Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/F7CyugvvAMaDrbhTKKVYcW8SEBQ.roa
File: F7CyugvvAMaDrbhTKKVYcW8SEBQ.roa (raw, json)
Hash identifier: gXmHqUVadcNYqeX+nYQxgVgcExA0aYbU/t/QQhjdQos=
Subject key identifier: 17:B0:B2:BA:0B:EF:00:C6:83:AD:B8:53:28:A5:58:71:6F:12:10:14
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018D5E0FF15A79408AC302BFE1C61171DC33
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/F7CyugvvAMaDrbhTKKVYcW8SEBQ.roa
Signing time: Wed 31 Jan 2024 05:48:39 +0000
ROA not before: Wed 31 Jan 2024 05:48:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:0f:f1:5a:79:40:8a:c3:02:bf:e1:c6:11:71:dc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 31 05:48:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17b0b2ba0bef00c683adb85328a558716f121014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:5a:30:73:37:57:b9:e2:8b:13:df:eb:e5:
1b:92:01:9e:16:65:eb:8c:51:b4:68:f2:c4:6d:9c:
98:6b:2c:c7:2a:95:a4:4e:a2:54:ce:1f:9e:fc:74:
1d:99:6e:81:33:77:29:eb:25:d8:c1:7d:7d:02:24:
0f:2d:79:96:07:cd:3b:f6:5f:af:1d:e9:ea:cd:50:
d1:89:85:5b:9c:81:48:7b:ab:0d:b9:de:96:2d:5c:
fa:3e:8e:01:36:21:c8:9d:6a:b4:30:bc:05:1f:51:
5f:1b:80:9e:f2:0a:95:35:77:c2:5c:ea:95:7c:a5:
c9:af:98:70:06:82:53:3e:2c:c6:31:c2:57:9e:0f:
aa:46:b2:7a:6c:9b:35:b1:78:88:ae:b3:48:04:37:
35:48:6d:04:39:96:ef:d1:10:41:9c:1a:39:01:ef:
ea:50:ab:c5:bc:a2:f5:68:95:05:de:ad:66:79:97:
1d:56:4b:d3:dd:15:94:0c:7b:a0:e8:4d:0a:c1:0f:
32:2c:cf:6a:a7:26:2f:af:89:2c:44:f3:c1:94:1d:
d4:7b:e7:06:ef:d2:a3:59:f4:3b:f7:9b:67:83:e4:
a6:72:a5:ff:1d:d7:18:ff:ee:31:e8:b4:d2:74:51:
cb:8d:25:49:6f:b0:a0:8a:e5:6d:dd:6d:c0:45:35:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B0:B2:BA:0B:EF:00:C6:83:AD:B8:53:28:A5:58:71:6F:12:10:14
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/F7CyugvvAMaDrbhTKKVYcW8SEBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.204.0/22
91.186.216.0/22
94.241.164.0/23
94.241.168.0/21
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
32:af:b6:84:53:f5:72:58:59:74:9f:2c:45:ff:93:01:f0:37:
16:eb:d5:f5:cb:34:ef:57:22:49:45:45:29:8b:52:d9:ba:4f:
ea:09:c1:ea:89:7c:61:ae:c2:05:b0:89:0b:01:07:ee:b5:3c:
58:8b:21:f3:e2:3b:c3:44:aa:f4:18:75:83:c7:2a:13:53:49:
1e:ba:0b:8a:0a:2b:23:44:a4:4a:69:87:e6:c8:d1:a4:30:71:
03:02:56:d5:6b:9d:5d:f2:cc:c0:6e:31:fa:c2:a4:62:cb:da:
eb:7b:9a:21:f4:1d:97:44:cb:5f:10:92:3f:e7:cd:a0:4f:9e:
aa:02:8a:3c:30:3a:cc:1a:df:22:a6:0f:cf:a5:9f:bf:8d:96:
7d:f3:76:a2:13:48:98:88:ff:ef:f6:7c:f9:d6:dc:97:49:45:
8a:b3:6e:bb:ce:77:38:3c:50:fd:68:d0:50:8a:93:8a:33:ab:
58:a5:46:42:87:5e:26:b4:71:cc:24:08:31:a2:d9:a3:45:bc:
ce:ba:58:c5:09:3c:e8:39:f4:36:fa:58:62:79:ab:39:50:a8:
6b:58:12:d1:ee:3e:4b:82:08:46:c8:4d:ca:03:7c:ea:01:1c:
f6:f0:f4:16:dd:36:b2:1e:b7:06:39:95:49:2d:cc:d8:9f:c3:
6c:ef:f7:a3
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY1eD/FaeUCKwwK/4cYRcdwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwMTMxMDU0ODM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2IwYjJiYTBiZWYwMGM2ODNhZGI4NTMyOGE1NTg3MTZmMTIxMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAZaMHM3V7niixPf6+UbkgGeFmXr
jFG0aPLEbZyYayzHKpWkTqJUzh+e/HQdmW6BM3cp6yXYwX19AiQPLXmWB8079l+v
HenqzVDRiYVbnIFIe6sNud6WLVz6Po4BNiHInWq0MLwFH1FfG4Ce8gqVNXfCXOqV
fKXJr5hwBoJTPizGMcJXng+qRrJ6bJs1sXiIrrNIBDc1SG0EOZbv0RBBnBo5Ae/q
UKvFvKL1aJUF3q1meZcdVkvT3RWUDHug6E0KwQ8yLM9qpyYvr4ksRPPBlB3Ue+cG
79KjWfQ795tng+SmcqX/HdcY/+4x6LTSdFHLjSVJb7CgiuVt3W3ARTVS/QIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBewsroL7wDGg624UyilWHFvEhAUMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvRjdDeXVndnZBTWFEcmJoVEtLVlljVzhTRUJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCU5P0AwQC
U5P8AwQCW7rMAwQCW7rYAwQBXvGkAwQDXvGoAwQBsv0sMA0GCSqGSIb3DQEBCwUA
A4IBAQAyr7aEU/VyWFl0nyxF/5MB8DcW69X1yzTvVyJJRUUpi1LZuk/qCcHqiXxh
rsIFsIkLAQfutTxYiyHz4jvDRKr0GHWDxyoTU0keuguKCisjRKRKaYfmyNGkMHED
AlbVa51d8szAbjH6wqRiy9rre5oh9B2XRMtfEJI/582gT56qAoo8MDrMGt8ipg/P
pZ+/jZZ983aiE0iYiP/v9nz51tyXSUWKs267znc4PFD9aNBQipOKM6tYpUZCh14m
tHHMJAgxotmjRbzOuljFCTzoOfQ2+lhieas5UKhrWBLR7j5LgghGyE3KA3zqARz2
8PQW3TayHrcGOZVJLczYn8Ns7/ej
-----END CERTIFICATE-----
Generated at Thu Feb 1 04:46:57 2024 by rpki-client on console-fra.rpki-client.org