Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/VPIjNu1JR5iBKOvDsfdrtoqSoJU.roa
File: VPIjNu1JR5iBKOvDsfdrtoqSoJU.roa (raw, json)
Hash identifier: STWor/JWfkVUR4Qi5mFT31rEMqZKyneWUTNb49bEQh0=
Subject key identifier: 54:F2:23:36:ED:49:47:98:81:28:EB:C3:B1:F7:6B:B6:8A:92:A0:95
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018D82646B0E5A2BDB1B5B3172FFBB16DD0E
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/VPIjNu1JR5iBKOvDsfdrtoqSoJU.roa
Signing time: Wed 07 Feb 2024 07:07:15 +0000
ROA not before: Wed 07 Feb 2024 07:07:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 83.147.216.0/24 maxlen: 24
94.241.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 23:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:82:64:6b:0e:5a:2b:db:1b:5b:31:72:ff:bb:16:dd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 7 07:07:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54f22336ed4947988128ebc3b1f76bb68a92a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:bd:0c:30:43:40:3f:82:0d:34:a2:0f:4d:
0a:b2:d4:0d:b1:6d:9b:4c:cd:56:85:09:04:4a:4f:
56:16:86:dc:4d:ae:23:80:87:2f:8e:6d:e3:df:2e:
fa:5a:d1:a8:51:19:67:b3:b7:32:a4:c7:1a:52:de:
33:b7:58:76:b7:3d:17:bc:c6:d8:77:db:56:12:12:
14:91:05:55:c1:83:85:8e:0a:ec:ad:c0:55:11:e1:
b4:64:d8:bc:c2:bf:60:23:77:f6:59:94:41:c4:10:
05:2e:d4:3f:62:3d:0c:19:25:49:bf:b0:ea:92:a6:
27:77:6c:b5:b7:69:ed:40:9e:8d:a0:5e:42:e8:46:
df:3e:fa:5e:78:9f:0e:b6:e5:f1:2b:31:71:e5:bd:
38:e6:3b:80:45:7f:d1:05:3d:97:de:79:76:f6:e3:
c1:38:ca:88:e1:f9:01:7a:0d:1c:52:19:de:5a:4d:
8a:ce:6a:24:0c:ce:ff:9a:2b:ee:39:5b:99:ba:9a:
34:8e:af:b5:70:fb:38:e7:68:9a:b5:84:ee:7f:c9:
41:39:49:0c:7c:b7:ec:0a:d0:c5:11:a4:04:3d:a8:
fb:b1:39:26:d2:44:34:31:23:ef:97:7f:20:15:12:
eb:73:98:e2:66:c8:5a:ca:84:a8:5f:d2:05:57:5c:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F2:23:36:ED:49:47:98:81:28:EB:C3:B1:F7:6B:B6:8A:92:A0:95
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/VPIjNu1JR5iBKOvDsfdrtoqSoJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/24
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
75:cc:de:65:6d:42:56:0f:95:17:ed:d4:68:d7:82:59:b2:a2:
a8:0c:64:0a:a0:03:a4:88:4b:76:2d:6b:54:ef:63:b0:3b:3f:
6e:20:5c:02:ac:bf:46:19:30:9e:af:07:b2:d7:08:0f:be:79:
82:3a:98:df:56:69:7b:68:dc:cb:b7:ca:78:31:ac:f3:cf:f2:
ec:ec:2b:20:12:7a:99:8a:f4:7f:d7:c9:4e:07:b9:21:8a:ad:
22:ca:f7:3d:df:83:32:f7:b5:75:2d:8a:44:b6:c6:1a:4b:7e:
4a:15:05:8d:1a:ef:09:19:53:80:94:e8:ce:41:66:bb:d0:f6:
67:fe:e9:2f:cf:56:9c:d0:f3:aa:26:d5:88:0c:f1:83:4c:50:
7a:22:44:6e:be:19:e0:29:f1:28:df:b2:5e:da:cc:b6:6e:ac:
57:cf:2b:fa:e5:ea:b9:b7:c9:5b:56:74:75:1e:bb:87:0d:45:
7e:85:71:87:e1:51:9b:d0:68:54:f0:ce:c4:64:09:ad:7e:03:
ae:bb:89:77:80:96:c8:58:b0:b1:18:57:fe:35:b9:66:66:a3:
63:08:53:87:c0:c0:0e:61:89:0f:54:64:bc:37:04:b5:6c:cf:
6e:65:6b:ad:64:53:54:dd:35:50:91:b0:ae:09:49:28:0a:4e:
38:57:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 00:21:41 2024 by rpki-client on console-fra.rpki-client.org