Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ORdhZamjDRRhquIQizkrCv7QiGg.roa
File: ORdhZamjDRRhquIQizkrCv7QiGg.roa (raw, json)
Hash identifier: 368R1zz1/NXb8D6y3JQZ75lauapXPhk6CPQB++mfAwY=
Subject key identifier: 39:17:61:65:A9:A3:0D:14:61:AA:E2:10:8B:39:2B:0A:FE:D0:88:68
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019293EEC60F1A5EC1CB598D2B1E2FAB6C2E
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ORdhZamjDRRhquIQizkrCv7QiGg.roa
Signing time: Wed 16 Oct 2024 06:05:51 +0000
ROA not before: Wed 16 Oct 2024 06:05:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 10:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:93:ee:c6:0f:1a:5e:c1:cb:59:8d:2b:1e:2f:ab:6c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 16 06:05:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39176165a9a30d1461aae2108b392b0afed08868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:75:76:a5:10:37:f9:4f:9e:e3:7b:9d:8c:
7f:97:66:68:ff:46:e6:2c:d3:01:0e:a2:41:a1:35:
7a:3c:db:a9:57:03:77:91:d1:f9:42:c9:75:7e:00:
f4:53:35:bd:6b:89:02:8b:53:f8:bc:d3:08:4b:f1:
7f:a5:ae:b0:fa:f3:0d:ea:bf:ca:91:90:cf:08:ea:
bb:c9:79:85:18:d4:c9:1a:8a:4f:e4:c8:7d:b4:aa:
81:e1:d1:fa:b5:d5:91:14:84:d4:4c:5c:ca:1f:52:
57:0f:87:e7:36:0a:4d:89:38:bb:7a:dc:66:5f:96:
1b:66:83:36:8a:87:4b:16:85:04:74:37:e2:84:dd:
18:8c:40:a4:16:e2:f4:2e:34:c1:cf:fb:94:10:3f:
b1:88:46:39:c1:00:b2:d7:59:1c:5a:56:f3:3d:9a:
f4:3d:be:dc:7b:71:4b:6e:d1:a8:b7:8f:94:ea:06:
82:4d:85:bc:86:3a:f3:17:e6:f6:ae:e5:25:f2:46:
e1:4f:2d:69:16:5c:4d:d8:6f:19:18:a8:9d:39:4e:
ff:79:81:ea:9b:90:ff:80:b8:45:9f:2a:cd:bd:cd:
0b:2a:8c:2c:55:fe:57:2a:7a:6c:ff:ca:4b:d2:08:
66:c1:63:da:5d:6f:9d:93:44:06:04:81:e1:a2:77:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:17:61:65:A9:A3:0D:14:61:AA:E2:10:8B:39:2B:0A:FE:D0:88:68
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ORdhZamjDRRhquIQizkrCv7QiGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.200.0/21
91.186.216.0/23
94.241.164.0/23
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:8a:86:65:0a:23:5e:0f:70:7d:73:d9:fc:ad:95:af:16:ed:
1e:fb:f6:c6:38:1a:48:40:ff:e1:bb:91:03:fa:96:fe:30:a8:
4a:a8:87:f2:5a:5c:27:63:56:89:0b:6b:7b:3d:3f:57:03:d3:
03:9e:7b:b0:92:13:6f:22:c8:68:47:d1:db:5e:4a:7d:84:65:
61:d1:ce:57:8d:6e:1f:22:8f:51:61:ff:e2:7d:c2:a3:a9:c0:
3c:0f:81:fb:6d:17:60:de:c1:aa:61:ec:38:2f:7d:73:c5:58:
1c:03:88:f3:c2:f8:50:7b:17:fa:b6:f2:02:9f:e9:8c:5b:f0:
be:6e:79:c8:2b:d3:22:8e:4e:e8:a7:a5:b6:46:17:26:07:5d:
48:d8:9c:77:f3:da:ca:f5:81:cc:b3:36:30:4b:a1:08:bc:da:
ac:f5:0f:9f:1a:ba:62:5a:29:f8:a4:b8:a9:5b:d0:69:51:86:
da:df:85:91:df:3d:68:51:a1:29:32:8c:b7:49:82:67:cb:23:
a8:df:70:1e:8e:36:9c:14:a7:79:cd:6d:41:ce:86:bb:4e:f8:
9d:c4:2b:f6:6e:69:38:97:67:99:3f:40:d5:42:00:38:09:0a:
6f:b8:88:ce:62:c4:d4:ed:da:20:03:74:cc:3c:53:b8:66:70:
76:47:40:ab
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZKT7sYPGl7By1mNKx4vq2wuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQxMDE2MDYwNTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTE3NjE2NWE5YTMwZDE0NjFhYWUyMTA4YjM5MmIwYWZlZDA4ODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpF1dqUQN/lPnuN7nYx/l2Zo/0bm
LNMBDqJBoTV6PNupVwN3kdH5Qsl1fgD0UzW9a4kCi1P4vNMIS/F/pa6w+vMN6r/K
kZDPCOq7yXmFGNTJGopP5Mh9tKqB4dH6tdWRFITUTFzKH1JXD4fnNgpNiTi7etxm
X5YbZoM2iodLFoUEdDfihN0YjECkFuL0LjTBz/uUED+xiEY5wQCy11kcWlbzPZr0
Pb7ce3FLbtGot4+U6gaCTYW8hjrzF+b2ruUl8kbhTy1pFlxN2G8ZGKidOU7/eYHq
m5D/gLhFnyrNvc0LKowsVf5XKnps/8pL0ghmwWPaXW+dk0QGBIHhoncKzwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDkXYWWpow0UYariEIs5Kwr+0IhoMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvT1JkaFphbWpEUlJocXVJUWl6a3JDdjdRaUdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCU5P0AwQD
W7rIAwQBW7rYAwQBXvGkAwQDXvGoMA0GCSqGSIb3DQEBCwUAA4IBAQAtioZlCiNe
D3B9c9n8rZWvFu0e+/bGOBpIQP/hu5ED+pb+MKhKqIfyWlwnY1aJC2t7PT9XA9MD
nnuwkhNvIshoR9HbXkp9hGVh0c5XjW4fIo9RYf/ifcKjqcA8D4H7bRdg3sGqYew4
L31zxVgcA4jzwvhQexf6tvICn+mMW/C+bnnIK9Mijk7op6W2RhcmB11I2Jx389rK
9YHMszYwS6EIvNqs9Q+fGrpiWin4pLipW9BpUYba34WR3z1oUaEpMoy3SYJnyyOo
33AejjacFKd5zW1Bzoa7TvidxCv2bmk4l2eZP0DVQgA4CQpvuIjOYsTU7dogA3TM
PFO4ZnB2R0Cr
-----END CERTIFICATE-----
Generated at Sat Oct 26 12:07:47 2024 by rpki-client on console-ams.rpki-client.org