Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7LKN1Xbd9QQl_qa7DZM3iOJlOTg.roa
File: 7LKN1Xbd9QQl_qa7DZM3iOJlOTg.roa (raw, json)
Hash identifier: hfJLAiQQarVd2nDP0lmMMBLnK0zHzNPevt5gF/D49Nk=
Subject key identifier: EC:B2:8D:D5:76:DD:F5:04:25:FE:A6:BB:0D:93:37:88:E2:65:39:38
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0192C85F88DB23CF7B4753D890F73D59468E
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7LKN1Xbd9QQl_qa7DZM3iOJlOTg.roa
Signing time: Sat 26 Oct 2024 10:29:16 +0000
ROA not before: Sat 26 Oct 2024 10:29:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 17:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:5f:88:db:23:cf:7b:47:53:d8:90:f7:3d:59:46:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 26 10:29:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecb28dd576ddf50425fea6bb0d933788e2653938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:03:c1:33:16:a7:88:b1:96:eb:3b:16:6d:
8b:27:6d:9d:35:43:3b:66:cb:f7:df:cb:b4:4c:85:
fe:75:04:a9:ed:9e:c6:56:0a:ed:18:11:00:2e:cc:
3a:4a:4d:ef:95:b0:b7:f6:d5:ae:6d:ed:e4:56:48:
ff:d7:29:64:ec:42:e3:6d:60:f2:ed:84:4b:3e:08:
22:6b:5c:06:ae:09:f3:51:e1:e1:30:35:e5:4e:31:
c4:95:ac:a8:1b:ec:96:59:39:46:af:cf:87:e1:e1:
d9:b0:a0:4f:d2:36:20:79:c7:0f:dc:10:7e:65:56:
74:c3:72:c5:22:4c:ba:bf:45:ca:f6:f9:17:55:48:
1b:cb:c9:5e:28:2e:dd:64:67:65:56:b8:61:9d:c5:
8d:ed:4e:90:10:2c:bd:65:1b:cb:85:1b:ab:63:12:
9c:3f:6b:5c:c3:88:03:d2:fb:9c:76:bc:e1:81:e4:
55:e2:69:0a:e5:42:d3:17:e9:ef:20:35:88:3b:f5:
c8:5f:12:3e:7d:27:0d:61:f4:bc:94:35:28:e6:aa:
5b:83:7c:e7:25:1b:ab:66:ea:42:36:47:18:d9:69:
06:2a:4a:db:ad:25:91:ca:b1:b3:32:16:b8:94:b6:
b9:6b:cd:eb:12:fb:e3:5d:9b:de:88:a9:83:a8:d1:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B2:8D:D5:76:DD:F5:04:25:FE:A6:BB:0D:93:37:88:E2:65:39:38
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7LKN1Xbd9QQl_qa7DZM3iOJlOTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.200.0/21
91.186.216.0/23
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
34:dc:84:be:8c:33:ea:b0:e4:d0:91:39:37:06:a0:92:e7:c5:
c7:18:76:c6:48:9b:ef:2f:0f:57:fd:6f:c0:5b:0f:d3:22:35:
e2:9b:2c:46:76:b4:2b:97:d0:aa:37:89:10:1f:c1:d7:59:c2:
2c:b4:8f:1d:93:3b:c5:52:d3:05:c6:67:e7:33:17:d0:c3:24:
d6:a6:bb:79:38:92:3b:be:6a:f1:a7:70:87:ef:f7:02:b8:eb:
62:30:9d:2b:d9:7f:67:08:ab:bb:40:68:f0:d2:79:4a:41:a7:
07:55:f2:f7:9c:89:f2:45:ea:e6:c8:d9:ab:79:d9:1f:b4:03:
b5:91:f1:b0:d1:de:46:02:35:da:1a:8e:c9:fc:ae:ce:61:ae:
20:eb:78:7e:8c:d1:fd:91:6c:52:67:a9:0c:64:d7:17:b3:27:
83:e3:8a:70:92:43:bb:97:03:40:ea:6c:c5:5f:4e:ba:33:76:
53:c4:2b:cc:f3:65:43:a5:b6:5c:b3:73:b9:8d:fd:02:68:42:
72:e2:d2:2a:6f:a1:d5:34:16:36:eb:31:3e:60:86:cc:86:ac:
7b:e8:05:d1:36:5c:51:83:6e:85:bb:36:86:57:e1:a9:2c:7b:
35:82:51:cd:a9:a7:fb:8b:70:be:b9:81:68:ce:f5:8d:c7:a8:
21:31:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:43:13 2024 by rpki-client on console-fra.rpki-client.org