Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8fUtcSUJQsdVzoo2HF13rgGRgk8.roa
File: 8fUtcSUJQsdVzoo2HF13rgGRgk8.roa (raw, json)
Hash identifier: 7j5IfheWXoImjTtiIvHQAJWxJZ8T8Mzo5XdkYCsHp94=
Subject key identifier: F1:F5:2D:71:25:09:42:C7:55:CE:8A:36:1C:5D:77:AE:01:91:82:4F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CF72315D1D6E860124F69DDDF78AA0DD9
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8fUtcSUJQsdVzoo2HF13rgGRgk8.roa
Signing time: Thu 11 Jan 2024 06:08:40 +0000
ROA not before: Thu 11 Jan 2024 06:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.186.200.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 02:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:23:15:d1:d6:e8:60:12:4f:69:dd:df:78:aa:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 11 06:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1f52d71250942c755ce8a361c5d77ae0191824f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:07:3d:6a:8b:1a:0e:42:b3:c1:f0:ba:4b:
6a:e6:67:46:47:e6:98:72:73:98:bf:7e:42:ea:a2:
08:d7:eb:16:33:33:1c:1a:2c:4c:d6:99:e8:6e:1c:
b3:21:27:7d:46:6e:47:bb:53:61:be:3e:35:65:4c:
93:be:06:f1:03:ee:eb:06:bf:39:e8:50:b4:38:44:
6c:8f:b7:09:c0:6f:be:19:a6:72:56:5c:44:38:84:
f3:04:dc:07:68:6a:d5:3a:1b:a1:55:6b:f3:7b:ea:
60:ad:09:11:2b:3a:22:85:28:b0:5e:c6:98:0e:14:
fb:bb:58:94:cb:d3:5b:53:fa:9d:4f:1b:b3:5a:e0:
28:30:d2:3c:f8:58:c9:83:52:9a:32:e8:66:a6:0b:
72:a3:c2:f9:ef:f3:4e:01:f4:c0:5b:b5:75:f9:ca:
ad:1e:9e:91:cb:5a:61:49:00:73:07:16:f9:ad:46:
f8:37:bd:44:56:aa:c5:d8:da:f1:ec:7e:1b:eb:c6:
04:8b:13:d1:68:73:72:77:6d:3d:53:2b:c2:d2:56:
b7:be:bb:ac:05:ae:ef:63:fc:cd:38:5c:ba:e9:29:
ad:58:65:28:88:6c:2e:bb:45:82:e1:e5:0e:87:80:
15:77:e2:0d:ee:e9:80:bc:bf:ca:80:c3:a5:08:23:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F5:2D:71:25:09:42:C7:55:CE:8A:36:1C:5D:77:AE:01:91:82:4F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8fUtcSUJQsdVzoo2HF13rgGRgk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.200.0/22
91.186.216.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:44:dd:6a:7e:63:6b:27:35:05:e6:54:68:1e:3f:9e:a8:14:
b7:20:79:32:1f:fa:83:ae:74:df:c5:60:b1:ac:92:1d:03:4f:
f3:1c:5c:79:ef:d8:1a:f2:db:36:94:0e:81:bc:f0:6b:b3:ad:
d5:17:d5:d8:1b:24:00:b4:ea:5f:78:ef:bf:f6:ba:e5:b8:55:
e8:78:a2:d7:40:2c:76:2f:c7:ed:20:39:75:6b:ba:70:af:e8:
c0:5d:a3:16:fb:22:b2:b3:7f:c1:2c:b6:b8:e6:58:10:35:86:
3e:0a:17:38:b0:0e:ad:6a:ad:89:7c:9b:89:61:03:00:b3:8b:
e5:33:1e:41:6f:dc:95:1a:18:44:f8:01:6f:b5:55:50:72:7d:
5f:30:8a:c9:76:e0:75:09:67:cb:54:9a:5a:0d:34:c2:c8:2c:
33:0a:f3:61:b2:70:c6:51:b5:17:89:9f:d6:76:88:b9:09:7e:
01:6a:57:be:fc:83:45:10:a6:2a:ee:e5:f6:f9:8d:54:8b:2f:
37:14:6d:75:55:95:81:cc:76:a9:08:54:0b:25:cc:28:fa:2c:
0b:ee:f1:9e:be:96:63:90:c5:e8:b1:af:50:aa:c2:92:26:c2:
c4:ed:da:1a:82:93:85:39:24:ed:69:aa:63:42:3e:21:e7:bb:
e3:e7:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 06:08:23 2024 by rpki-client on console-ams.rpki-client.org