Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/U3WafinNrBFgvDKx-JVOyeBzjK8.roa
File: U3WafinNrBFgvDKx-JVOyeBzjK8.roa (raw, json)
Hash identifier: g1aGmwac8Hg/5sbNcU+TQSGfNXCdQG5u4Zz/aTdkd+o=
Subject key identifier: 53:75:9A:7E:29:CD:AC:11:60:BC:32:B1:F8:95:4E:C9:E0:73:8C:AF
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018B2AF315F8FE45F1E25CDAC7ED45756A9E
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/U3WafinNrBFgvDKx-JVOyeBzjK8.roa
Signing time: Fri 13 Oct 2023 21:30:55 +0000
ROA not before: Fri 13 Oct 2023 21:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 05:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2a:f3:15:f8:fe:45:f1:e2:5c:da:c7:ed:45:75:6a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 13 21:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53759a7e29cdac1160bc32b1f8954ec9e0738caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:4c:6f:ef:b1:32:9b:eb:09:5b:cb:e3:0d:
37:56:3f:46:9e:2c:49:5e:18:02:10:86:fc:5e:9e:
4a:67:a7:43:ab:7b:74:0d:99:dd:bf:a7:4e:97:66:
1a:41:47:04:fd:1c:4b:78:9d:e6:0d:c9:c8:e2:78:
46:01:fc:b8:77:24:2e:53:09:06:f9:66:9e:1c:a5:
65:09:9b:ca:91:bf:c9:f9:89:35:6a:41:19:a4:e0:
c9:63:f0:00:fb:3f:9e:50:1b:ed:fa:a5:9d:a3:0f:
b2:e5:0c:6f:e1:4a:4a:c6:d2:bb:cf:d3:df:ce:7c:
f1:bf:43:f3:55:2e:a7:4a:fb:af:ee:c1:c8:1d:24:
3d:c3:be:58:fc:79:93:b7:15:30:21:db:44:9b:c1:
13:f9:2f:0f:e5:36:5a:68:80:ef:e2:60:cd:bb:ac:
b4:84:8f:c0:1e:ca:d3:cc:a2:b9:47:24:bf:6f:68:
ad:77:e9:39:98:46:a1:7b:e5:01:6d:aa:4b:e9:e8:
58:48:1b:d4:10:66:6e:76:98:86:02:75:8a:ab:4f:
6b:93:a1:f1:65:22:55:1e:f5:e7:3b:6e:d1:d0:9b:
17:c4:8d:52:ee:ac:a3:40:4b:5d:03:9c:8c:d0:7f:
5b:33:5f:48:bf:d4:9f:26:47:42:eb:14:a6:5c:20:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:75:9A:7E:29:CD:AC:11:60:BC:32:B1:F8:95:4E:C9:E0:73:8C:AF
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/U3WafinNrBFgvDKx-JVOyeBzjK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
26:b4:a9:38:c6:8d:e2:dc:d6:09:ca:b7:f2:6f:6a:39:7d:4a:
4e:c8:db:61:ce:44:6c:90:11:bc:64:14:cf:66:55:cd:73:8c:
15:b1:ab:10:ec:c6:5c:9e:99:7b:63:8a:9d:64:27:84:6a:b9:
b1:fb:e4:97:74:5f:f5:76:ac:fb:98:51:fd:f2:70:b9:ad:b3:
87:b4:31:ab:77:b5:cf:35:cb:f8:50:e1:f0:7f:2f:8b:dc:57:
48:c3:0a:7b:cf:1e:09:92:29:ac:df:88:0a:c1:f8:5a:8d:ff:
ed:2e:86:42:90:56:f5:f1:2e:66:f2:46:ea:e2:23:6f:3d:d8:
e9:70:14:c9:06:fa:b5:0b:81:5c:1e:4e:29:a3:71:0e:58:2c:
af:0a:bc:a5:0d:38:fe:00:7c:ee:0d:26:66:74:87:d7:a5:dd:
54:10:20:49:fc:22:45:9f:d6:7a:1c:75:12:e6:b4:e3:a8:04:
ae:48:7d:a4:c7:2e:37:ce:00:d0:33:24:8e:bd:b6:da:0a:6f:
af:49:71:d5:4f:10:91:cc:08:ba:de:43:f1:1e:bd:b0:c0:f6:
93:36:39:22:74:54:79:c3:16:41:57:88:c8:99:8b:01:62:12:
19:d2:bf:79:73:34:73:a5:b1:b1:94:fc:64:e6:a6:8d:bd:aa:
a1:10:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org