Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/RwA56V-aZ-pKzGXDA2tjxf1_MdU.roa
File: RwA56V-aZ-pKzGXDA2tjxf1_MdU.roa (raw, json)
Hash identifier: jbY+Yv1KS4yhlDZQtFHcNrtQkjyvp/7uxUeFpiaYBzM=
Subject key identifier: 47:00:39:E9:5F:9A:67:EA:4A:CC:65:C3:03:6B:63:C5:FD:7F:31:D5
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019293EEC6D40A9BA1480D130D209F26B5BF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/RwA56V-aZ-pKzGXDA2tjxf1_MdU.roa
Signing time: Wed 16 Oct 2024 06:05:52 +0000
ROA not before: Wed 16 Oct 2024 06:05:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.248.0/22 maxlen: 22
178.253.12.0/23 maxlen: 24
178.253.16.0/24 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 17:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:93:ee:c6:d4:0a:9b:a1:48:0d:13:0d:20:9f:26:b5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 16 06:05:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=470039e95f9a67ea4acc65c3036b63c5fd7f31d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:f4:f9:81:1d:00:10:ec:c7:93:f1:87:b4:
38:4c:bf:f4:7f:8e:89:ed:d3:77:33:06:fa:ef:86:
89:01:77:e8:16:a3:59:b1:c2:da:6a:a0:ad:87:c1:
c0:46:35:e2:a0:4a:ba:f1:54:1e:45:ac:4d:79:33:
75:f5:e9:0b:cf:21:cd:d2:48:ca:83:03:6c:52:fa:
9c:d6:e4:2a:d9:9d:a5:d8:40:4d:47:ce:8d:c2:47:
87:b3:f9:82:ad:97:23:c6:bb:5a:a7:fe:8f:4a:2e:
33:cb:8e:66:83:36:a7:0c:8b:4a:db:1d:da:b4:e2:
08:3e:26:fc:5b:18:c0:4e:65:52:7d:30:c2:03:45:
99:eb:70:2d:57:9b:d3:03:57:5a:96:c0:f9:d6:22:
82:a6:f8:25:21:84:79:15:f2:b5:f3:22:7f:f3:22:
6d:4d:fd:a0:53:39:fe:4e:b1:94:74:22:9a:ba:57:
72:20:f4:72:9e:99:1f:a7:9f:4c:2e:dd:78:ef:5d:
49:6a:7b:5e:56:fd:a3:3a:9d:f1:79:86:66:11:cd:
71:45:79:41:1d:e5:58:1f:53:39:f4:ef:c0:cb:88:
bb:6d:e9:83:6c:84:24:8c:d8:cf:f1:9d:eb:87:9e:
f4:36:a5:c9:cb:c2:01:c0:24:fe:0a:b9:c5:3e:80:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:00:39:E9:5F:9A:67:EA:4A:CC:65:C3:03:6B:63:C5:FD:7F:31:D5
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/RwA56V-aZ-pKzGXDA2tjxf1_MdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
178.253.12.0/23
178.253.16.0/24
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:00:33:db:8b:42:55:ca:f9:8a:2f:a4:99:4d:de:16:24:35:
79:ef:51:c9:c6:35:84:de:45:69:2a:18:de:cb:2e:99:2a:84:
5e:98:ce:31:28:b0:a0:eb:fa:42:14:3e:f4:dc:4d:c9:40:9b:
5a:4b:3c:fc:07:0f:5d:aa:6e:64:87:30:9c:a9:ed:3e:3c:86:
a8:58:cc:7c:b1:5d:4d:70:dc:d9:d0:ac:be:02:35:d6:ad:1c:
c7:cc:26:b8:b7:48:2f:c4:63:bc:15:36:97:eb:98:3b:ea:bb:
89:0d:5f:21:03:4c:b5:44:ee:52:39:34:bf:13:3d:a4:6c:53:
12:91:c3:9c:35:93:2e:85:5d:d9:93:20:e6:85:61:f4:37:33:
85:ac:65:2f:1b:d7:8f:b1:52:17:58:64:95:57:07:e0:d5:2a:
30:fd:88:f4:f4:91:11:32:90:41:d6:46:87:cf:48:6b:64:af:
25:83:8f:52:4f:25:db:71:a3:24:38:80:09:ea:92:78:c2:d3:
c9:fa:a9:6e:05:39:7f:af:24:91:17:1e:ac:e7:7d:5a:59:1f:
14:72:b2:b9:0c:85:6c:93:c4:57:5e:03:5f:e3:03:14:5b:f4:
73:fd:bc:d0:f0:2f:84:20:a8:fa:7e:aa:0b:23:c7:51:52:5b:
87:ff:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:43:13 2024 by rpki-client on console-fra.rpki-client.org