Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7pv-fPPQ4gZFsIruqUqfeHRKlJM.roa
File: 7pv-fPPQ4gZFsIruqUqfeHRKlJM.roa (raw, json)
Hash identifier: jrp9jH2cHHNkO1pkL6m2rxezmGqM8oYere8vwp39zr0=
Subject key identifier: EE:9B:FE:7C:F3:D0:E2:06:45:B0:8A:EE:A9:4A:9F:78:74:4A:94:93
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01880C638786B95303065E9EEEC3B95E7A12
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7pv-fPPQ4gZFsIruqUqfeHRKlJM.roa
Signing time: Thu 11 May 2023 19:57:09 +0000
ROA not before: Thu 11 May 2023 19:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.194.0/23 maxlen: 24
91.186.216.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:63:87:86:b9:53:03:06:5e:9e:ee:c3:b9:5e:7a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 11 19:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee9bfe7cf3d0e20645b08aeea94a9f78744a9493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:2a:1e:74:a8:b6:14:e1:18:33:fc:e9:da:
fd:f0:18:9e:63:87:1b:58:f9:63:e2:31:ea:a4:d1:
4a:56:b0:f7:db:47:d0:16:6a:16:4f:ab:cc:36:91:
fe:99:6c:0f:97:ac:89:46:3e:14:bc:28:1e:b7:09:
cb:07:a2:c1:07:a8:16:5f:c7:c3:a5:78:64:fb:ed:
1a:20:7e:45:b7:45:1d:19:d0:75:fa:89:b6:eb:6a:
d6:cc:e7:1d:f7:2b:fa:bb:eb:1e:f1:a3:bf:44:b1:
cf:d4:c0:45:92:52:3c:f2:87:94:26:fb:77:54:72:
5d:53:ab:64:b4:00:4f:3d:92:21:15:99:df:20:16:
44:17:4b:4d:1e:7d:9a:b3:0f:dc:06:9a:f8:58:2f:
5b:ea:d3:cb:22:f7:12:ae:e8:75:02:61:03:a6:8f:
62:b0:7c:be:84:e0:08:df:14:df:3b:9c:af:b3:18:
ba:35:63:47:66:cb:5b:4e:21:b4:80:40:30:07:df:
f9:61:b1:67:c2:f4:17:3a:dc:75:3d:a0:75:a3:85:
83:8f:cc:65:17:53:67:ff:da:e8:c3:1c:2f:4b:f3:
d3:85:22:89:ab:2e:60:5e:23:f2:ce:f6:69:44:eb:
6c:db:37:f9:9a:68:29:fb:dc:b9:f9:c9:83:4a:78:
cc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:FE:7C:F3:D0:E2:06:45:B0:8A:EE:A9:4A:9F:78:74:4A:94:93
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7pv-fPPQ4gZFsIruqUqfeHRKlJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.194.0/23
91.186.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:23:bb:8f:97:e2:f7:c0:4d:95:e0:79:c9:e1:f9:8e:32:8d:
76:10:3b:6c:e7:92:7f:63:f0:87:86:db:00:bb:06:1e:b1:8a:
74:f5:26:bb:5a:d3:e1:e4:11:34:64:ed:d2:d1:34:42:3f:ce:
44:dc:dd:cf:26:ba:a3:37:60:92:2d:db:d2:22:7d:4f:ae:f3:
28:45:08:1d:53:0a:d4:2a:22:8b:5e:e4:6d:99:ff:91:4c:65:
65:99:ca:b7:ea:84:ae:2f:02:4f:2c:de:19:a6:3a:12:c5:6e:
80:8a:23:35:43:d1:2b:f2:6d:ee:89:e4:25:87:8e:4f:57:c7:
e0:1b:82:78:a0:b2:bd:ef:50:7d:46:7f:8f:16:56:fe:12:8f:
c1:76:75:ef:bc:5f:f0:24:81:c3:a2:2b:19:a8:10:09:5b:b7:
37:26:1f:37:ef:a2:c6:f6:6c:57:99:0a:1c:90:70:34:28:36:
8a:57:9e:bc:f8:53:d2:2f:03:3e:83:74:f1:8f:03:54:1f:35:
1e:1f:9b:f1:95:db:c4:67:4e:56:2e:5c:05:24:82:ec:e8:a6:
91:6e:8c:ec:96:92:0d:b5:8d:2a:dd:06:7d:51:77:e0:6a:4d:
a8:04:26:e0:75:b5:18:09:12:00:27:ae:af:95:1c:8b:76:47:
a2:38:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org