Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/X4LyP0Mx7Yc6xiF7Fm4AxirmB0M.roa
File: X4LyP0Mx7Yc6xiF7Fm4AxirmB0M.roa (raw, json)
Hash identifier: mTllwtTPnPS5+/jWHpbf02w+fc8t5duGkp/KRyKxK/0=
Subject key identifier: 5F:82:F2:3F:43:31:ED:87:3A:C6:21:7B:16:6E:00:C6:2A:E6:07:43
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01926C0065A3506FC78E537990ADCF2B1F08
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/X4LyP0Mx7Yc6xiF7Fm4AxirmB0M.roa
Signing time: Tue 08 Oct 2024 12:00:18 +0000
ROA not before: Tue 08 Oct 2024 12:00:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.248.0/22 maxlen: 22
94.241.164.0/23 maxlen: 23
178.253.12.0/23 maxlen: 24
178.253.16.0/24 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 06:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:00:65:a3:50:6f:c7:8e:53:79:90:ad:cf:2b:1f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 8 12:00:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f82f23f4331ed873ac6217b166e00c62ae60743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:29:14:1b:de:96:01:df:8a:60:a5:81:cb:
a5:65:c3:99:14:e1:ba:85:da:7e:e7:1a:6b:37:46:
00:d0:cf:fe:ba:2c:3b:45:74:b8:e0:2d:b3:03:30:
14:55:d2:b4:4e:6c:db:bd:04:9b:a6:5a:af:1a:55:
1d:3c:23:57:a2:b7:df:57:16:63:71:14:a4:05:da:
81:56:c1:6e:01:65:db:9e:bf:4a:5c:10:63:fa:93:
5a:18:01:11:73:8c:f0:6b:08:87:89:7b:03:28:87:
a1:d5:3a:ae:10:fc:79:22:fb:db:9b:ec:b3:fb:40:
30:c3:fd:73:7b:bc:e3:66:c2:02:ae:7b:fa:75:83:
ff:55:3a:c4:13:e2:78:61:b4:0b:a8:12:0f:11:b8:
9f:6b:e9:3e:b8:ce:2d:cf:f7:e4:dd:cd:7f:0a:39:
bd:e5:81:7b:75:6a:79:e0:aa:5f:b4:98:23:f9:34:
71:2b:1b:6b:77:2d:c3:24:54:a3:4b:b5:8a:42:9c:
d9:68:08:dd:43:50:98:35:90:a7:c5:2e:53:59:a4:
de:a9:9d:42:d5:c7:96:44:98:6f:08:91:6c:8c:31:
3a:b0:47:5f:7b:d2:50:07:5e:a4:59:72:e2:68:17:
20:4f:ca:d6:a5:bf:f1:7d:8c:5e:b6:c5:e0:30:3b:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:82:F2:3F:43:31:ED:87:3A:C6:21:7B:16:6E:00:C6:2A:E6:07:43
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/X4LyP0Mx7Yc6xiF7Fm4AxirmB0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
94.241.164.0/23
178.253.12.0/23
178.253.16.0/24
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:bc:7d:ad:35:b0:9f:4f:fb:20:34:d2:e5:48:9f:40:4c:cb:
59:97:f1:eb:39:a3:ff:79:6d:3a:e7:bd:f3:05:7d:90:89:a2:
bd:74:0d:ee:63:f6:0e:1d:fa:73:3a:8d:f7:83:25:b2:97:df:
cb:61:d4:4e:2c:c2:70:87:d7:26:de:ee:f2:20:5b:62:ae:95:
d1:06:c8:77:8b:eb:2c:1f:4e:ec:5d:04:9d:a2:ca:69:8a:8a:
35:c4:33:91:8b:e2:80:b3:c7:6d:bb:80:53:54:bd:46:78:15:
dd:73:8b:6f:af:6c:08:58:28:7a:43:c5:36:66:02:78:dc:ba:
2c:cb:aa:33:46:44:11:1e:11:56:22:18:be:44:78:60:f7:2c:
5e:d4:c1:1b:0a:9d:68:25:73:7f:1c:37:aa:00:fe:92:c5:e8:
5e:30:fa:f0:71:c5:b2:4e:ed:3e:32:de:4f:f1:26:d4:2b:ac:
81:2f:39:cc:bc:34:eb:e7:51:b8:9c:09:c5:7f:72:aa:cd:a6:
3f:d9:8f:e3:ce:51:dd:0a:71:7e:18:d3:fe:bd:ea:1b:dc:67:
70:ff:b9:cb:bc:1a:7a:1f:56:ae:c5:80:d2:82:14:38:11:b2:
b8:a4:f6:78:0b:04:7c:36:91:2e:3c:c6:59:1e:2d:b4:94:56:
85:33:2b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 08:33:52 2024 by rpki-client on console-ams.rpki-client.org