Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JfiiYl8nwCgWBTLsSGYdpGsGvIw.roa
File: JfiiYl8nwCgWBTLsSGYdpGsGvIw.roa (raw, json)
Hash identifier: TYiBktUk/sdFSf/2LR7GJDFPzjljy165vralECpE+o4=
Subject key identifier: 25:F8:A2:62:5F:27:C0:28:16:05:32:EC:48:66:1D:A4:6B:06:BC:8C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018EE10555793BBBF62FC3492824E3100136
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JfiiYl8nwCgWBTLsSGYdpGsGvIw.roa
Signing time: Mon 15 Apr 2024 09:10:06 +0000
ROA not before: Mon 15 Apr 2024 09:10:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 20:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:05:55:79:3b:bb:f6:2f:c3:49:28:24:e3:10:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 15 09:10:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25f8a2625f27c028160532ec48661da46b06bc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:92:8f:ea:51:a0:01:51:14:a7:35:dc:f6:8b:
2c:11:90:e7:96:88:7b:4a:44:49:00:e7:3a:59:16:
cf:38:56:77:d8:d4:53:82:2f:44:fc:cd:0d:ef:43:
66:72:f7:66:97:4e:f5:35:7d:f6:4d:10:ad:30:82:
25:6c:56:76:cb:c8:cf:15:8d:7b:5f:51:aa:ec:2e:
35:53:0d:ff:57:57:0f:b6:65:ab:2f:22:57:fd:35:
5d:b2:c5:a3:8c:00:09:bd:94:6a:56:a1:9b:6f:be:
87:50:7e:c4:83:ef:0b:52:61:c1:09:7e:35:42:f5:
59:89:e4:8e:78:0a:84:80:ef:36:c0:c5:4e:63:cb:
e3:cb:d5:d4:3c:4d:6d:59:9e:e3:c5:dd:1f:09:c1:
91:12:fd:e4:15:36:01:8b:d3:59:6b:c7:ba:fd:cb:
29:d9:65:6a:32:6f:49:40:93:a6:f3:ca:06:71:8e:
c4:31:a7:c3:38:9a:94:0b:2e:f8:47:36:24:63:13:
cc:8a:e9:3d:a9:03:48:ae:22:6f:91:01:8b:38:e3:
12:64:06:c3:f3:ce:5f:d7:67:22:26:23:d1:a4:cd:
df:79:47:d0:11:13:ae:a9:3b:57:c4:38:7d:ae:c2:
26:7c:a9:e6:3c:af:52:f6:f5:8e:81:b8:46:9a:35:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:A2:62:5F:27:C0:28:16:05:32:EC:48:66:1D:A4:6B:06:BC:8C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JfiiYl8nwCgWBTLsSGYdpGsGvIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.200.0/21
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:5f:fe:b9:fb:5e:64:6b:01:fa:ef:07:00:16:4a:bf:b1:cd:
60:41:b1:8b:61:9a:fd:c6:3f:78:33:2f:c4:07:83:53:75:83:
df:57:0a:98:99:28:82:4d:e3:96:d8:8b:14:61:38:df:7d:21:
0f:2e:45:2c:a3:18:0b:58:db:e0:21:49:b8:4a:a8:61:2b:7a:
0b:23:d8:28:0f:12:7a:2b:2d:17:d8:bb:1d:c5:51:7c:16:9b:
02:c4:f0:1f:96:60:ef:ed:98:63:71:26:75:b0:f4:44:de:e7:
f6:ea:50:aa:b4:3f:3a:d2:d4:b7:f1:22:13:61:35:cc:1e:a2:
ba:74:31:8e:b5:ab:4c:b5:c4:9b:7a:6f:09:26:07:13:f7:82:
7e:30:6e:5b:83:91:93:4e:d7:bc:1c:a6:0c:b4:df:83:4f:3a:
ed:72:b4:ac:3b:78:2c:06:d3:62:38:84:6e:9d:e5:cb:42:2c:
6e:96:42:38:de:3a:3e:88:72:16:69:9c:76:ba:c5:39:29:38:
4d:7f:dc:34:a8:22:39:45:80:b2:b0:4d:d7:92:6b:bd:7c:a2:
c2:b5:bd:f5:45:54:9b:3c:77:be:d4:19:62:04:02:1a:e5:09:
52:81:65:d5:3e:3e:bd:5f:36:07:40:cf:dd:e5:34:15:da:1c:
46:a7:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org