Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AeWjazRxsDxed2fv31hnBBJ8zS0.roa
File: AeWjazRxsDxed2fv31hnBBJ8zS0.roa (raw, json)
Hash identifier: /idaWPFnbjLUA5CIKIHwhQfL37OjYyWe8yrCkBebXCg=
Subject key identifier: 01:E5:A3:6B:34:71:B0:3C:5E:77:67:EF:DF:58:67:04:12:7C:CD:2D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018EE1046BAE7CF8B8B40293C0816131B33B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AeWjazRxsDxed2fv31hnBBJ8zS0.roa
Signing time: Mon 15 Apr 2024 09:09:07 +0000
ROA not before: Mon 15 Apr 2024 09:09:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 83.147.232.0/22 maxlen: 24
91.186.194.0/23 maxlen: 23
94.241.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 10:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:04:6b:ae:7c:f8:b8:b4:02:93:c0:81:61:31:b3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 15 09:09:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01e5a36b3471b03c5e7767efdf586704127ccd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:cc:a6:76:91:51:b3:39:fb:5a:5d:52:d8:
45:1a:af:e5:26:5a:95:69:54:5c:e8:82:2d:89:68:
1e:18:70:8a:4b:72:83:e5:82:77:75:2a:89:4c:4e:
02:7f:df:c7:bd:72:ee:10:17:fe:55:e0:2f:f3:a1:
26:70:cf:23:47:aa:19:b6:d1:75:d1:12:5d:f5:8e:
31:22:42:68:47:e3:2a:09:ce:f8:15:fc:aa:5a:59:
e1:68:b6:3e:8e:bb:9b:ae:29:9b:33:68:ee:6f:b6:
f7:85:ec:a1:6a:d1:e2:aa:aa:63:88:3f:83:51:ef:
07:4e:20:cd:4c:d9:67:d9:ed:59:23:26:4b:fa:94:
2e:68:66:7d:ff:15:22:a8:ea:5a:f2:aa:49:5c:71:
63:26:91:2f:3e:b5:86:11:3a:1d:9a:f1:29:11:0e:
95:82:c7:9a:5f:29:e5:bf:ed:c5:33:1a:16:54:64:
83:a3:d2:13:d5:57:52:1e:27:31:f6:11:50:df:96:
33:ce:f7:99:c5:33:fa:56:ac:16:95:29:83:f9:c3:
f8:86:c7:09:a9:d8:b9:95:62:21:37:ba:ed:37:8e:
0a:d4:5b:b3:7a:67:a9:89:ee:0a:c7:f3:52:e0:a0:
60:ce:f5:03:c5:bc:00:5a:fd:2e:9d:f6:5a:a7:09:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E5:A3:6B:34:71:B0:3C:5E:77:67:EF:DF:58:67:04:12:7C:CD:2D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AeWjazRxsDxed2fv31hnBBJ8zS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
91.186.194.0/23
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
84:2a:bf:e3:db:c4:8c:58:1d:ae:59:21:1a:79:e6:72:7d:41:
70:3d:f4:0e:a8:c6:db:0d:75:32:e7:30:37:2f:93:28:0e:85:
31:ff:92:d6:a0:5f:d6:58:33:4e:0c:ec:07:bd:82:e2:65:7f:
08:57:68:97:af:d6:65:0c:ec:80:cc:95:f0:0a:89:13:1d:31:
c3:6d:b1:c0:d7:c7:c2:81:e9:63:6e:b9:cf:67:1d:73:c9:8b:
33:d3:66:e8:0a:b1:64:59:c9:ef:7d:44:e6:91:42:a5:f0:25:
3f:bb:35:0c:4b:1b:f0:a3:15:90:ae:a1:13:87:db:f6:61:6d:
23:51:54:aa:89:3b:87:eb:e8:c9:a4:8a:41:0f:2f:b6:69:17:
a0:4e:7c:85:7a:f6:95:e4:a0:90:80:3f:a9:e6:0d:b9:33:8c:
fa:d0:63:f2:24:b4:67:b2:5b:48:30:84:0f:ef:05:e1:a4:a6:
21:81:a9:e4:86:7a:86:5a:f2:98:12:eb:8e:13:72:3c:16:3e:
6f:0b:41:e9:ca:90:7c:16:16:64:aa:87:49:c5:19:98:90:8f:
d9:a3:59:1f:e2:a7:4e:04:fb:2a:a6:ad:15:55:27:2d:d4:86:
5a:6d:e1:c0:0f:71:18:0d:93:d0:d6:64:f6:1f:68:c5:23:e7:
c9:cc:ac:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org