc:8c:b9:9c:bf:a9:85:eb:68:87:3c:ac:24:33:57:d7:30:
01:58:23:9d:89:b2:7d:74:ff:5b:ad:cb:f9:78:9b:6b:5c:a2:
8d:3c:f4:17:05:9f:e2:3c:e0:50:c4:b6:1b:4b:08:da:60:6d:
bf:45:7c:a0:74:f9:41:b8:fa:b2:a5:89:01:29:6e:b4:ec:c1:
c7:c2:15:c6:12:c0:51:a3:14:ff:a4:cb:04:52:ae:b1:c8:10:
ab:3d:b2:b5:92:cb:46:cb:c1:d6:fe:5a:c4:d3:b1:95:3a:05:
7c:81:ad:47:83:76:74:05:1d:b9:74:28:6c:91:c5:14:aa:fa:
67:fd:d9:8b:ca:98:4d:3c:f4:11:40:8a:c6:4f:78:b7:1b:8a:
ba:cc:5c:89:2c:ff:ba:20:35:50:4e:00:0f:29:38:e2:4a:0b:
f2:f1:d1:1c:d8:5b:66:c2:d3:97:27:35:e1:f6:f0:99:56:aa:
18:a5:19:7a:b0:f9:2f:50:48:0f:8f:0e:21:db:95:d7:8b:79:
07:71:d6:11:c2:cd:dd:f5:a4:cf:44:05:e8:8d:6e:0d:19:70:
0b:fe:40:ee:c6:e7:3b:82:73:7c:78:24:e3:e1:3c:3d:be:92:
2a:d2:d1:bc:81:ca:c0:7b:50:f6:9d:ee:33:4a:01:35:4a:55:
c9:82:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 00:22:52 2024 by rpki-client on console-ams.rpki-client.org