Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/XgOk9_cHZwCwto_zrKrez2DTuJQ.roa
File: XgOk9_cHZwCwto_zrKrez2DTuJQ.roa (raw, json)
Hash identifier: hHbbDZtty89AISIZbneJ01zMFyHQ4jC18o1VfeSq4Ys=
Subject key identifier: 5E:03:A4:F7:F7:07:67:00:B0:B6:8F:F3:AC:AA:DE:CF:60:D3:B8:94
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018D5E10DBD60838835C0E3CC52EC84015E4
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/XgOk9_cHZwCwto_zrKrez2DTuJQ.roa
Signing time: Wed 31 Jan 2024 05:49:39 +0000
ROA not before: Wed 31 Jan 2024 05:49:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 83.147.232.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:10:db:d6:08:38:83:5c:0e:3c:c5:2e:c8:40:15:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 31 05:49:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e03a4f7f7076700b0b68ff3acaadecf60d3b894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:95:5f:4e:4f:e7:90:88:91:28:66:2d:6f:
ca:3d:8c:c3:e6:1b:45:be:64:8e:25:11:8d:c2:4a:
dd:15:df:52:3f:50:79:6c:f1:4b:b2:8f:9e:a3:64:
ff:b1:be:2f:84:db:e2:94:c6:40:01:c2:5a:43:e3:
fb:50:65:34:e4:42:a4:97:16:e4:e4:34:d1:de:b2:
a9:f3:e2:38:4b:39:2b:00:1e:f8:be:b4:75:90:8f:
f5:0b:3a:0a:50:49:09:b4:92:5c:be:f5:f2:2b:a0:
96:4f:e7:a0:0d:d6:b9:95:26:2f:e4:ac:be:ec:9e:
54:9f:75:4f:56:ed:ae:76:0e:79:94:10:3c:24:2f:
aa:1e:53:dd:9e:f6:25:e0:4b:3c:10:ff:3d:ac:87:
8b:3f:86:95:9e:c5:9d:d9:8f:b6:c7:70:a1:f7:0c:
fa:dd:58:4a:da:ee:cd:b1:eb:b6:8c:ae:29:63:6b:
82:26:8e:a1:08:33:c0:ee:dc:30:8b:51:fc:38:12:
08:d9:64:57:85:79:ae:bd:f6:50:89:da:30:e0:db:
4a:8d:72:61:58:03:e0:c6:ac:37:19:85:02:50:76:
3e:aa:a5:59:d2:56:02:65:74:0f:be:08:0e:b2:1b:
60:73:8a:cf:ad:e3:b9:ad:43:02:8d:81:75:09:90:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:03:A4:F7:F7:07:67:00:B0:B6:8F:F3:AC:AA:DE:CF:60:D3:B8:94
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/XgOk9_cHZwCwto_zrKrez2DTuJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
91.186.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:e0:fb:b1:fb:f0:ec:d1:a8:ce:bb:4f:5b:ab:5b:4d:c2:5d:
5c:fe:11:76:fe:bf:b7:27:c7:fe:12:22:35:f6:af:16:38:92:
d9:78:bb:6d:46:87:7b:c4:0f:55:3b:90:6b:34:51:ba:45:fe:
e1:69:8d:97:89:d5:cc:56:2e:f8:14:5d:86:65:14:4c:1f:60:
fe:7f:9a:f7:8d:7d:d9:87:37:cf:de:6c:83:6f:38:76:57:d1:
3d:c1:37:29:e0:7d:43:50:ff:52:6f:fd:b0:9f:7c:b3:c8:ce:
d8:f8:e4:86:4d:36:97:c9:57:0a:c1:c2:bf:7d:48:d2:2f:2c:
cc:46:74:41:8b:19:d4:b0:e2:bf:18:58:89:ce:86:46:3a:48:
ee:1b:20:27:85:4e:03:f9:33:84:df:9b:38:bf:05:1d:67:ee:
b1:98:e9:ea:54:18:87:30:b2:3c:4b:03:0b:07:73:28:32:90:
7a:90:e7:89:6b:36:44:52:3e:45:6d:3e:82:11:e8:0d:38:cf:
76:08:30:4c:db:ef:26:e5:52:07:b5:bb:f2:2b:4d:8f:2c:8a:
9d:40:db:ca:08:65:c7:63:eb:4a:fa:f5:93:d4:3b:22:d5:f0:
cc:2a:34:df:ef:cb:35:65:61:5a:16:d3:3b:e1:bd:0f:f7:fe:
c4:15:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 05:18:58 2024 by rpki-client on console-ams.rpki-client.org