Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/DMLBf10_pQJmuY_AvePZKh0EvQY.roa
File: DMLBf10_pQJmuY_AvePZKh0EvQY.roa (raw, json)
Hash identifier: +FxiJoXqBoiy3l8bFxdnLW+GY/G0AdtRAbefprlwJ90=
Subject key identifier: 0C:C2:C1:7F:5D:3F:A5:02:66:B9:8F:C0:BD:E3:D9:2A:1D:04:BD:06
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A38C1305440B227991DE2A7658151C8A2
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/DMLBf10_pQJmuY_AvePZKh0EvQY.roa
Signing time: Sun 27 Aug 2023 20:48:19 +0000
ROA not before: Sun 27 Aug 2023 20:48:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200088
IP address blocks: 178.253.23.0/24 maxlen: 24
178.253.22.0/24 maxlen: 24
83.147.245.0/24 maxlen: 24
83.147.244.0/24 maxlen: 24
83.147.246.0/24 maxlen: 24
83.147.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:38:c1:30:54:40:b2:27:99:1d:e2:a7:65:81:51:c8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 27 20:48:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cc2c17f5d3fa50266b98fc0bde3d92a1d04bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:7d:e7:04:b8:fb:e3:97:fa:2d:a9:b5:2a:
fc:37:2a:71:19:f9:3e:da:13:63:03:e3:c4:0a:75:
38:14:81:60:41:0b:f4:ae:c4:5e:2f:43:96:e1:16:
ed:9b:65:45:6b:3a:77:2a:b4:92:d4:c5:b1:74:b5:
7c:f3:50:2d:2b:e4:45:e2:00:6d:0e:cb:a9:a7:c9:
35:68:c0:7a:e0:34:e3:6b:33:36:01:4c:c0:f2:bc:
a4:14:22:bf:13:74:2a:f7:bf:66:78:ee:56:7a:15:
49:45:a1:47:34:67:f0:27:b3:83:c7:c1:4b:e7:58:
bb:0e:7d:fe:09:25:25:d6:60:49:b6:40:26:2e:76:
ba:ff:99:70:2d:2e:b4:25:e6:61:a4:63:96:be:15:
7a:6a:c9:7e:4c:60:2b:61:99:38:f1:ed:b2:38:07:
0f:ee:b1:35:f2:ec:18:53:0a:e0:6c:ee:2d:52:fc:
7a:99:59:f2:37:25:b0:78:5c:45:3c:3a:24:89:26:
21:6a:cb:0d:5f:fa:3a:a5:fd:fa:95:8b:d3:cf:8d:
f7:ae:09:b0:7a:74:ad:b9:dd:85:1f:57:ca:07:0c:
d7:7b:57:77:c6:7f:33:48:e7:77:2b:d2:8d:6a:f5:
65:1d:91:af:7b:dd:b4:69:d9:8e:69:b3:24:95:83:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:C1:7F:5D:3F:A5:02:66:B9:8F:C0:BD:E3:D9:2A:1D:04:BD:06
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/DMLBf10_pQJmuY_AvePZKh0EvQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
17:57:10:c9:6e:e6:a7:06:66:56:27:76:e0:6f:d8:42:33:b6:
4f:6d:34:28:16:3d:90:d3:cd:59:a0:1e:b8:66:c9:e0:34:b3:
9c:73:aa:78:06:ea:ea:76:e8:fb:af:73:23:2a:29:18:79:fd:
e2:bd:e8:91:b9:60:00:a6:02:d1:34:e2:2d:24:d1:00:19:30:
8c:49:54:b6:0b:d2:7f:d0:13:87:54:e4:73:68:a0:98:74:5d:
17:cc:00:10:a1:73:1a:10:91:d0:22:70:4d:aa:50:bd:b9:13:
78:60:ff:38:c7:6f:60:b8:e3:bf:0a:08:de:76:f3:00:70:dd:
1b:f8:2e:e2:0c:3f:13:e7:9b:71:1a:53:dd:b1:fd:37:1c:94:
19:5a:8a:76:1e:02:eb:19:77:03:5c:3e:c5:6d:2d:24:c7:70:
cc:5f:11:5b:2f:00:72:b2:01:bb:a1:5f:1e:6a:be:4a:db:a4:
e4:38:f8:68:3c:b8:28:a0:1b:57:9a:c7:6a:c4:d2:68:e7:73:
d8:d9:bf:60:84:dd:b7:eb:fa:b8:d0:9f:db:94:99:6d:5b:81:
74:38:7d:31:db:a6:d8:4e:21:e7:f5:39:cf:6b:4b:d4:5b:a3:
a2:21:a8:59:6b:c8:38:be:8e:47:0e:b7:d6:ef:e3:eb:04:7a:
82:82:54:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 08:27:38 2023 by rpki-client on console-fra.rpki-client.org