Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8uUwK5Fl0Evta__gdbFGKmZoCx0.roa
File: 8uUwK5Fl0Evta__gdbFGKmZoCx0.roa (raw, json)
Hash identifier: mocmJQ22SLZhHaejtUVygF44K0k9Dn0YLl4eMO7NPtk=
Subject key identifier: F2:E5:30:2B:91:65:D0:4B:ED:6B:FF:E0:75:B1:46:2A:66:68:0B:1D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CCE1C6C62F1EF44A2E964730659E04E5F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8uUwK5Fl0Evta__gdbFGKmZoCx0.roa
Signing time: Wed 03 Jan 2024 06:56:58 +0000
ROA not before: Wed 03 Jan 2024 06:56:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.223.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:1c:6c:62:f1:ef:44:a2:e9:64:73:06:59:e0:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 3 06:56:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2e5302b9165d04bed6bffe075b1462a66680b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:25:92:7e:3c:c2:ec:c4:de:4c:8e:59:e6:
91:ab:36:ea:7e:87:d9:40:56:63:9b:a8:8b:c7:0d:
6d:71:39:bf:76:65:95:e4:c7:4a:f0:4c:0a:a1:81:
c9:74:c1:7a:4d:0d:67:70:45:7f:34:8c:15:5f:56:
da:6a:93:c7:cf:f8:42:14:39:b4:d5:c2:f4:f7:9b:
b6:f0:05:ae:a1:f5:98:c9:5f:b6:6a:1f:b7:b8:47:
9c:52:be:16:2a:4b:24:70:f3:b4:22:5b:fc:3c:e2:
53:b8:96:dd:4f:7b:6f:74:98:34:27:e4:d4:64:10:
c7:67:ef:3e:f5:20:31:f3:d5:b4:4d:69:d8:c7:b5:
38:d1:86:22:40:4a:66:03:e7:52:00:96:31:42:a2:
44:d1:04:0f:49:0c:1c:eb:79:30:28:3e:b5:42:be:
f6:38:66:38:f9:1c:13:b6:82:16:e9:91:50:3e:db:
9d:99:48:55:07:ff:c6:85:05:68:fb:14:62:a1:bd:
10:e0:4d:93:e8:cf:d8:00:77:2d:86:b0:8c:22:13:
fb:0d:84:9c:ca:c6:91:c0:5c:95:e4:3a:cb:5e:d4:
91:07:97:86:52:7c:d7:db:12:5e:25:76:a9:4e:92:
59:54:17:7f:d1:4c:59:4b:eb:db:82:8e:9a:cc:13:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E5:30:2B:91:65:D0:4B:ED:6B:FF:E0:75:B1:46:2A:66:68:0B:1D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8uUwK5Fl0Evta__gdbFGKmZoCx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:b1:82:a2:cb:90:79:02:75:38:94:ed:05:f0:97:09:05:c4:
19:34:e3:d4:76:2f:57:e4:0a:f2:0b:68:ea:3b:ff:7e:2d:9d:
91:e7:d6:a6:13:92:d5:90:04:34:0c:b1:6d:f2:a1:a5:53:8d:
6e:83:ef:32:a8:d4:16:10:63:ad:74:b7:e3:75:7c:f8:a9:39:
90:9a:52:4b:0c:3e:e5:4d:89:69:b3:fc:2a:3a:93:94:5e:ec:
34:9a:9d:69:94:88:6b:26:7e:24:da:0f:01:d3:f1:05:bc:25:
93:e2:d3:e9:31:af:5a:1c:1a:3f:9f:ff:1d:cc:c7:a1:3c:58:
14:f6:90:96:33:1c:b2:5b:2e:7f:75:55:93:93:c9:1a:c8:0a:
2f:32:92:8c:0f:f3:a3:aa:c7:9e:2a:52:32:13:80:76:07:c7:
1b:ef:37:b9:59:01:ec:50:5a:fa:f9:1f:32:ae:65:e2:5f:43:
57:d7:0e:18:bc:e0:6f:5e:5e:0c:db:47:1b:82:6c:79:2b:ad:
00:39:c7:14:12:44:cc:48:e6:4a:15:38:ed:4c:be:6c:dd:f7:
a2:bf:ab:a9:89:a8:5b:d0:c2:1b:41:71:0b:16:60:1c:14:63:
59:7b:32:cd:f5:f0:fe:95:ec:dd:af:3d:9f:20:1d:6d:84:48:
14:24:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 22:35:27 2024 by rpki-client on console-ams.rpki-client.org