Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/XmF7ZNlvF84qb63zLofshnJky6o.roa
File: XmF7ZNlvF84qb63zLofshnJky6o.roa (raw, json)
Hash identifier: 5fTwAEg21UYsRyt+rhQD+WdRvVXaGIh1u8+MaTJ8dA0=
Subject key identifier: 5E:61:7B:64:D9:6F:17:CE:2A:6F:AD:F3:2E:87:EC:86:72:64:CB:AA
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CDC1FA71A07CFF5541C7652E32923
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/XmF7ZNlvF84qb63zLofshnJky6o.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 83.147.240.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 16:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:dc:1f:a7:1a:07:cf:f5:54:1c:76:52:e3:29:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e617b64d96f17ce2a6fadf32e87ec867264cbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:98:52:7b:55:95:7e:43:37:7e:e3:6d:ae:
3c:7b:3b:cd:b0:af:b8:68:78:64:b0:27:c7:c1:0e:
fa:55:4a:99:93:fa:29:fe:a1:84:0f:06:ce:cb:a6:
cf:14:cc:ad:07:ad:38:1f:4a:7f:2f:9a:36:b8:ab:
de:39:c3:59:ef:ac:02:b7:c7:de:cd:e1:40:69:e1:
13:9d:50:64:0b:6e:33:c7:d7:ec:ea:5c:c3:fd:c1:
cb:b3:3a:9c:15:bd:d9:d2:71:ab:ee:fb:16:d4:bf:
df:94:61:1f:95:7c:fb:7e:52:74:4c:32:6d:cd:fe:
a3:e4:68:8f:fe:4b:be:b1:8e:3c:c4:78:e9:4a:27:
72:2d:a2:0c:04:3f:56:23:b7:eb:24:a2:fa:69:bc:
7b:6d:27:05:7a:2b:1c:f3:6e:40:7d:58:45:a9:2c:
e2:27:9e:6e:a6:75:e3:0b:14:fb:51:a2:53:6d:24:
59:ea:a6:c9:dd:d5:4d:b1:7f:fd:16:15:91:4b:4a:
1d:23:2d:82:1e:ea:ee:39:2a:6a:46:f0:79:97:c2:
c0:c5:2a:5a:e0:87:4b:fc:b3:8f:2a:2f:df:63:ab:
49:fb:02:89:63:6e:59:e0:03:fb:39:8b:50:57:d3:
08:ed:f1:dc:28:a6:5f:3a:8e:e1:d5:12:99:c9:94:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:61:7B:64:D9:6F:17:CE:2A:6F:AD:F3:2E:87:EC:86:72:64:CB:AA
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/XmF7ZNlvF84qb63zLofshnJky6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:26:5a:b2:60:30:e2:d5:29:73:c8:06:2a:bd:97:c3:15:d5:
60:60:c3:b1:fb:ff:db:5f:c0:b0:44:fa:cb:e5:f3:ea:dd:d2:
c3:05:73:63:fb:3d:b9:21:19:87:95:8b:dd:27:97:e6:25:75:
41:60:3e:f3:e2:ca:c1:21:44:4b:40:f1:18:5f:dd:c1:aa:c1:
83:03:ca:fd:e9:c6:ba:3a:76:b7:40:fa:94:ed:8f:e1:a9:66:
d4:0e:1e:ea:6d:94:29:62:88:fd:62:f5:61:46:f3:fd:83:9c:
7a:89:4b:2f:1e:fd:76:2c:09:13:92:22:dd:6b:e8:23:ae:87:
32:8f:9f:fb:99:b6:c1:82:72:73:09:15:e4:1f:07:a5:83:73:
dd:a9:94:62:dd:5f:50:ea:91:10:b7:a6:c6:3e:42:7e:81:32:
ca:10:b0:38:ca:95:0f:78:0c:c8:73:48:5b:ed:f5:1c:7a:56:
0b:f2:1d:32:88:6b:ad:ec:3b:8a:09:c9:17:b4:f2:de:6b:a3:
6f:57:3e:c5:9d:9c:68:a1:2f:c2:eb:ff:ce:77:6d:d7:28:65:
8c:7b:86:1a:7f:06:56:ac:e1:71:e8:4e:b6:8c:f1:61:cf:30:
92:a9:7f:34:ff:17:93:68:04:24:29:35:77:a6:ed:7b:9d:08:
cc:4f:ab:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjNwfpxoHz/VUHHZS4ykjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwMTAyMDMzNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTYxN2I2NGQ5NmYxN2NlMmE2ZmFkZjMyZTg3ZWM4NjcyNjRjYmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia6YUntVlX5DN37jba48ezvNsK+4
aHhksCfHwQ76VUqZk/op/qGEDwbOy6bPFMytB604H0p/L5o2uKveOcNZ76wCt8fe
zeFAaeETnVBkC24zx9fs6lzD/cHLszqcFb3Z0nGr7vsW1L/flGEflXz7flJ0TDJt
zf6j5GiP/ku+sY48xHjpSidyLaIMBD9WI7frJKL6abx7bScFeisc825AfVhFqSzi
J55upnXjCxT7UaJTbSRZ6qbJ3dVNsX/9FhWRS0odIy2CHuruOSpqRvB5l8LAxSpa
4IdL/LOPKi/fY6tJ+wKJY25Z4AP7OYtQV9MI7fHcKKZfOo7h1RKZyZSMHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF5he2TZbxfOKm+t8y6H7IZyZMuqMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvWG1GN1pObHZGODRxYjYzekxvZnNobkpreTZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU5PwMA0G
CSqGSIb3DQEBCwUAA4IBAQB9JlqyYDDi1SlzyAYqvZfDFdVgYMOx+//bX8CwRPrL
5fPq3dLDBXNj+z25IRmHlYvdJ5fmJXVBYD7z4srBIURLQPEYX93BqsGDA8r96ca6
Ona3QPqU7Y/hqWbUDh7qbZQpYoj9YvVhRvP9g5x6iUsvHv12LAkTkiLda+gjrocy
j5/7mbbBgnJzCRXkHwelg3PdqZRi3V9Q6pEQt6bGPkJ+gTLKELA4ypUPeAzIc0hb
7fUcelYL8h0yiGut7DuKCckXtPLea6NvVz7FnZxooS/C6//Od23XKGWMe4YafwZW
rOFx6E62jPFhzzCSqX80/xeTaAQkKTV3pu17nQjMT6sj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org