Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/FiP2LS5rJjycYz0Zju9NlyWvFk4.roa
File: FiP2LS5rJjycYz0Zju9NlyWvFk4.roa (raw, json)
Hash identifier: 1lvZAkyOK8K20eXLq9hMGgs5MvynxaRMbhHBTn2isXI=
Subject key identifier: 16:23:F6:2D:2E:6B:26:3C:9C:63:3D:19:8E:EF:4D:97:25:AF:16:4E
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01879F6EA903C9F2D76E88ED411B82E1F8F3
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/FiP2LS5rJjycYz0Zju9NlyWvFk4.roa
Signing time: Thu 20 Apr 2023 16:10:42 +0000
ROA not before: Thu 20 Apr 2023 16:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
178.253.22.0/23 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:6e:a9:03:c9:f2:d7:6e:88:ed:41:1b:82:e1:f8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 20 16:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1623f62d2e6b263c9c633d198eef4d9725af164e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:3a:26:d4:59:19:6e:d2:5e:80:f0:48:d1:
6a:85:c6:b3:da:30:a1:cf:96:42:4f:f5:b9:c7:16:
97:42:e2:ba:0e:93:c0:5a:3c:51:99:bb:7a:6d:1e:
85:7b:e3:fa:d4:63:6a:b2:af:19:2b:f3:0d:e3:d1:
04:ed:a5:96:7f:0a:c0:d1:be:2d:61:41:c3:09:3c:
3b:6a:e8:32:a7:62:51:8f:12:3b:c4:f8:16:02:7c:
57:02:dc:a0:72:1b:21:41:4e:24:a5:61:19:bc:72:
fe:b9:70:c5:68:b0:01:b2:5b:81:3a:89:76:71:f2:
05:a7:48:6a:90:60:1c:35:f0:47:cb:1e:63:1e:84:
9d:6a:40:00:52:95:89:12:3a:5e:b2:cf:0e:51:53:
b9:df:db:68:c9:16:c8:c3:2a:f9:dd:08:93:62:25:
f4:37:a3:01:42:8a:31:9a:00:1e:8b:3b:c3:59:40:
7f:65:fe:5f:cf:b8:b8:9f:0b:6f:cd:0d:a1:81:d3:
9c:6b:b1:b7:b6:f9:48:46:8e:a7:90:6b:06:4f:bd:
92:af:74:d9:50:5b:90:0c:f6:5e:78:b7:94:4e:4b:
be:f5:f5:1a:8a:6b:c5:b9:1d:d2:8f:a5:fc:31:86:
8c:78:32:58:32:7e:fa:71:cd:9c:98:b5:2e:97:80:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:F6:2D:2E:6B:26:3C:9C:63:3D:19:8E:EF:4D:97:25:AF:16:4E
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/FiP2LS5rJjycYz0Zju9NlyWvFk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
91.186.216.0/22
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:61:96:9f:2b:9a:79:af:56:7d:e3:b9:80:8c:e3:46:0d:3c:
4c:e3:37:d6:39:f0:fb:dd:bf:db:ac:cd:44:e4:15:e1:77:14:
47:28:26:8f:30:c0:62:4a:ec:e1:6f:76:52:9e:0a:af:09:68:
f8:66:61:bd:ed:56:8f:22:9f:4f:36:25:56:79:ac:84:b2:51:
f8:39:42:55:c4:90:3c:92:33:83:53:30:25:fb:5b:ae:d9:95:
e1:63:03:07:44:9a:5d:f9:2a:3c:c2:3a:7e:4d:41:50:00:d6:
a6:fa:29:4b:3c:39:43:fc:f8:7a:62:c9:58:4d:e5:4b:8b:e0:
3f:4d:53:30:c9:de:50:cb:90:f3:0f:00:79:b8:d8:9a:8d:ec:
b9:42:c0:71:9a:2c:39:2e:44:7a:12:47:11:38:74:7c:64:b8:
2b:b9:67:fd:5c:b4:9b:a1:ee:47:33:49:17:bb:2d:cd:06:bf:
cc:62:ea:91:68:79:ec:cb:c6:c6:b0:9f:69:67:5e:89:66:b9:
cb:fc:31:ff:6b:8d:b7:44:b4:3d:9b:8b:8f:5e:fe:f5:d0:be:
ff:b5:a5:e1:e1:27:2e:a5:a1:da:c5:6d:4b:c1:66:91:18:64:
2a:29:93:05:07:63:db:fb:0d:68:1c:80:6f:30:13:68:a4:4e:
06:f4:5c:3f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYefbqkDyfLXbojtQRuC4fjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwNDIwMTYxMDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjIzZjYyZDJlNmIyNjNjOWM2MzNkMTk4ZWVmNGQ5NzI1YWYxNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5w6JtRZGW7SXoDwSNFqhcaz2jCh
z5ZCT/W5xxaXQuK6DpPAWjxRmbt6bR6Fe+P61GNqsq8ZK/MN49EE7aWWfwrA0b4t
YUHDCTw7augyp2JRjxI7xPgWAnxXAtygchshQU4kpWEZvHL+uXDFaLABsluBOol2
cfIFp0hqkGAcNfBHyx5jHoSdakAAUpWJEjpess8OUVO539toyRbIwyr53QiTYiX0
N6MBQooxmgAeizvDWUB/Zf5fz7i4nwtvzQ2hgdOca7G3tvlIRo6nkGsGT72Sr3TZ
UFuQDPZeeLeUTku+9fUaimvFuR3Sj6X8MYaMeDJYMn76cc2cmLUul4D9TwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBYj9i0uayY8nGM9GY7vTZclrxZOMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvRmlQMkxTNXJKanljWXowWmp1OU5seVd2Rms0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCU5P8AwQC
W7rYAwQBsv0WMA0GCSqGSIb3DQEBCwUAA4IBAQBeYZafK5p5r1Z947mAjONGDTxM
4zfWOfD73b/brM1E5BXhdxRHKCaPMMBiSuzhb3ZSngqvCWj4ZmG97VaPIp9PNiVW
eayEslH4OUJVxJA8kjODUzAl+1uu2ZXhYwMHRJpd+So8wjp+TUFQANam+ilLPDlD
/Ph6YslYTeVLi+A/TVMwyd5Qy5DzDwB5uNiajey5QsBxmiw5LkR6EkcROHR8ZLgr
uWf9XLSboe5HM0kXuy3NBr/MYuqRaHnsy8bGsJ9pZ16JZrnL/DH/a423RLQ9m4uP
Xv710L7/taXh4ScupaHaxW1LwWaRGGQqKZMFB2Pb+w1oHIBvMBNopE4G9Fw/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org