Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/VShZNqStp76hVrAu_3mCWA8nbDE.roa
File: VShZNqStp76hVrAu_3mCWA8nbDE.roa (raw, json)
Hash identifier: YWpXC9uf4ohNCC3FmncAgdb6CU5e6c/Js5qUpzBOD+Y=
Subject key identifier: 55:28:59:36:A4:AD:A7:BE:A1:56:B0:2E:FF:79:82:58:0F:27:6C:31
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018ADD89A49F154B79AC3B192F737B3DE9AC
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/VShZNqStp76hVrAu_3mCWA8nbDE.roa
Signing time: Thu 28 Sep 2023 20:44:59 +0000
ROA not before: Thu 28 Sep 2023 20:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 11:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:89:a4:9f:15:4b:79:ac:3b:19:2f:73:7b:3d:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 28 20:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55285936a4ada7bea156b02eff7982580f276c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:88:3f:5d:65:45:8b:5c:5d:3d:90:fa:c5:
48:ee:ae:c4:88:fd:75:9a:e9:c3:14:42:c9:62:8c:
23:81:f5:c1:29:57:a7:f4:38:2b:e2:42:a8:b4:5f:
a3:d2:97:d1:93:6d:a6:c6:35:33:3d:ba:ca:2d:e9:
3b:ed:ba:e9:5d:fa:32:a8:6c:83:ee:14:9b:28:79:
8b:0d:0c:be:57:24:3b:fb:a0:e7:41:81:d1:c3:95:
67:43:fa:e6:45:24:65:d6:e2:e1:b3:81:15:f5:36:
e2:4e:f4:a0:e1:03:fe:e7:db:47:d8:e1:86:4a:c0:
48:71:e1:5e:4b:d7:89:d4:99:3a:b4:22:27:11:56:
2f:8e:d3:3c:b8:d2:57:f8:cf:3e:3c:51:91:fa:07:
26:47:28:b2:27:f0:e9:8e:08:bb:58:39:a9:03:5a:
bc:a3:ea:07:12:6a:a7:56:19:dc:c5:1d:c0:fa:0f:
30:a9:1f:e1:97:75:80:74:3f:61:b0:ef:5e:08:7b:
75:5c:d6:ca:93:72:0b:2e:76:0e:38:f0:85:c2:e5:
cd:9d:0d:47:d3:6c:26:19:72:54:d9:af:98:61:ab:
24:b3:29:bd:66:8c:18:0b:19:5d:70:a2:79:a2:2d:
81:eb:cf:93:4e:d0:a1:ee:32:98:d4:a9:36:c4:70:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:59:36:A4:AD:A7:BE:A1:56:B0:2E:FF:79:82:58:0F:27:6C:31
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/VShZNqStp76hVrAu_3mCWA8nbDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
03:dc:b4:53:4e:8b:e8:29:75:12:27:b6:b2:8f:90:6c:3c:84:
52:1a:90:7d:7b:33:09:5a:78:da:4b:fc:d6:51:49:39:6f:68:
a9:5f:40:03:f7:ec:3a:c6:78:46:69:95:7a:4f:d7:89:d0:64:
0a:3b:4f:ef:98:26:dc:d3:d3:ce:03:41:a9:8a:1d:bf:ab:70:
4a:7a:ba:9d:4c:7f:52:13:e6:2b:e5:d2:ee:93:6b:18:87:af:
2c:12:24:e5:db:c5:2c:78:91:72:51:5a:9f:77:db:e0:85:e0:
f8:2b:7f:cd:3f:65:98:88:8d:fb:da:e8:6e:d9:92:60:56:86:
8b:51:df:c6:26:33:79:1b:e1:25:03:8f:1a:75:45:c3:66:c4:
c9:8c:88:40:2c:db:80:d8:5d:a2:4f:67:48:de:52:cc:6c:45:
6f:8b:11:68:80:f5:40:e7:fa:d0:0d:17:e0:af:f3:b7:34:ad:
c1:ba:41:96:f4:35:0d:a7:b1:76:cd:30:88:d2:97:0b:8a:60:
42:a2:75:bc:12:bf:04:3b:c6:fa:52:cb:a4:03:a4:8a:23:f6:
ac:7f:4c:bd:0b:2d:57:0c:28:93:2f:c7:06:e7:4a:9a:8a:b7:
9c:63:f0:98:bd:07:ab:63:e5:3d:95:37:de:d5:01:48:14:d0:
52:10:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org