Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Ca_GDiUt2NqXeWnX_Rmyz37StGo.roa
File: Ca_GDiUt2NqXeWnX_Rmyz37StGo.roa (raw, json)
Hash identifier: cJ6toOKlqtWsahbgZVf8VxthPGo+Uf4SgpHvnXmXLv4=
Subject key identifier: 09:AF:C6:0E:25:2D:D8:DA:97:79:69:D7:FD:19:B2:CF:7E:D2:B4:6A
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185E54DB4E686C0617DA7F6936B81961413
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Ca_GDiUt2NqXeWnX_Rmyz37StGo.roa
Signing time: Tue 24 Jan 2023 19:42:33 +0000
ROA not before: Tue 24 Jan 2023 19:42:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.186.194.0/23 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.214.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
94.241.176.0/21 maxlen: 24
83.147.216.0/23 maxlen: 24
178.253.31.0/24 maxlen: 24
83.147.217.0/24 maxlen: 24
83.147.222.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:4d:b4:e6:86:c0:61:7d:a7:f6:93:6b:81:96:14:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 24 19:42:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09afc60e252dd8da977969d7fd19b2cf7ed2b46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:82:11:f8:01:c4:30:4d:f7:c1:47:15:3c:
c6:bc:e2:f7:51:2a:90:33:3f:ab:fc:95:0a:07:6b:
33:95:5b:02:b6:10:b2:7b:b5:97:aa:e9:2d:79:ed:
84:14:9d:a8:09:68:11:20:34:33:f0:c8:c5:41:ca:
db:83:67:87:74:e2:ad:4b:17:83:e8:b6:d1:06:7b:
ec:04:16:a9:c8:6c:33:78:c3:d0:a7:b9:fa:16:bc:
1e:83:14:ee:59:34:de:61:bd:a4:94:68:57:74:00:
0f:0a:d4:e3:3b:0e:70:78:f5:45:12:8f:bd:0f:b6:
f7:9d:ac:56:22:53:e9:89:79:c4:c8:b5:4d:f2:c9:
f4:d3:dc:c6:4e:d7:3d:70:e1:fa:1f:ba:70:b9:8d:
f0:f7:a1:de:5c:bd:43:3f:af:bf:d0:bc:47:03:80:
63:6b:0b:eb:37:f0:f8:94:fc:bc:9c:5e:49:12:fa:
19:ee:28:14:21:51:4b:96:f3:11:80:c0:f3:73:85:
45:88:53:e8:51:30:8d:49:5d:39:e2:d3:dc:63:e7:
e2:62:6e:31:2b:f3:03:40:3a:cb:f8:30:b3:9a:86:
c5:5f:3f:26:37:25:0e:5c:d7:0b:6e:28:15:6c:7b:
a7:20:5b:75:e0:e2:c4:9c:d7:10:17:8c:10:02:cc:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AF:C6:0E:25:2D:D8:DA:97:79:69:D7:FD:19:B2:CF:7E:D2:B4:6A
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Ca_GDiUt2NqXeWnX_Rmyz37StGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/23
83.147.232.0/22
91.186.194.0/23
91.186.200.0/22
91.186.214.0/23
94.241.168.0-94.241.183.255
178.253.31.0/24
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
80:a3:f3:4f:3e:05:db:c8:ff:03:67:fb:99:de:77:cf:6d:71:
02:5e:53:57:45:08:d3:8a:9e:cb:36:74:49:3e:28:e2:67:a5:
fc:c1:0c:6a:7b:95:f3:d5:05:e6:d4:a5:b0:0a:a4:bc:b0:f7:
67:b5:1b:bc:6e:b2:86:0e:c1:e8:a8:36:06:bb:0a:ac:6b:3c:
1b:de:a4:10:a4:0d:c6:98:9a:95:36:7a:bf:18:96:aa:f2:cb:
8f:eb:fb:08:35:97:1d:3a:a7:10:8d:63:8b:ed:f2:99:fb:d3:
e4:47:1f:ac:98:df:b0:c4:7e:22:49:ee:ba:3f:8d:f3:8f:fd:
3a:72:1b:21:57:e5:b8:f8:05:77:0b:1c:01:1e:3e:38:de:4d:
5b:3c:72:31:49:b0:4c:ec:16:33:0a:ef:3e:84:da:4e:ac:aa:
ae:cb:38:14:29:73:fe:79:67:bf:f3:84:aa:79:67:3f:7e:a8:
ad:dc:cb:a2:c7:f7:4b:28:5d:d8:f8:d3:d4:bb:4a:f9:8c:0c:
79:9d:d9:b4:a6:d6:a5:16:d9:31:20:6a:cc:3a:1c:de:39:ff:
f5:e5:dc:3b:83:44:0f:3f:5b:56:da:2d:e6:d0:0a:bf:36:88:
40:ab:e6:3f:d5:95:86:b3:f2:a1:c1:aa:79:25:a6:ac:8b:36:
7e:9e:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org