Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/P8vBBGeLhKcFcnhVemtFD-Vlrn8.roa
File: P8vBBGeLhKcFcnhVemtFD-Vlrn8.roa (raw, json)
Hash identifier: xbgTgHWdpxQYSWYaaZZnc1CIbSDVT31qjhQh7z3L/2g=
Subject key identifier: 3F:CB:C1:04:67:8B:84:A7:05:72:78:55:7A:6B:45:0F:E5:65:AE:7F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0187F7881CE6ED80FB0414FE7044D93AACC2
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/P8vBBGeLhKcFcnhVemtFD-Vlrn8.roa
Signing time: Sun 07 May 2023 18:45:05 +0000
ROA not before: Sun 07 May 2023 18:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.194.0/23 maxlen: 24
91.186.216.0/22 maxlen: 24
178.253.22.0/23 maxlen: 24
178.253.55.0/24 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 11:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f7:88:1c:e6:ed:80:fb:04:14:fe:70:44:d9:3a:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 7 18:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fcbc104678b84a7057278557a6b450fe565ae7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:e2:28:24:77:2d:b1:c3:53:16:dd:b2:c4:
d5:14:2f:3c:14:50:4b:18:d6:f6:36:42:ae:95:ee:
2d:09:24:f9:bb:97:ae:92:ec:ee:e4:14:94:f1:45:
ad:3d:43:28:01:0e:c0:4d:5a:52:72:cb:df:1f:76:
0d:4f:68:bd:35:29:94:3f:29:d5:6d:f6:e5:05:43:
e3:fa:45:bb:03:33:9d:29:56:75:ed:c7:eb:72:30:
61:e5:08:2c:93:2f:62:eb:99:43:66:88:72:44:4b:
a1:49:5a:81:0d:21:f3:fb:c8:36:ee:61:a1:9d:50:
c4:06:f3:dd:e7:fe:bf:26:30:d6:e7:00:df:91:40:
8a:2b:8c:19:57:00:08:da:c9:2f:4b:ae:c5:f7:2d:
c5:d9:d9:56:04:09:b3:60:ae:f9:c2:bb:0e:2c:cb:
9d:7f:f6:6b:59:92:26:23:a3:4b:b7:01:ee:bd:96:
28:9e:7a:ea:82:50:60:d6:ed:8b:52:1f:0c:54:e6:
bc:39:70:61:f1:2f:7b:c6:c5:b9:4a:f6:a2:a7:b2:
56:81:33:9d:ee:54:b9:ad:24:b8:8d:7b:d9:a9:c7:
1f:86:44:fc:1c:5e:1f:aa:e3:2e:d6:a0:dc:b2:cc:
c2:36:02:33:a0:a0:7d:51:98:2a:f9:23:29:06:0f:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:C1:04:67:8B:84:A7:05:72:78:55:7A:6B:45:0F:E5:65:AE:7F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/P8vBBGeLhKcFcnhVemtFD-Vlrn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
91.186.194.0/23
91.186.216.0/22
178.253.22.0/23
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a7:1e:1f:af:05:2d:f0:0c:3b:c4:22:a2:c4:d9:ce:63:d7:
09:89:e2:1e:cf:12:d1:b2:87:60:52:8b:5a:88:0a:be:67:44:
bf:18:ac:21:f4:e1:a2:61:45:d6:bc:c7:cb:b8:ae:83:3f:8a:
9e:77:4e:cc:9b:2f:40:e7:25:1a:4f:3a:19:dc:0a:32:6d:b1:
71:52:2f:aa:5f:a5:79:c1:69:ff:e4:4e:a5:ec:14:17:e2:cd:
fc:20:3e:68:dc:7e:28:b9:24:3d:f5:ea:e5:50:8b:41:5e:d5:
8c:d6:02:2a:e8:56:81:02:ac:4d:d9:34:41:7b:1d:6b:15:19:
db:c3:4b:91:6f:fc:6c:14:9d:96:24:4c:4f:4a:15:de:99:e7:
02:76:7b:4f:b8:9f:a8:7e:5e:cc:a9:76:6c:57:00:a2:2f:ab:
ae:37:9e:78:fc:9f:47:ee:f3:b4:27:80:33:ae:49:ba:ec:b4:
bb:1d:f9:38:a8:02:ab:9e:c0:38:71:fe:f0:f7:aa:74:3d:a4:
22:d5:7b:36:00:86:fe:08:eb:0c:c1:76:9b:4a:ba:42:ba:7e:
77:19:4c:79:30:61:33:67:70:a3:25:e8:ac:00:27:34:09:59:
5b:af:39:87:b7:0a:5f:2c:b1:74:f8:19:5a:89:fb:12:c5:ae:
96:6c:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org