Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8T9LP7HlfvEwCH7fGD7qGqh5ix0.roa
File: 8T9LP7HlfvEwCH7fGD7qGqh5ix0.roa (raw, json)
Hash identifier: z0J3VmSXwG5A4pqI3gmU90fgJX4h663gK2yIUCVMRhg=
Subject key identifier: F1:3F:4B:3F:B1:E5:7E:F1:30:08:7E:DF:18:3E:EA:1A:A8:79:8B:1D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01935A227DC1818051696BBB11DE7E31FD0D
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8T9LP7HlfvEwCH7fGD7qGqh5ix0.roa
Signing time: Sat 23 Nov 2024 17:47:10 +0000
ROA not before: Sat 23 Nov 2024 17:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.192.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 12:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:22:7d:c1:81:80:51:69:6b:bb:11:de:7e:31:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 23 17:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f13f4b3fb1e57ef130087edf183eea1aa8798b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:97:4c:8d:1f:94:05:38:14:94:1b:8b:32:
dc:a7:2c:9b:eb:20:2a:f9:42:db:b1:ab:25:b5:f3:
cb:35:89:0d:97:52:a5:6a:b6:d2:e1:94:a4:81:a1:
09:be:a1:6f:e5:af:e0:50:f2:b7:72:08:82:49:dc:
43:24:1d:b4:60:53:aa:0c:9c:e9:0b:74:28:68:76:
5d:09:43:a0:fd:da:07:bf:49:4b:c6:65:dd:fe:95:
c9:12:c7:d7:2f:af:78:4b:f2:88:4e:78:d2:22:bc:
8f:61:1a:e6:98:e0:6d:5e:2f:f9:e2:9b:8b:4e:8b:
89:9a:cc:67:68:c2:78:de:3c:f9:92:e6:b5:49:b1:
89:74:8a:0a:81:a8:cf:d0:fb:00:89:20:67:6a:c2:
87:de:b0:02:2b:47:9a:86:15:9d:3d:a4:4f:a3:af:
67:c6:14:6f:81:1d:32:22:54:53:9f:25:1d:03:65:
c9:a5:72:11:14:db:ce:27:28:7d:29:3d:4b:da:d4:
05:d7:32:48:1a:08:a1:43:83:21:81:5a:38:be:71:
f8:43:62:d8:30:4b:ad:8c:10:6c:32:76:4f:2c:ff:
bd:76:5e:82:ab:1d:d3:cf:02:ca:8b:52:c8:34:2d:
e3:42:a1:7e:3e:31:e0:d2:c2:5f:b8:57:02:48:63:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3F:4B:3F:B1:E5:7E:F1:30:08:7E:DF:18:3E:EA:1A:A8:79:8B:1D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8T9LP7HlfvEwCH7fGD7qGqh5ix0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0/24
83.147.244.0/22
91.186.200.0/21
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
88:b0:ad:24:4d:a4:73:19:d8:1b:bb:9b:c7:f4:51:fe:ce:dd:
59:b0:be:a9:52:3d:dd:b6:48:ae:90:9f:69:55:45:12:06:ce:
52:1f:40:a4:4e:b0:0d:3b:3b:a7:af:82:28:63:b5:23:1c:ed:
61:0d:30:44:89:20:98:8e:38:99:55:f8:3d:0c:b3:c1:29:e0:
d1:38:2e:6e:19:ff:ec:3b:3a:96:6c:fa:32:ae:e2:e4:0b:72:
74:97:3d:ee:50:b2:cd:92:3b:8c:8e:2a:12:26:12:fc:3e:59:
75:43:2b:89:c2:2c:7e:70:14:23:0a:3c:77:43:ca:f2:9a:4a:
d3:86:e7:85:44:19:b4:f9:57:c7:8b:8b:f3:6b:87:16:cb:57:
c7:c3:a4:70:82:42:52:ef:7b:0d:67:69:5f:5e:00:ee:9a:38:
1a:9e:5a:16:10:ca:a2:a5:42:65:c5:53:dd:08:40:eb:d2:45:
5b:e7:11:02:8c:b0:17:10:79:62:68:2d:0d:db:49:0e:b1:b0:
df:a1:cb:f6:98:ad:38:8f:a8:24:ec:70:7f:2a:a4:be:2f:9a:
12:ad:be:dc:18:d4:06:16:8d:51:31:f1:44:56:38:f1:4b:48:
00:ae:10:49:2e:06:22:04:54:8f:bd:a7:b6:a6:1f:24:12:03:
08:8d:b1:1f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZNaIn3BgYBRaWu7Ed5+Mf0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQxMTIzMTc0NzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTNmNGIzZmIxZTU3ZWYxMzAwODdlZGYxODNlZWExYWE4Nzk4YjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP6XTI0flAU4FJQbizLcpyyb6yAq
+ULbsasltfPLNYkNl1KlarbS4ZSkgaEJvqFv5a/gUPK3cgiCSdxDJB20YFOqDJzp
C3QoaHZdCUOg/doHv0lLxmXd/pXJEsfXL694S/KITnjSIryPYRrmmOBtXi/54puL
TouJmsxnaMJ43jz5kua1SbGJdIoKgajP0PsAiSBnasKH3rACK0eahhWdPaRPo69n
xhRvgR0yIlRTnyUdA2XJpXIRFNvOJyh9KT1L2tQF1zJIGgihQ4MhgVo4vnH4Q2LY
MEutjBBsMnZPLP+9dl6Cqx3TzwLKi1LINC3jQqF+PjHg0sJfuFcCSGNRMQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPE/Sz+x5X7xMAh+3xg+6hqoeYsdMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvOFQ5TFA3SGxmdkV3Q0g3ZkdEN3FHcWg1aXgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAU5PAAwQC
U5P0AwQDW7rIAwQDXvGoMA0GCSqGSIb3DQEBCwUAA4IBAQCIsK0kTaRzGdgbu5vH
9FH+zt1ZsL6pUj3dtkiukJ9pVUUSBs5SH0CkTrANOzunr4IoY7UjHO1hDTBEiSCY
jjiZVfg9DLPBKeDROC5uGf/sOzqWbPoyruLkC3J0lz3uULLNkjuMjioSJhL8Pll1
QyuJwix+cBQjCjx3Q8rymkrThueFRBm0+VfHi4vza4cWy1fHw6RwgkJS73sNZ2lf
XgDumjganloWEMqipUJlxVPdCEDr0kVb5xECjLAXEHliaC0N20kOsbDfocv2mK04
j6gk7HB/KqS+L5oSrb7cGNQGFo1RMfFEVjjxS0gArhBJLgYiBFSPvae2ph8kEgMI
jbEf
-----END CERTIFICATE-----
Generated at Sun Nov 24 14:06:42 2024 by rpki-client on console-ams.rpki-client.org