Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/GctRiu9A87S5NftRHVPjB5Ffg_s.roa
File: GctRiu9A87S5NftRHVPjB5Ffg_s.roa (raw, json)
Hash identifier: EtDJvpsoF8HLHF9/YwyOydoJgmIrXhvriMMPppu5ZnA=
Subject key identifier: 19:CB:51:8A:EF:40:F3:B4:B9:35:FB:51:1D:53:E3:07:91:5F:83:FB
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01898960C36B29DCFF078E1AEC0102627C3E
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/GctRiu9A87S5NftRHVPjB5Ffg_s.roa
Signing time: Mon 24 Jul 2023 19:29:27 +0000
ROA not before: Mon 24 Jul 2023 19:29:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.22.0/23 maxlen: 24
83.147.223.0/24 maxlen: 24
178.253.40.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:89:60:c3:6b:29:dc:ff:07:8e:1a:ec:01:02:62:7c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 24 19:29:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19cb518aef40f3b4b935fb511d53e307915f83fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:c1:1d:63:d9:cd:ae:cd:bb:79:b8:0a:66:
fc:49:cd:a3:7a:38:c1:7d:a6:83:e3:c6:80:b8:7b:
0e:f8:d0:81:53:75:b7:0e:cb:98:85:7a:60:e1:37:
07:2b:0a:25:96:75:ff:5c:38:59:30:de:0d:2c:f9:
92:59:25:fd:80:c0:5b:cb:a5:10:0c:a9:2c:aa:50:
80:8f:19:c1:37:79:3b:19:bd:98:c7:a7:30:3b:7f:
41:92:d2:69:a3:53:4b:bf:4c:c6:33:4d:bb:c7:bf:
f3:b0:a0:63:b8:82:22:d3:52:fc:61:6d:5c:e5:1d:
f6:82:d3:5f:c5:12:eb:bf:44:58:f2:7e:03:36:9c:
fe:67:dc:8f:ce:97:7c:a3:bb:5d:b8:78:83:d2:40:
89:a7:3f:5d:72:58:a5:0a:e5:22:4f:52:c9:40:1d:
9e:b5:ad:89:58:0c:66:f4:8c:f4:ba:07:8b:dd:5f:
4a:b6:fd:e7:3a:99:b6:e1:a6:2d:c7:38:1e:d2:21:
1c:ce:a3:cd:f3:a5:81:f9:ce:51:cc:37:e5:2e:93:
41:38:25:2a:4f:e4:85:5a:57:1b:56:96:d3:94:fe:
11:03:d0:af:6c:d4:10:9c:ea:e6:7b:61:61:8e:bb:
dc:6e:41:0a:7e:e9:28:d6:54:af:10:c9:ae:ec:27:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CB:51:8A:EF:40:F3:B4:B9:35:FB:51:1D:53:E3:07:91:5F:83:FB
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/GctRiu9A87S5NftRHVPjB5Ffg_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
178.253.22.0/23
178.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
09:c3:ee:81:49:3c:5b:9a:9a:ea:fc:6c:94:64:56:fa:fa:4f:
7e:e6:77:5c:b0:49:e9:56:84:1f:2b:63:3c:c5:17:7a:88:8e:
27:27:4d:d8:f7:87:4d:41:e5:5c:63:f7:71:bf:88:cc:a9:fc:
41:33:3a:f0:9c:a3:ea:1f:56:d7:9b:51:74:cc:00:a3:df:f7:
e1:68:ce:38:96:78:5b:cd:b8:c6:2a:8d:d8:b6:13:95:da:56:
2e:50:57:bc:74:bc:55:f7:6c:a9:d9:2f:44:48:53:91:ea:c9:
a9:3e:ab:85:00:ca:9c:a8:c0:4d:4d:e2:a4:b8:cc:14:d1:e8:
19:31:2a:c9:98:06:86:77:46:51:c8:86:54:51:be:e1:a2:c2:
69:5b:be:dd:53:40:a9:d2:cd:37:04:8d:9f:98:40:e6:5d:eb:
df:88:34:4f:36:dc:c0:66:b1:b6:b7:5f:05:43:c6:9e:1d:c0:
86:a8:dc:be:ef:ea:30:40:14:85:8f:dc:9b:cd:0b:11:9f:62:
f9:1b:a4:c0:e0:94:3b:b6:34:a7:9c:30:8e:34:ac:7c:3b:d6:
dc:bd:b5:6b:a0:d9:ee:05:38:d3:e1:98:5d:af:66:99:32:12:
4f:c2:80:6d:b6:87:e3:6f:82:6c:d0:05:6e:69:17:50:ae:7f:
66:6c:64:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 17:21:00 2023 by rpki-client on console-fra.rpki-client.org