Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/W_JHU_9jfCzazkJCky7Hv8c9eMI.roa
File: W_JHU_9jfCzazkJCky7Hv8c9eMI.roa (raw, json)
Hash identifier: dexC9r69Z50TOfCUvP3JUdb+FjStto8cpoJwFGLcDmk=
Subject key identifier: 5B:F2:47:53:FF:63:7C:2C:DA:CE:42:42:93:2E:C7:BF:C7:3D:78:C2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01874D1155B2A99FC3125B8352CF4ABE5DD3
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/W_JHU_9jfCzazkJCky7Hv8c9eMI.roa
Signing time: Tue 04 Apr 2023 16:19:54 +0000
ROA not before: Tue 04 Apr 2023 16:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
178.253.22.0/23 maxlen: 24
178.253.26.0/23 maxlen: 24
178.253.32.0/24 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:11:55:b2:a9:9f:c3:12:5b:83:52:cf:4a:be:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 4 16:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bf24753ff637c2cdace4242932ec7bfc73d78c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:d2:f7:c3:8f:53:df:ca:ee:e9:e1:67:64:
18:1e:7d:85:3b:63:39:26:6f:d6:b6:2c:a0:d5:52:
dd:6a:25:ee:19:82:70:f6:81:fc:cd:0b:ee:bb:02:
fd:6f:93:21:e1:d3:7a:bf:d3:f0:26:8c:42:ea:35:
71:96:04:e9:71:5e:f7:46:55:90:c0:bc:2e:25:c3:
6c:2b:96:5e:6c:10:58:fe:a0:c3:25:d3:66:a3:b4:
96:4b:e3:e4:bb:d3:09:4e:68:e4:cf:c1:d6:66:1b:
81:bb:df:be:c5:0f:53:bd:76:39:3f:f7:bd:ee:92:
be:fa:8f:64:cf:d6:ff:0b:0b:73:b2:1e:34:df:d1:
61:cc:94:e5:7e:6a:17:a2:a4:68:e0:e4:36:0f:23:
6b:af:cf:c7:90:56:9c:b3:cb:ef:7e:16:9d:60:83:
6c:a8:df:e0:4f:2f:8c:42:ed:47:b0:ae:99:b0:29:
fd:25:fc:67:e1:21:34:b0:ea:ec:1d:2d:62:a3:b8:
b5:c6:89:3e:d9:57:a7:11:e9:31:25:88:76:b1:df:
ae:a9:99:01:55:81:c2:e9:8f:4b:f0:b9:2b:5b:8b:
b0:c3:02:ea:60:30:44:72:b0:dd:33:73:45:36:4e:
02:3b:32:c5:f6:25:a7:72:59:a9:01:7b:2f:2c:e8:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F2:47:53:FF:63:7C:2C:DA:CE:42:42:93:2E:C7:BF:C7:3D:78:C2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/W_JHU_9jfCzazkJCky7Hv8c9eMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
91.186.216.0/22
178.253.22.0/23
178.253.26.0/23
178.253.32.0/24
Signature Algorithm: sha256WithRSAEncryption
20:86:bf:91:55:51:71:47:5f:b4:85:cb:2e:fc:c2:f4:da:dd:
1d:71:c2:66:0c:91:d0:4f:44:af:6a:6d:5c:31:e8:e0:38:9d:
bb:33:e3:f1:97:3a:a4:eb:4d:f8:35:f8:5c:8e:75:63:7d:3a:
d8:98:08:d2:c5:20:22:ee:93:74:c7:6a:be:5f:35:97:c6:76:
cb:ce:2d:81:21:42:64:85:2e:09:ca:44:25:bc:9b:c8:64:a0:
f5:c5:05:a1:0d:5f:5f:11:55:a5:2a:ad:4f:f6:56:96:b6:29:
e3:7b:fa:db:fd:b2:d0:51:3b:54:b0:87:e6:6a:23:e9:f3:9c:
5d:56:e5:51:df:8a:81:e7:47:66:00:49:ea:b3:41:c0:90:66:
19:4f:43:75:bb:4b:0a:e9:20:f0:30:81:ba:61:f9:05:72:95:
ba:65:0b:00:45:39:68:db:ad:50:db:2a:21:79:79:c9:1f:ed:
d0:a1:e5:55:35:98:d9:09:d2:3c:d9:d4:78:eb:ce:b3:e5:09:
38:b3:c0:c3:01:ff:f0:d7:fb:a4:42:6e:64:e0:da:06:3e:f9:
70:f0:d3:e9:b6:de:04:cb:84:06:52:b0:0b:4d:ab:f3:10:ee:
d1:ac:fd:a2:98:d8:89:29:e4:d4:80:99:55:2b:aa:57:2c:6c:
aa:15:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org