Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/XfQYXxbFBIXxjZLOG7lznISqfJw.roa
File: XfQYXxbFBIXxjZLOG7lznISqfJw.roa (raw, json)
Hash identifier: r8rrKeXgrcNtCxhsab8bl8Z+sp9bjNBwKaDllLXZLmM=
Subject key identifier: 5D:F4:18:5F:16:C5:04:85:F1:8D:92:CE:1B:B9:73:9C:84:AA:7C:9C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018673903B8FA4E8555305D54E4707AB78F0
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/XfQYXxbFBIXxjZLOG7lznISqfJw.roa
Signing time: Tue 21 Feb 2023 10:41:17 +0000
ROA not before: Tue 21 Feb 2023 10:41:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.204.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
178.253.22.0/23 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 10:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:90:3b:8f:a4:e8:55:53:05:d5:4e:47:07:ab:78:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 21 10:41:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5df4185f16c50485f18d92ce1bb9739c84aa7c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:ed:7e:25:96:57:8e:08:f1:54:86:66:ca:
fe:94:f7:1c:e1:81:3d:9d:64:77:dc:25:08:3f:82:
b8:67:22:88:07:83:9d:ef:12:1e:fa:38:25:60:3f:
5e:b4:af:1a:00:ce:1a:6a:79:2d:f2:69:36:38:30:
b2:81:5a:bb:53:fb:1f:70:70:15:3c:15:62:8e:41:
41:89:2b:53:56:ae:81:ba:a1:1e:0e:54:93:bf:13:
01:0e:0a:07:c6:69:3d:42:3c:ca:98:5e:73:13:71:
0a:3c:2c:65:32:ff:3a:78:11:d3:9c:f9:0e:c8:6e:
86:bf:29:4c:5c:98:13:7a:e7:55:db:f3:c1:72:b0:
86:a7:6f:17:f4:d3:9d:1a:e2:bb:d4:35:a0:06:7a:
cd:a1:d2:44:18:47:88:bb:b6:f2:fe:6b:62:fb:50:
1c:d5:cb:2c:87:2a:1d:a4:c9:50:6a:60:08:5c:fe:
7a:55:cf:91:28:6d:85:50:0c:10:33:f1:e9:30:df:
d1:b6:c9:61:97:61:18:ec:bd:ec:ce:cb:c9:44:79:
97:63:4a:e5:d8:da:90:2d:c1:d3:72:ce:77:6f:46:
a5:b5:30:e4:64:6c:38:f1:39:e0:57:be:97:dd:bb:
ab:42:37:fa:50:b0:37:66:86:75:4e:42:c7:81:e9:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F4:18:5F:16:C5:04:85:F1:8D:92:CE:1B:B9:73:9C:84:AA:7C:9C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/XfQYXxbFBIXxjZLOG7lznISqfJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
91.186.204.0/22
91.186.216.0/21
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:22:2e:1d:c1:4e:86:72:08:c3:45:e7:0f:ff:4c:c2:59:20:
36:af:0f:d3:5f:ee:57:2d:61:96:75:a4:d3:d9:74:cc:79:55:
99:fb:6d:21:e5:9f:5b:c5:a3:59:2b:00:a7:97:2f:63:a3:bf:
d3:ad:7b:b7:b8:a7:4b:dd:2e:85:64:7f:e2:50:42:2c:9b:36:
a9:ad:20:cf:13:ba:5c:f3:b8:49:62:1c:34:90:f5:7c:78:df:
98:30:bd:53:94:c3:3e:64:1d:5c:1e:92:0e:7b:48:7e:37:64:
fe:82:e5:a5:10:4d:ae:aa:ae:a2:d4:de:f1:23:55:3e:44:eb:
63:df:83:6a:8f:f9:6a:d0:23:d8:e5:f6:ff:f7:a6:28:51:e0:
05:ea:66:87:4c:38:f3:3d:84:f2:c2:61:7a:75:7e:09:4c:30:
cd:43:01:cf:09:0f:80:39:d2:98:7a:90:ba:12:82:52:5d:67:
34:90:a2:d3:e8:0f:f5:0e:a1:9c:fa:36:9a:64:4b:d3:36:fc:
49:af:f3:cb:4a:2b:8a:d8:33:96:0a:5c:0d:02:65:2b:f7:ca:
82:bd:a2:c3:f1:91:dd:c0:e6:35:d6:3f:fd:23:36:b7:3f:49:
18:79:6a:07:b5:57:99:f1:e5:bb:77:cb:92:92:15:da:5c:5f:
af:29:7a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org