Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8FY3Qjj8r9qvqcsO7BkYnCJze-s.roa
File: 8FY3Qjj8r9qvqcsO7BkYnCJze-s.roa (raw, json)
Hash identifier: OuzTaDjj/0vyi/h7ZZcWUVWtZXWWTDCnbshg/DP15yQ=
Subject key identifier: F0:56:37:42:38:FC:AF:DA:AF:A9:CB:0E:EC:19:18:9C:22:73:7B:EB
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CDB68CA97DF5DB776A27878AE98ED
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8FY3Qjj8r9qvqcsO7BkYnCJze-s.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16200
IP address blocks: 91.186.192.0/24 maxlen: 24
83.147.192.0/24 maxlen: 24
83.147.193.0/24 maxlen: 24
83.147.194.0/24 maxlen: 24
83.147.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jan 2023 20:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:db:68:ca:97:df:5d:b7:76:a2:78:78:ae:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f056374238fcafdaafa9cb0eec19189c22737beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:6a:2b:7c:17:77:71:80:48:8b:f0:4c:74:
a2:83:d1:6e:05:db:fd:4d:2b:bb:fe:96:bb:08:42:
01:3b:be:72:d0:5d:b6:66:39:65:3c:09:c4:6e:c9:
77:aa:7a:33:27:72:2c:22:b9:a6:bc:44:12:da:dd:
49:f7:e9:6a:fc:af:c1:01:fb:e2:17:1b:ba:38:99:
4e:18:55:d6:6a:66:55:d1:2d:12:cf:ef:74:60:f0:
bb:b4:0d:2a:a2:7e:15:c4:cf:4c:39:0c:02:7e:83:
82:e6:3b:6d:27:76:31:87:7d:f6:c6:be:70:0a:df:
07:2a:6c:a6:e7:12:91:b9:1d:50:3b:9b:f2:33:2e:
71:8f:8f:af:a6:a2:68:4b:c6:35:b9:de:98:f2:96:
9e:01:1c:c4:56:d4:d0:8c:05:90:30:23:59:8f:9e:
fa:21:16:4f:d4:30:af:01:62:b3:d1:65:85:eb:db:
9c:bc:d3:2d:49:fc:08:f0:8b:9a:14:8c:a6:58:f4:
8c:50:2d:ca:1a:01:74:c7:3e:78:fb:f3:54:ca:03:
6a:04:de:a7:ef:6d:f7:3a:56:c3:00:33:eb:62:bb:
96:d3:ad:7d:37:d3:3d:f9:b1:9c:78:7c:01:c6:d2:
a5:98:8b:5b:ed:75:d0:56:3a:4c:ae:03:bc:e2:e2:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:56:37:42:38:FC:AF:DA:AF:A9:CB:0E:EC:19:18:9C:22:73:7B:EB
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8FY3Qjj8r9qvqcsO7BkYnCJze-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0-83.147.194.255
83.147.217.0/24
91.186.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:fb:7d:b1:c8:fc:e4:ce:c0:cb:ce:f7:98:17:58:df:d6:a7:
d9:a7:46:bc:39:61:ce:24:23:d6:4f:ee:54:39:62:c6:41:bd:
47:6f:22:87:0f:12:fb:43:98:bb:01:06:f3:c0:b1:26:6d:29:
5a:be:a0:18:5b:35:6e:88:f4:e5:0d:7f:f0:60:e2:b1:20:0c:
81:07:8e:83:01:ef:87:93:3c:9d:66:65:6f:5a:47:fa:16:b5:
85:1e:7c:ef:26:bf:b9:4e:f9:ed:b6:e2:b8:44:cf:85:49:45:
79:61:d1:c2:46:7a:c2:be:1f:07:45:80:e0:97:df:a0:02:aa:
7b:32:e4:f3:8a:a8:fe:01:27:fe:34:6d:ad:db:97:8d:f6:d1:
e0:1e:74:60:4d:22:26:0f:e9:01:4e:4e:3d:fc:f2:68:2b:70:
8b:98:35:34:3b:13:69:1c:8d:a7:15:d1:e6:8b:c2:aa:ae:04:
80:c5:fd:ce:69:ab:40:bb:71:e9:b0:fd:76:c1:b4:a0:ac:47:
1b:f7:77:91:b8:7a:76:9a:d2:20:04:59:79:d4:93:51:d9:b0:
5e:52:87:5c:e4:62:02:fb:f3:36:d8:a7:58:a6:c1:6e:6c:76:
12:a2:a7:49:4a:fe:14:86:23:d9:5d:34:00:8f:3a:df:f0:bd:
63:4e:cb:bd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVwjNtoypffXbd2onh4rpjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwMTAyMDMzNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDU2Mzc0MjM4ZmNhZmRhYWZhOWNiMGVlYzE5MTg5YzIyNzM3YmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAZqK3wXd3GASIvwTHSig9FuBdv9
TSu7/pa7CEIBO75y0F22ZjllPAnEbsl3qnozJ3IsIrmmvEQS2t1J9+lq/K/BAfvi
Fxu6OJlOGFXWamZV0S0Sz+90YPC7tA0qon4VxM9MOQwCfoOC5jttJ3Yxh332xr5w
Ct8HKmym5xKRuR1QO5vyMy5xj4+vpqJoS8Y1ud6Y8paeARzEVtTQjAWQMCNZj576
IRZP1DCvAWKz0WWF69ucvNMtSfwI8IuaFIymWPSMUC3KGgF0xz54+/NUygNqBN6n
7233OlbDADPrYruW0619N9M9+bGceHwBxtKlmItb7XXQVjpMrgO84uKyHQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFPBWN0I4/K/ar6nLDuwZGJwic3vrMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvOEZZM1FqajhyOXF2cWNzTzdCa1luQ0p6ZS1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAZTk8AD
BABTk8IDBABTk9kDBABbusAwDQYJKoZIhvcNAQELBQADggEBAEz7fbHI/OTOwMvO
95gXWN/Wp9mnRrw5Yc4kI9ZP7lQ5YsZBvUdvIocPEvtDmLsBBvPAsSZtKVq+oBhb
NW6I9OUNf/Bg4rEgDIEHjoMB74eTPJ1mZW9aR/oWtYUefO8mv7lO+e224rhEz4VJ
RXlh0cJGesK+HwdFgOCX36ACqnsy5POKqP4BJ/40ba3bl4320eAedGBNIiYP6QFO
Tj388mgrcIuYNTQ7E2kcjacV0eaLwqquBIDF/c5pq0C7cemw/XbBtKCsRxv3d5G4
enaa0iAEWXnUk1HZsF5Sh1zkYgL78zbYp1imwW5sdhKip0lK/hSGI9ldNACPOt/w
vWNOy70=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org