Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/R_fCcYlIfK470_FQHugBRwDjBAo.roa
File: R_fCcYlIfK470_FQHugBRwDjBAo.roa (raw, json)
Hash identifier: saAfC+vHCxXXIwaZOYUSVlVMO4q097zPqekV1g9o9LA=
Subject key identifier: 47:F7:C2:71:89:48:7C:AE:3B:D3:F1:50:1E:E8:01:47:00:E3:04:0A
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CDB28E3EC5186CFF86973F208D9CA
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/R_fCcYlIfK470_FQHugBRwDjBAo.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 83.147.240.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 16:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:db:28:e3:ec:51:86:cf:f8:69:73:f2:08:d9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47f7c27189487cae3bd3f1501ee8014700e3040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:09:4a:92:60:a9:21:c2:c8:ec:6b:9c:cc:
d8:ff:04:95:e0:92:64:d8:54:3d:51:4e:7e:e3:de:
6e:d9:1a:15:ea:cb:98:36:3e:c6:65:b2:d8:69:ec:
62:2b:47:bd:0f:2a:ba:65:b4:bb:ab:a4:63:96:ff:
d5:0c:fb:46:37:0b:7f:90:f9:e3:72:de:86:0b:66:
c3:81:59:5a:84:35:49:29:13:54:d5:aa:ae:aa:f1:
4d:48:a5:10:45:b5:fc:a0:97:d4:86:4b:6c:24:7a:
4f:cb:91:dd:66:cf:b0:14:3f:a6:4d:3c:9b:27:ec:
ed:b3:5e:48:4b:b0:eb:25:82:5a:1a:3f:d1:9f:11:
b6:f2:91:31:ad:21:c6:9e:cf:6c:c8:85:f3:3c:1a:
1e:6b:d6:ba:84:f1:33:50:a0:31:cb:b4:15:3d:48:
5d:8d:ff:5c:79:a4:7c:44:8f:9f:d7:af:37:a6:77:
79:a0:59:05:77:6a:2c:f2:72:26:bc:f4:7b:a0:e9:
9e:b5:32:b5:72:bf:71:bf:bc:20:c6:8b:9e:0c:6d:
cd:c1:6e:b6:08:07:1a:57:79:8e:5b:af:b2:64:97:
42:43:db:81:48:61:62:50:42:27:7a:09:aa:2c:8d:
75:43:21:71:8b:81:0e:20:94:c5:d1:2a:45:7c:8b:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:C2:71:89:48:7C:AE:3B:D3:F1:50:1E:E8:01:47:00:E3:04:0A
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/R_fCcYlIfK470_FQHugBRwDjBAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/21
Signature Algorithm: sha256WithRSAEncryption
25:26:fc:95:d1:2e:c8:55:8f:ed:0c:45:2f:9e:c6:aa:2f:cc:
3d:1d:bf:78:c0:f7:22:5e:54:ab:7b:54:48:c5:83:78:4d:31:
5c:0d:cd:ac:47:a3:42:d4:c6:58:dc:c8:e0:f7:44:0f:64:ac:
c8:79:7b:c9:13:c9:e8:b3:bd:f6:55:b5:b2:e6:c0:ca:c7:b6:
4a:42:1d:19:86:d5:31:5c:5e:ca:f8:27:5e:c6:3f:88:07:ec:
a6:61:8e:bf:6f:7a:03:44:51:a4:2f:04:4b:9e:55:cb:ff:aa:
d9:fd:e5:b7:73:41:49:b5:9c:a5:b8:08:c0:8d:33:82:7b:62:
a2:61:0c:70:62:15:5a:9f:dc:86:1d:2b:1c:ce:d6:fb:ac:a8:
b5:96:45:dd:50:9b:5b:26:bd:af:f9:01:b8:be:0e:6a:b9:32:
36:86:2d:51:b9:51:c6:9e:c9:62:b5:18:2f:a4:a5:d5:af:3f:
01:6c:f1:e2:75:6c:5c:7a:51:11:65:45:4a:cb:48:91:cd:8c:
84:2e:3b:11:2e:3e:99:b9:c6:ce:15:00:b4:8b:d0:96:fd:db:
82:d1:b3:92:bd:41:67:79:1c:43:9d:8d:7a:db:79:e9:da:b8:
50:99:8b:35:02:54:05:9b:dc:a7:06:21:76:9b:0b:e7:50:ad:
79:f6:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org