Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/b-SeZSuAEr8L4g5gJjbraf46Kis.roa
File: b-SeZSuAEr8L4g5gJjbraf46Kis.roa (raw, json)
Hash identifier: tYjtFOFxym8bID/DbgIaUFms5R35Sg+YwjRvwzp/liA=
Subject key identifier: 6F:E4:9E:65:2B:80:12:BF:0B:E2:0E:60:26:36:EB:69:FE:3A:2A:2B
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018E221E8877D136ABA31DAF1A7428C8330C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/b-SeZSuAEr8L4g5gJjbraf46Kis.roa
Signing time: Sat 09 Mar 2024 07:30:10 +0000
ROA not before: Sat 09 Mar 2024 07:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.160.0/23 maxlen: 24
94.241.162.0/23 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 14:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:22:1e:88:77:d1:36:ab:a3:1d:af:1a:74:28:c8:33:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Mar 9 07:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fe49e652b8012bf0be20e602636eb69fe3a2a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:0d:77:7a:56:38:a9:e2:be:1d:2e:08:b1:
64:f8:1d:7b:4b:e5:79:a4:2b:23:00:16:c8:80:43:
2d:b0:14:d2:db:e9:f1:fe:9f:93:dc:0e:ad:9a:bf:
d4:4b:a8:a0:b1:8c:48:42:d6:0b:6c:7b:4e:10:c9:
13:63:5d:13:78:f0:b1:f1:17:aa:37:16:4c:4a:9d:
0f:b6:d4:fb:9b:24:f5:28:e2:5b:95:43:2e:0d:13:
37:3f:7f:26:27:d2:a8:e0:e4:37:e2:41:12:75:4c:
4f:50:ff:a6:e2:0e:5f:c2:65:df:85:2f:8a:b7:e9:
74:9b:d1:d4:1f:d6:2b:62:0c:55:f6:78:7a:2b:03:
07:d2:5d:43:fc:3b:88:df:fc:24:aa:90:91:ce:44:
24:fd:00:76:cf:2e:89:a3:67:4b:86:96:2e:a8:9e:
a7:98:3c:47:ad:dd:0a:0e:3b:61:c2:4e:d3:94:07:
04:33:7a:ce:11:98:a4:6f:39:b8:db:17:79:a9:3a:
fa:98:a1:c6:8a:70:b7:57:24:36:22:cd:80:3b:08:
b5:da:eb:7e:fb:c2:51:30:05:04:ed:65:4e:ce:13:
02:c8:05:da:77:91:95:f1:c5:45:82:99:fb:50:71:
fd:3f:35:05:d7:40:58:81:eb:06:74:cb:06:6e:0e:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E4:9E:65:2B:80:12:BF:0B:E2:0E:60:26:36:EB:69:FE:3A:2A:2B
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/b-SeZSuAEr8L4g5gJjbraf46Kis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.204.0/22
94.241.160.0-94.241.165.255
94.241.168.0/21
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
56:57:4c:0c:06:67:0a:0d:de:a3:a3:3d:51:1c:a1:84:9f:a7:
de:03:06:b2:cd:52:9b:10:ea:59:23:5c:4a:41:ec:82:79:54:
b8:18:62:df:d5:8e:01:99:aa:36:20:65:11:3e:81:33:c1:92:
f6:8f:50:a6:f0:35:87:a2:c0:91:97:f4:74:12:eb:54:14:0c:
33:98:ab:8c:e4:70:3b:36:8e:68:01:1e:bf:cd:36:c4:b1:af:
18:15:53:db:37:5b:ef:ed:93:e4:c8:4b:a8:a2:4c:6e:4f:11:
2e:15:61:ac:0b:1b:73:64:f3:a8:02:4c:bd:6f:36:db:bb:0c:
ae:27:f5:31:15:15:f8:94:8d:48:44:64:c1:7e:b4:cb:d0:3b:
9c:8a:1c:fe:0c:ce:ad:bd:b3:d1:e6:32:2d:c8:f7:65:86:f9:
2f:ee:d1:65:e0:91:b6:a7:48:2a:8c:82:f5:68:89:8c:43:7f:
30:34:24:8e:c8:df:de:21:67:b2:eb:8c:72:85:44:b9:89:f9:
7d:73:35:fe:03:37:d7:5a:bb:4b:48:6c:03:f6:1e:cc:84:d5:
44:36:10:94:80:5a:e7:04:9c:40:ae:88:8a:ba:14:2b:25:6f:
d3:0d:0d:41:10:bf:69:c4:b3:0b:07:4e:52:28:2b:6b:ca:84:
eb:37:b9:45
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAY4iHoh30Tarox2vGnQoyDMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwMzA5MDczMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmU0OWU2NTJiODAxMmJmMGJlMjBlNjAyNjM2ZWI2OWZlM2EyYTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+cNd3pWOKnivh0uCLFk+B17S+V5
pCsjABbIgEMtsBTS2+nx/p+T3A6tmr/US6igsYxIQtYLbHtOEMkTY10TePCx8Req
NxZMSp0PttT7myT1KOJblUMuDRM3P38mJ9Ko4OQ34kESdUxPUP+m4g5fwmXfhS+K
t+l0m9HUH9YrYgxV9nh6KwMH0l1D/DuI3/wkqpCRzkQk/QB2zy6Jo2dLhpYuqJ6n
mDxHrd0KDjthwk7TlAcEM3rOEZikbzm42xd5qTr6mKHGinC3VyQ2Is2AOwi12ut+
+8JRMAUE7WVOzhMCyAXad5GV8cVFgpn7UHH9PzUF10BYgesGdMsGbg6LcQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFG/knmUrgBK/C+IOYCY262n+OiorMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvYi1TZVpTdUFFcjhMNGc1Z0pqYnJhZjQ2S2lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCU5P0AwQC
W7rMMAwDBAVe8aADBAFe8aQDBANe8agDBAGy/SwwDQYJKoZIhvcNAQELBQADggEB
AFZXTAwGZwoN3qOjPVEcoYSfp94DBrLNUpsQ6lkjXEpB7IJ5VLgYYt/VjgGZqjYg
ZRE+gTPBkvaPUKbwNYeiwJGX9HQS61QUDDOYq4zkcDs2jmgBHr/NNsSxrxgVU9s3
W+/tk+TIS6iiTG5PES4VYawLG3Nk86gCTL1vNtu7DK4n9TEVFfiUjUhEZMF+tMvQ
O5yKHP4Mzq29s9HmMi3I92WG+S/u0WXgkbanSCqMgvVoiYxDfzA0JI7I394hZ7Lr
jHKFRLmJ+X1zNf4DN9dau0tIbAP2HsyE1UQ2EJSAWucEnECuiIq6FCslb9MNDUEQ
v2nEswsHTlIoK2vKhOs3uUU=
-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:02 2024 by rpki-client on console-ams.rpki-client.org