Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/G5mKf-ENH5GHXPwx7ZlkHG65SaI.roa
File: G5mKf-ENH5GHXPwx7ZlkHG65SaI.roa (raw, json)
Hash identifier: NW2X/+BR0Mx9SSeNeGJNqTc7XfbGDmEVKGKuktFPhoE=
Subject key identifier: 1B:99:8A:7F:E1:0D:1F:91:87:5C:FC:31:ED:99:64:1C:6E:B9:49:A2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0191FD080D32A93B2603E097CBC1AC97C507
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/G5mKf-ENH5GHXPwx7ZlkHG65SaI.roa
Signing time: Mon 16 Sep 2024 22:50:48 +0000
ROA not before: Mon 16 Sep 2024 22:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.222.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 07:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fd:08:0d:32:a9:3b:26:03:e0:97:cb:c1:ac:97:c5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 16 22:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b998a7fe10d1f91875cfc31ed99641c6eb949a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:c1:ec:1d:c6:fa:39:32:e1:db:5f:b7:b9:
12:e0:15:1e:c0:48:78:f6:1a:85:53:93:1e:e8:9b:
bc:1b:4e:0f:70:2c:8e:ac:06:25:90:fc:3f:cc:55:
d0:39:10:a3:35:64:d1:8b:86:b3:19:9d:5e:00:5b:
83:a6:0b:60:65:1c:fe:54:c6:b2:0e:4b:de:0e:ca:
ed:08:0d:75:eb:af:7d:47:7f:e1:56:c2:e0:68:aa:
cc:15:27:4f:3b:33:bd:db:25:aa:8b:72:0a:15:48:
ff:30:10:72:fd:bf:c0:4e:10:5d:09:bc:b8:90:d0:
00:ca:58:d5:02:7d:ef:51:f0:5c:77:5e:7c:a6:8d:
23:a9:89:ff:53:ac:1e:1d:b0:48:35:4e:ca:5e:70:
88:e4:d7:31:e7:7c:d3:bb:75:8f:97:61:e6:1f:a1:
5c:09:bf:36:5e:4d:ca:0a:72:56:15:e5:dd:ab:0a:
aa:d9:52:79:c1:ec:46:5c:97:29:65:44:3b:ba:7c:
2f:c3:eb:00:fe:0b:aa:62:15:f0:97:bc:37:a5:9a:
10:c6:5b:17:c0:74:8c:48:3e:b7:16:b3:c2:19:71:
b9:22:b6:12:46:80:2e:bd:2a:49:c7:74:d9:31:a2:
15:8c:48:5a:a5:ac:d3:76:06:ca:97:5f:90:40:e4:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:99:8A:7F:E1:0D:1F:91:87:5C:FC:31:ED:99:64:1C:6E:B9:49:A2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/G5mKf-ENH5GHXPwx7ZlkHG65SaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
83.147.244.0/22
91.186.200.0/21
91.186.216.0/23
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:76:92:7d:9e:af:b1:08:b9:93:4c:c3:b5:13:e6:a2:bf:54:
0f:24:3f:05:df:df:6e:e7:b5:58:f7:db:5b:dd:ee:a3:0f:c2:
51:d7:73:53:03:4a:4e:ac:e4:94:ab:28:26:c1:8f:2b:5f:e0:
26:97:cd:30:0a:d6:6d:a5:7e:01:67:d7:f7:f6:38:ce:53:5d:
d7:c9:85:23:f8:c6:d9:0c:8b:8f:ae:8e:b0:3b:4b:ab:9e:b0:
e5:15:d2:5a:2c:de:17:15:38:22:88:42:f2:1d:2b:4c:a5:08:
68:de:17:fb:70:37:44:03:bf:bb:4f:e6:a8:36:c7:68:d9:fb:
b4:59:1a:ed:37:f7:bd:d7:11:a6:c9:0f:5a:55:66:36:5e:71:
34:ef:a7:3e:b3:ec:40:a5:33:05:24:ce:0c:b4:09:dd:3f:32:
a1:07:2b:6e:49:e7:10:87:68:d7:ac:24:f9:19:7b:a1:75:70:
d3:8a:1c:6f:1a:b3:dc:cb:13:9e:96:d3:c2:05:f1:36:bf:6e:
ec:e4:52:ba:26:24:8e:17:df:75:a9:5c:f3:50:18:6c:fd:02:
95:10:07:49:c7:b4:e1:0a:c4:18:3e:b4:62:94:55:80:8c:68:
1f:f2:b7:9c:af:fb:c3:4b:1e:6c:f0:7e:f0:af:66:2f:55:b5:
07:ae:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:32:10 2024 by rpki-client on console-fra.rpki-client.org