Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/846sokNerB8LwTw_d4GJKuwKMK0.roa
File: 846sokNerB8LwTw_d4GJKuwKMK0.roa (raw, json)
Hash identifier: Ujq+jg0uvOzB4iVK7xs8p4VoLZ5hRA6LNbALyY/waTk=
Subject key identifier: F3:8E:AC:A2:43:5E:AC:1F:0B:C1:3C:3F:77:81:89:2A:EC:0A:30:AD
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019254A00F22B1A3CDF7B6CA94F504744A78
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/846sokNerB8LwTw_d4GJKuwKMK0.roa
Signing time: Thu 03 Oct 2024 23:03:48 +0000
ROA not before: Thu 03 Oct 2024 23:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
83.147.248.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 09:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:a0:0f:22:b1:a3:cd:f7:b6:ca:94:f5:04:74:4a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 3 23:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f38eaca2435eac1f0bc13c3f7781892aec0a30ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:6a:de:34:9f:19:ab:45:b1:c3:5e:1f:ae:
f4:58:96:d3:f7:a2:90:47:6b:18:45:d7:7b:83:8b:
f2:2e:a3:15:6e:a8:c1:54:83:bf:70:3e:df:7f:f0:
0c:5a:2a:0a:8f:2b:2a:bd:4c:7c:d3:ff:19:21:43:
50:6d:0a:a0:8e:73:be:5e:a8:a9:70:6b:95:5b:dd:
02:a4:15:97:29:64:99:21:1d:1c:8f:12:72:d7:f0:
45:15:ed:64:22:65:bc:1c:13:3e:c7:dc:2d:3d:00:
07:52:e3:aa:84:fb:b2:68:b0:ed:b9:36:ed:9b:4b:
f6:aa:53:9d:16:0a:66:4c:87:95:c7:12:af:47:0e:
72:fc:97:d6:e7:58:0a:aa:ba:a6:bb:0f:51:b1:6f:
e6:0e:85:12:69:2a:66:41:b8:ed:31:5a:f4:05:af:
9b:b5:bc:6c:41:2f:c2:fc:50:c1:78:c2:5a:96:9c:
28:79:62:4a:ae:7f:1a:5d:40:0a:b1:41:cf:03:2d:
e2:73:8c:1e:f0:8f:be:bf:f1:0f:71:bd:64:73:95:
8d:e2:21:c5:46:64:e2:43:ef:25:92:bc:c5:43:6d:
e4:b8:a7:bd:b6:72:e8:db:d4:f3:b0:26:67:03:ab:
b8:bb:e8:42:ce:14:51:00:55:c6:3f:89:5b:4d:22:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8E:AC:A2:43:5E:AC:1F:0B:C1:3C:3F:77:81:89:2A:EC:0A:30:AD
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/846sokNerB8LwTw_d4GJKuwKMK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0-83.147.251.255
91.186.200.0/21
91.186.216.0/23
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:bc:32:1c:a0:66:8a:9d:fc:5f:6f:e9:4f:51:df:85:82:b9:
18:94:55:34:56:bd:5d:30:cc:d1:f3:1c:a4:60:a8:9c:24:20:
77:10:74:4d:0d:8d:64:c6:4b:c2:ea:5e:0f:8c:22:5d:d6:99:
d9:6e:d0:0f:3f:50:4e:51:09:6f:7e:22:0b:d5:fd:7a:b8:4a:
9f:ae:ec:b9:b7:fd:98:91:93:4a:df:7b:2c:1d:c5:91:7f:7d:
5a:56:4c:1f:23:0f:de:91:46:ba:a1:93:9d:c0:d1:ab:c0:72:
e0:e2:e6:6c:98:39:8b:fa:0f:c6:c2:6e:08:7d:ad:d3:9e:bc:
44:75:92:71:90:51:c8:80:96:6c:79:91:d1:3b:5d:5f:53:8f:
6d:77:9f:f4:d6:09:f5:e2:ee:8e:fd:5e:21:3c:90:a0:a1:30:
b2:9d:5e:7f:68:00:f3:8e:c4:76:6e:24:8a:4f:67:4e:b3:52:
ab:eb:35:53:ee:81:36:80:af:70:d8:a1:b6:cd:52:28:42:bc:
65:ac:95:e0:ef:67:91:95:72:a6:48:16:d6:e9:d2:23:cc:d4:
5f:6c:1b:d8:a1:a8:de:6d:a2:95:22:39:55:a7:50:28:04:fa:
26:9c:37:7e:b2:2d:66:7f:c3:0c:63:7d:8d:2f:cd:93:cc:e4:
10:49:de:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 13:43:46 2024 by rpki-client on console-ams.rpki-client.org