Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/I3-cKDg89PvYL5qjKIVX0EWutUs.roa
File: I3-cKDg89PvYL5qjKIVX0EWutUs.roa (raw, json)
Hash identifier: Mbm9XyREXjSLKDXsyLnT/vPSIYRQE5EmNqrHRXEZG2M=
Subject key identifier: 23:7F:9C:28:38:3C:F4:FB:D8:2F:9A:A3:28:85:57:D0:45:AE:B5:4B
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018B2AF3163A94D956311599CBFAA0F6173A
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/I3-cKDg89PvYL5qjKIVX0EWutUs.roa
Signing time: Fri 13 Oct 2023 21:30:55 +0000
ROA not before: Fri 13 Oct 2023 21:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197789
IP address blocks: 83.147.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2a:f3:16:3a:94:d9:56:31:15:99:cb:fa:a0:f6:17:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 13 21:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=237f9c28383cf4fbd82f9aa3288557d045aeb54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:5b:50:b1:8b:d3:68:e5:52:22:f5:29:06:
11:83:a3:3b:54:ec:2e:d9:73:64:9f:54:9c:41:8f:
9b:a9:7c:fc:68:68:dc:10:0b:ba:52:d8:92:6d:56:
b5:9a:6a:99:d6:92:1d:7b:b5:11:c7:da:6c:7b:b7:
e3:d7:92:4e:49:67:b3:3a:83:74:48:35:2d:e6:7f:
b7:8c:92:a5:20:16:c3:12:49:2b:04:5d:1f:f8:fd:
0d:2d:87:1f:18:e0:97:d7:e1:0b:0f:b9:11:dd:e8:
32:15:5d:62:d6:07:d8:3f:e6:f2:ec:e1:9f:e7:a3:
e9:d0:42:3b:4b:ac:c2:7c:f9:d9:b0:1a:46:4e:59:
f6:b5:e2:c6:ff:9e:8f:ed:4f:0e:1a:d4:14:e3:53:
28:63:3c:86:07:c7:15:88:37:84:3a:e5:67:3f:e8:
87:46:6f:f6:3b:83:e2:df:1e:0c:17:6a:d7:c6:a4:
b6:56:6d:0e:af:ba:d6:bf:25:5c:6b:ae:e4:47:cc:
a6:9d:88:82:45:bd:04:a5:10:0f:1f:41:05:97:95:
57:47:7b:78:60:bf:06:cc:e2:28:00:df:28:c9:a3:
ed:84:13:72:92:79:32:2f:38:16:4b:d3:c6:6d:bf:
0b:84:2a:9f:a8:8f:c4:50:8d:2e:5b:0f:c1:23:f8:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:9C:28:38:3C:F4:FB:D8:2F:9A:A3:28:85:57:D0:45:AE:B5:4B
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/I3-cKDg89PvYL5qjKIVX0EWutUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:70:07:b4:c8:c5:95:5d:0b:76:39:48:26:2e:29:b7:33:94:
6f:82:a7:8d:a6:d5:92:12:bb:4d:c5:67:4c:a6:e5:2d:5b:4a:
68:f6:6d:2f:55:56:87:b9:78:ca:b6:40:1a:41:b7:b5:79:f4:
d5:e5:9d:6d:07:90:87:2e:56:46:53:f7:91:fc:65:53:d8:80:
eb:2f:d5:f9:75:2e:10:9c:89:71:1e:3c:bd:88:68:af:13:30:
bb:66:da:d1:14:4c:c8:42:bc:64:ef:6c:ab:5c:06:b5:cd:28:
77:4a:e1:46:06:eb:6c:98:88:17:ce:0e:de:7f:f3:2d:71:67:
46:00:1e:14:85:5e:8d:d4:c7:c4:6a:9e:fe:a7:7b:2a:5f:76:
27:62:6b:ad:1a:65:cb:11:3d:10:64:eb:ac:29:49:68:e4:b8:
01:5f:c9:27:9d:2e:d2:39:da:ca:20:df:17:db:33:e7:69:04:
e9:76:2c:36:3a:ef:49:fb:ec:96:39:a2:05:a6:80:88:30:38:
80:a7:77:d5:fc:41:73:f9:58:34:80:b2:a2:87:3c:b8:28:89:
2a:f1:7b:00:39:4a:3e:50:53:49:c8:02:bf:dc:40:5e:e5:4b:
d8:38:ed:17:b2:85:64:bb:0f:31:84:2b:26:b4:0d:07:8d:17:
ee:bf:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 14:27:19 2023 by rpki-client on console-ams.rpki-client.org