Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/atIpC0-izM1ZA2BlSLaBp_VhGeI.roa
File: atIpC0-izM1ZA2BlSLaBp_VhGeI.roa (raw, json)
Hash identifier: kG0xaN8A7gb+H7EMtA0TIO/wBfe0UIvgvOqAFcS5a/Q=
Subject key identifier: 6A:D2:29:0B:4F:A2:CC:CD:59:03:60:65:48:B6:81:A7:F5:61:19:E2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01876537B62666CE1FBB8E307295B945974A
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/atIpC0-izM1ZA2BlSLaBp_VhGeI.roa
Signing time: Sun 09 Apr 2023 08:52:42 +0000
ROA not before: Sun 09 Apr 2023 08:52:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
178.253.22.0/23 maxlen: 24
178.253.26.0/23 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Apr 2023 18:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:65:37:b6:26:66:ce:1f:bb:8e:30:72:95:b9:45:97:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 9 08:52:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ad2290b4fa2cccd5903606548b681a7f56119e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:d8:71:37:a9:d3:44:77:00:c1:01:5f:2a:
b4:77:87:43:fa:0c:fb:16:4e:c1:d6:05:62:69:f0:
94:8f:2a:96:43:10:ff:c9:ca:04:a4:ae:e4:27:5b:
7a:c2:f4:03:e4:82:f5:89:70:ba:f2:ea:e2:e8:fa:
76:d2:f2:c1:86:d6:a0:a0:e9:5f:42:26:95:21:f6:
b5:f7:89:be:77:a8:8c:3a:aa:d5:c4:e6:90:bc:f1:
e2:33:fd:ce:ed:09:ee:10:3b:0e:03:59:2e:91:68:
50:f9:44:97:d3:9f:27:4a:1f:6c:2d:7c:c4:47:fe:
4f:7f:ba:80:a4:99:67:c7:0e:b8:34:c4:85:22:36:
81:76:88:51:a9:73:83:04:e5:29:87:8b:79:14:f5:
0e:8b:01:3e:c0:ed:e4:f7:84:d2:5d:ef:e1:6a:11:
f0:b3:e6:04:5c:19:52:7f:d5:fb:30:80:23:ed:c0:
f2:62:f3:31:dc:39:b2:26:ba:27:e0:81:d2:5f:3e:
39:78:9b:f3:04:55:e3:86:f7:cb:8e:7b:85:18:b9:
88:37:22:5e:cd:a5:9f:35:20:ce:58:04:57:63:62:
82:53:b4:11:e2:e4:5f:56:25:32:63:3a:09:b4:22:
74:a3:a8:6e:f7:fe:72:a2:3c:73:bd:bb:87:84:51:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D2:29:0B:4F:A2:CC:CD:59:03:60:65:48:B6:81:A7:F5:61:19:E2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/atIpC0-izM1ZA2BlSLaBp_VhGeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
91.186.216.0/22
178.253.22.0/23
178.253.26.0/23
Signature Algorithm: sha256WithRSAEncryption
08:93:9b:88:9f:97:5c:06:03:7b:0f:08:41:e8:e0:c2:dc:a5:
da:45:0b:92:70:64:d3:63:42:59:5c:84:b7:28:81:c1:79:06:
ac:f9:85:d8:53:d6:a1:5c:c9:52:c8:3e:3b:b8:ea:b2:86:71:
be:c1:b6:62:4c:67:1c:d1:53:24:ea:50:2e:7e:20:57:62:e7:
9d:94:c9:aa:1e:8d:ad:1d:3d:d6:00:bf:7a:3c:d1:e1:a0:96:
dd:cb:31:59:e2:83:a1:5b:81:47:e6:7b:3a:50:f0:01:f8:50:
70:26:3c:26:f5:78:67:a8:7d:b2:55:e1:24:57:89:04:76:1f:
23:86:47:e0:f8:00:6a:b7:fc:dc:62:a1:ad:6c:26:21:d0:15:
5a:32:21:09:92:fd:0d:5e:29:d8:23:1f:72:fa:bc:73:b8:af:
8d:6a:00:8d:a2:33:7a:bf:bb:0f:d4:82:36:c9:45:b9:51:f8:
a7:89:ab:7f:89:3d:27:73:47:d7:1e:c1:c8:0e:77:70:1f:2d:
dc:74:6d:b7:03:c2:c7:01:97:63:bc:f0:0d:6c:93:b4:ad:46:
e2:d6:dc:1b:cc:37:77:29:54:e8:51:3c:33:84:51:2e:d2:5d:
3b:9a:23:fa:84:2d:0f:91:af:66:48:56:60:60:07:07:cb:04:
ec:61:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org