Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/W8MMT5U7nTofau2f2v2RBj1vapc.roa
File: W8MMT5U7nTofau2f2v2RBj1vapc.roa (raw, json)
Hash identifier: UK+N/Np/o8xGR4SPJ35ZdUT4ruI+J068ZMZypucya9w=
Subject key identifier: 5B:C3:0C:4F:95:3B:9D:3A:1F:6A:ED:9F:DA:FD:91:06:3D:6F:6A:97
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CEBB668ECA5C09CCF22AE8E14D8FF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/W8MMT5U7nTofau2f2v2RBj1vapc.roa
Signing time: Mon 02 Jan 2023 03:36:01 +0000
ROA not before: Mon 02 Jan 2023 03:36:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211584
IP address blocks: 83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 16:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:eb:b6:68:ec:a5:c0:9c:cf:22:ae:8e:14:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:36:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bc30c4f953b9d3a1f6aed9fdafd91063d6f6a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:63:00:01:58:fa:9d:68:b3:50:52:b5:b3:
fe:94:85:26:c3:e3:84:2a:7c:cb:23:d2:aa:71:db:
36:d0:5c:44:ee:e8:6e:57:1b:8b:75:4b:89:01:68:
e5:a2:83:b0:42:d3:0e:82:97:ae:4a:c9:ff:dc:be:
c7:9a:a5:c4:1e:5c:70:97:dd:1d:96:f5:a6:b4:22:
22:ac:1d:74:3e:bf:56:b9:83:95:ce:0e:f7:61:01:
1d:0e:fd:0e:38:62:33:96:e6:cc:b4:04:03:8a:0c:
c2:b3:ef:56:88:38:30:b5:1d:10:bc:30:13:38:7e:
7c:09:a5:9e:2b:93:79:a6:18:29:06:ae:6c:32:63:
9b:37:8a:2e:b0:7c:69:c3:10:9c:38:e9:12:49:45:
88:36:20:2a:b3:0e:cb:d5:c3:6e:76:d1:5a:1a:b1:
59:7c:98:9f:f9:6e:92:62:7d:bd:a0:c7:9a:f0:b9:
4f:94:f1:36:e2:98:74:45:97:a6:39:6d:ea:ee:ad:
2d:54:91:85:82:5f:64:9b:d8:f5:f0:ee:93:d8:cb:
64:89:1b:95:c0:f7:6a:a8:0a:a3:ec:b6:a3:d3:3f:
7a:c1:f2:f3:27:bf:25:f1:7e:96:57:c0:d6:e5:17:
33:d3:d5:e4:65:0b:b3:e4:23:93:d6:9a:5e:88:0d:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C3:0C:4F:95:3B:9D:3A:1F:6A:ED:9F:DA:FD:91:06:3D:6F:6A:97
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/W8MMT5U7nTofau2f2v2RBj1vapc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
Signature Algorithm: sha256WithRSAEncryption
17:29:d5:fc:bf:58:08:42:3a:68:de:3d:e8:42:dd:c8:1f:a7:
b0:6e:42:1f:6b:24:3d:c3:55:6d:d7:97:2c:3b:1e:cf:f9:b7:
22:00:c3:a9:70:7e:45:a4:77:d1:30:4f:89:e5:9f:ba:00:3e:
c8:88:2a:56:7e:d9:7a:49:d9:23:08:92:1a:fd:d8:cc:4f:05:
1f:15:42:6c:d4:e5:75:c3:cc:bb:09:64:72:f8:db:5d:bc:0b:
84:e3:4d:0e:05:ae:70:92:66:fb:6a:d9:02:5f:5e:3e:99:7f:
ed:7d:6f:75:46:cb:97:d7:3d:ed:f4:a5:d0:87:0a:9a:9b:0c:
78:50:8b:1d:c4:1b:78:56:7a:f9:c4:c8:bd:9a:a6:f2:20:66:
6b:29:50:6d:1e:cd:4e:91:1f:94:c3:f7:bc:fe:de:b9:22:35:
42:6c:0b:8f:93:f8:04:d6:c8:78:1c:fa:37:ec:ed:3a:e3:cf:
ae:20:b1:c6:98:c6:0f:0b:d7:56:3f:07:bc:a4:7e:20:07:25:
15:58:b3:0c:eb:a9:4c:a9:ca:4c:b3:ae:14:d3:e8:8e:bb:a9:
fd:d6:4e:7a:4a:d9:42:4d:b9:da:24:ec:ad:c7:bb:32:70:2b:
19:a9:e1:65:c0:e2:38:a3:56:c2:92:c4:4a:33:d6:ff:18:35:
33:47:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org