Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JOZcpRBAInBm4FjtHU5pMtd_Pn4.roa
File: JOZcpRBAInBm4FjtHU5pMtd_Pn4.roa (raw, json)
Hash identifier: +rlP2s4YSbUudz8LYdzCFML+qMMAXFNJ9nD1zqHjHXg=
Subject key identifier: 24:E6:5C:A5:10:40:22:70:66:E0:58:ED:1D:4E:69:32:D7:7F:3E:7E
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018FCAEDB7D7FED09BE044D2E8A9F037D935
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JOZcpRBAInBm4FjtHU5pMtd_Pn4.roa
Signing time: Thu 30 May 2024 19:15:27 +0000
ROA not before: Thu 30 May 2024 19:15:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 15:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:ed:b7:d7:fe:d0:9b:e0:44:d2:e8:a9:f0:37:d9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 30 19:15:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e65ca51040227066e058ed1d4e6932d77f3e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:b2:0f:de:7e:39:a2:99:39:5d:4f:d6:c3:
a1:6d:d2:9c:6f:7c:7a:d5:52:26:52:ab:be:2d:ff:
3a:fc:c0:a8:a4:d8:3b:3d:61:97:d6:a2:77:13:cd:
0d:ec:83:c8:88:3e:b9:b7:05:1b:9b:95:4c:b7:0d:
ca:df:10:bb:a8:3f:65:b5:94:65:95:25:c1:9d:94:
fe:3f:25:23:b0:dd:c2:35:6a:93:e9:12:6d:91:82:
0b:22:0b:e7:c7:e2:e4:a3:00:6d:6e:2d:ff:37:d3:
c1:31:49:fb:6b:02:77:99:b6:87:0d:cf:16:a4:db:
49:21:5d:d8:fb:ff:58:fa:d5:b2:53:6e:99:eb:51:
57:ba:82:13:2b:4a:37:fe:f7:bb:00:35:89:0b:59:
be:1b:d3:6a:1f:28:52:c7:5f:c1:e8:de:db:6a:0d:
88:cb:58:0a:75:b8:fb:21:a0:70:98:8d:b0:cf:b6:
59:0f:2f:f5:2f:d2:27:4f:5c:80:b7:ac:0e:67:ba:
96:04:9c:96:e7:26:bc:2b:2c:0f:b0:31:de:54:1f:
a0:75:c5:bc:b4:aa:6c:58:fd:e8:16:32:69:10:79:
34:79:92:54:9f:d4:42:68:db:dc:5f:71:fa:89:eb:
cc:3b:24:75:38:b5:d7:9a:0b:4e:96:0f:56:61:7a:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:5C:A5:10:40:22:70:66:E0:58:ED:1D:4E:69:32:D7:7F:3E:7E
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JOZcpRBAInBm4FjtHU5pMtd_Pn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.200.0/21
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:29:6c:68:e1:3a:e6:f0:4c:ca:c8:79:8e:2a:47:78:57:d5:
d0:8f:9c:fb:08:6e:35:13:24:67:66:b9:c4:75:de:ca:28:a4:
cc:dc:2d:f2:7f:ca:2b:3d:e9:65:ac:2c:30:c2:74:d0:25:64:
e7:e1:5e:c6:62:09:22:a1:f0:76:7a:4a:bf:41:e3:a9:42:14:
e1:7d:6b:c4:44:79:3a:0c:09:c6:1f:2a:3f:fb:c3:fd:c8:62:
23:05:38:e7:81:3e:cd:82:fd:15:90:c0:03:f0:13:95:f0:1c:
a2:d7:bb:80:11:b0:f3:18:8f:bc:bd:81:01:1e:d0:b6:f8:c3:
7a:11:37:e7:fa:1f:e4:66:70:1d:9e:b0:0e:8d:d8:12:cf:b8:
c5:ef:9c:5c:ea:a9:a9:7d:94:b7:15:13:e2:14:98:1e:00:99:
44:08:1c:a5:e4:83:20:89:c0:6c:98:c4:05:3b:09:74:ac:b8:
79:61:c8:89:cf:9e:5a:a2:2f:7c:3a:fe:e4:44:07:a4:ef:5a:
35:84:5b:09:d8:f8:d5:a1:34:d0:51:ff:a3:8e:2b:17:3e:43:
6b:80:5a:5d:02:27:45:cb:c4:e5:86:ed:99:41:4b:18:32:3c:
c4:d7:0f:6e:44:65:09:0d:c8:95:2e:06:ea:15:60:c1:d6:9b:
61:69:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org