Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/UDVwkSPnGVJcWy_PZxtvPFKZ5J0.roa
File: UDVwkSPnGVJcWy_PZxtvPFKZ5J0.roa (raw, json)
Hash identifier: 2a8DE2yeYaIW9dGdWa4uuxptZdCMlhUQE92w63a4IE0=
Subject key identifier: 50:35:70:91:23:E7:19:52:5C:5B:2F:CF:67:1B:6F:3C:52:99:E4:9D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018F332141B0B4B6653B1DE5391C2575D74F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/UDVwkSPnGVJcWy_PZxtvPFKZ5J0.roa
Signing time: Wed 01 May 2024 07:49:28 +0000
ROA not before: Wed 01 May 2024 07:49:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 83.147.232.0/22 maxlen: 24
91.186.194.0/23 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 15:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:21:41:b0:b4:b6:65:3b:1d:e5:39:1c:25:75:d7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 1 07:49:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5035709123e719525c5b2fcf671b6f3c5299e49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:a8:95:9f:ae:93:bf:03:66:c9:64:f3:fe:
f3:3c:29:50:e4:84:11:66:a9:24:73:1f:cd:2e:28:
e2:50:53:f5:2b:f2:86:8b:f7:50:91:ba:9d:81:6d:
2e:3b:aa:1c:5e:2f:c2:d9:57:62:b0:6f:17:d7:3b:
71:83:21:66:54:df:de:08:6f:35:55:82:d4:4e:bf:
fd:49:86:95:ac:37:5d:7d:c3:80:5a:a5:f3:e2:07:
76:f4:ff:04:55:4e:12:17:8f:08:0e:05:af:2d:d1:
54:2c:5c:1f:f6:31:4f:21:57:8c:af:77:e7:b3:fd:
71:ff:14:07:0f:66:cd:64:56:71:a8:4c:cd:43:78:
05:8c:ea:c3:f0:a1:64:fb:57:37:c1:e8:42:e4:9c:
52:f6:cf:b2:04:31:1b:2c:98:3d:aa:f9:60:4f:d1:
45:ee:b9:b3:77:bd:4b:c0:14:d7:b4:bc:3b:de:f6:
08:45:3c:a4:5f:6f:b3:0d:50:a2:ad:6c:28:89:e9:
f5:f7:e8:88:c7:c4:f4:43:71:46:cc:cf:b9:fe:d3:
e6:84:a6:c4:13:2a:1e:ef:db:c6:1e:93:de:d8:72:
bd:63:57:13:dc:59:29:86:7d:e4:bc:d6:b6:3f:ef:
16:c7:14:69:53:6c:a5:95:16:34:3f:fd:20:5d:e0:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:35:70:91:23:E7:19:52:5C:5B:2F:CF:67:1B:6F:3C:52:99:E4:9D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/UDVwkSPnGVJcWy_PZxtvPFKZ5J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
91.186.194.0/23
91.186.216.0/23
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
63:b3:56:a8:e2:bc:cd:03:2e:56:bb:de:f5:0f:e4:2a:09:b2:
8b:6b:bc:37:cc:23:91:e4:42:70:37:90:da:c1:c3:0f:2e:05:
0d:0f:a1:0d:4e:7e:cf:48:4a:ce:2a:41:4f:c3:90:c4:85:5c:
95:e0:28:7a:23:88:71:25:07:8a:d0:ba:25:f8:71:da:ba:fd:
13:62:89:85:ea:ad:c3:e6:18:41:54:02:46:2e:e7:01:a5:12:
a1:5c:83:6b:09:b0:95:24:f7:ae:bf:d3:ca:3a:3f:9e:a9:a4:
ef:eb:30:98:3c:08:95:9e:43:a0:c3:55:1c:4a:a4:23:67:02:
9d:a5:85:bd:07:fc:05:b5:16:fd:cf:ac:61:ba:58:f9:96:8c:
66:f5:65:66:b3:37:40:90:d7:d1:dd:cc:aa:e3:92:f2:b5:4a:
ae:3c:9e:18:d5:4d:c8:b0:de:8e:6a:33:5c:37:12:6a:e4:9f:
08:53:62:59:55:c6:f7:91:51:7b:ec:ef:6d:1d:d9:7f:d2:b8:
89:cb:e9:3e:75:a4:01:b1:99:d5:bb:c3:73:34:57:04:24:67:
eb:e2:6a:03:06:72:06:ea:7a:94:7a:67:d2:1a:17:12:d8:45:
3c:1c:76:ed:74:2c:48:0a:d3:49:0e:7c:b8:5f:81:93:1d:6f:
06:29:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org