Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8muLt_2AOAMNWJTEBEVHYW2vEf4.roa
File: 8muLt_2AOAMNWJTEBEVHYW2vEf4.roa (raw, json)
Hash identifier: sObI56KgPnKqCJlltDdfa4PTGoMpEMfbw10vCBeUGEg=
Subject key identifier: F2:6B:8B:B7:FD:80:38:03:0D:58:94:C4:04:45:47:61:6D:AF:11:FE
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018D3A2FDD3EC2C7097C5553518066B9B09B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8muLt_2AOAMNWJTEBEVHYW2vEf4.roa
Signing time: Wed 24 Jan 2024 06:37:11 +0000
ROA not before: Wed 24 Jan 2024 06:37:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 83.147.232.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
178.253.26.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 19:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:2f:dd:3e:c2:c7:09:7c:55:53:51:80:66:b9:b0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 24 06:37:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f26b8bb7fd8038030d5894c4044547616daf11fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:2c:9c:71:af:5f:ac:36:84:a3:54:0d:30:
b8:79:cb:23:e2:a2:46:74:f1:bf:e6:0f:75:05:df:
ee:0b:af:70:a3:4c:e5:f6:f7:61:8f:68:17:0e:aa:
5c:4c:52:45:51:12:6a:bb:e9:12:db:74:1e:6b:b5:
6f:d2:1e:5a:26:da:01:db:5f:4d:35:db:90:87:c8:
bc:9d:95:e6:21:c5:99:98:ba:41:1f:d6:34:d0:9f:
94:45:11:c6:43:0c:11:79:34:d6:fa:e1:55:b2:14:
f9:1e:23:b9:20:4d:53:69:e0:79:ec:2d:d9:db:c9:
f9:a9:a7:a2:90:16:83:a8:d3:48:89:93:a9:6a:07:
c3:6c:cb:b5:88:26:4f:67:9b:9f:00:2f:bb:7b:a4:
51:dd:c0:40:50:30:8a:85:e4:4a:29:ff:ee:0b:9b:
9c:da:c4:51:49:2d:ae:3c:8f:ac:93:65:b3:c4:3b:
66:e1:eb:95:89:61:4d:6e:73:e6:6d:40:c1:41:4b:
d5:42:48:08:66:33:b7:7c:30:61:ab:33:2d:6e:9d:
dc:f6:99:36:34:97:cd:ab:c7:36:61:da:83:59:69:
1a:d0:65:31:c9:f0:0e:3f:e3:bf:63:12:4f:9c:e7:
54:1b:ed:7b:92:c8:5d:1b:de:41:ba:d2:f2:e1:f5:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6B:8B:B7:FD:80:38:03:0D:58:94:C4:04:45:47:61:6D:AF:11:FE
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8muLt_2AOAMNWJTEBEVHYW2vEf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.252.0/22
91.186.216.0/22
178.253.26.0/23
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
33:9b:5e:54:01:ea:b3:df:d4:4e:92:18:41:68:86:6f:33:ae:
d9:9d:11:16:4f:18:ac:40:70:a1:b7:02:8f:71:ea:bb:59:75:
6e:2c:d4:51:62:95:4e:c4:5a:51:24:45:87:70:64:b2:eb:fd:
27:48:78:6a:c2:95:63:7c:c9:6e:b6:af:f3:75:64:34:8b:94:
fa:45:ab:09:c7:7e:d5:64:06:31:fa:f0:e6:ca:de:15:fa:4d:
97:b2:90:d2:d9:ed:30:c5:86:88:d6:0d:13:16:bb:10:7c:bd:
b5:43:2a:4c:36:ca:d5:5c:33:41:01:06:29:48:ca:86:0d:5b:
6f:52:dd:3a:c9:3d:b2:6c:96:df:4a:39:3e:f8:ae:b2:1c:eb:
01:5a:b0:c6:05:eb:aa:66:a2:d5:b6:0f:5e:75:ae:7f:bc:9e:
aa:31:72:1b:17:1d:b5:2f:12:bd:e1:6e:3b:01:7a:97:08:85:
4f:4a:64:36:eb:23:44:a7:c7:54:e9:20:3f:e2:d0:49:f7:6b:
0f:e1:0c:1c:c1:02:83:e5:a2:c2:12:db:66:d6:95:cf:85:dd:
ed:a2:b5:be:67:b2:ec:f7:85:07:7b:0c:c8:be:ab:8c:97:d8:
a9:d1:6a:d5:16:4f:b7:a9:91:ec:33:4d:0b:e4:ea:88:a7:9e:
0d:80:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 23:38:12 2024 by rpki-client on console-fra.rpki-client.org