Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/bb_4XLPJ9CbNF0cyK_VLiv8GTA8.roa
File: bb_4XLPJ9CbNF0cyK_VLiv8GTA8.roa (raw, json)
Hash identifier: CEZECgcY2k/EhRkLi8E45kYdwf1B89syW56+0zw1zMY=
Subject key identifier: 6D:BF:F8:5C:B3:C9:F4:26:CD:17:47:32:2B:F5:4B:8A:FF:06:4C:0F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018EA8113A4B735595F9306CA57EC6BD67DB
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/bb_4XLPJ9CbNF0cyK_VLiv8GTA8.roa
Signing time: Thu 04 Apr 2024 07:44:45 +0000
ROA not before: Thu 04 Apr 2024 07:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.232.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
91.186.194.0/23 maxlen: 23
91.186.204.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 18:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:11:3a:4b:73:55:95:f9:30:6c:a5:7e:c6:bd:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 4 07:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dbff85cb3c9f426cd1747322bf54b8aff064c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:12:1e:a8:0c:1e:72:57:e7:c5:94:88:18:
15:c1:2f:e3:2a:24:74:71:44:1c:b1:9c:1d:dd:3c:
44:c2:dc:4a:a5:0d:c2:28:62:dc:a1:50:62:1a:24:
9d:ec:d4:9d:61:9b:63:0b:e3:e2:82:c6:15:96:da:
a0:00:ed:1f:b3:d7:50:ac:ca:ae:f5:2b:47:48:92:
85:59:77:22:aa:ef:02:0f:d2:2f:41:53:8c:4d:2c:
74:85:a7:0d:01:50:41:a2:b8:1f:72:74:6b:7f:fe:
7e:a3:c8:fd:99:b3:0e:84:38:01:a9:d6:cd:64:ca:
dd:ca:f7:5a:19:81:a2:40:26:d2:8e:53:c3:c1:a8:
ba:4e:4b:d6:9f:c8:b3:89:b0:21:30:14:fb:2c:2d:
09:87:4a:e6:69:62:70:e5:bb:50:d8:dc:cf:fe:43:
32:04:77:db:ca:de:c4:8c:42:90:fa:66:83:91:d3:
46:8f:b8:65:af:3f:7c:c6:bf:9e:80:e0:bf:e1:2b:
87:68:24:1a:00:23:36:86:da:ad:d6:b3:a1:9a:04:
7d:c3:7a:e9:2e:71:2b:4e:93:41:8a:b2:32:d3:cc:
8d:1a:75:06:a3:b4:47:4a:9b:c4:84:af:c6:c8:b1:
f4:a5:1a:46:00:5f:a0:c0:b3:73:b8:17:39:17:39:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BF:F8:5C:B3:C9:F4:26:CD:17:47:32:2B:F5:4B:8A:FF:06:4C:0F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/bb_4XLPJ9CbNF0cyK_VLiv8GTA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.244.0/22
91.186.194.0/23
91.186.204.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
99:65:33:9e:a8:3f:ee:f1:62:07:90:32:de:75:31:f9:a4:52:
e9:35:33:37:cf:38:05:aa:48:b6:68:63:18:ac:cd:e7:97:33:
d9:be:ec:f2:1d:70:54:73:20:78:27:5b:ba:19:64:7e:7c:2b:
95:7f:48:88:60:28:f9:f3:ed:e2:bb:85:90:06:4d:49:f6:47:
08:90:5b:ce:b8:03:42:5a:a9:e5:94:36:66:c0:84:04:96:99:
6e:c4:58:fc:ad:a0:76:fb:c6:f0:ca:12:ca:57:2e:ab:b5:57:
80:93:e2:87:62:06:bc:20:a7:80:a1:b7:da:2b:da:b6:e7:43:
2e:67:42:5f:72:40:e6:d6:ce:b6:71:12:09:56:f2:af:d2:6a:
2f:19:cd:a9:59:2b:05:a0:bf:a9:23:00:ac:4a:e4:b8:10:df:
fe:49:de:55:e5:ff:ee:67:be:56:d2:1c:34:d7:e2:02:ae:13:
54:3c:5e:e0:cb:bc:9e:a6:b1:89:a0:8a:9a:9b:f0:11:1d:ef:
3e:44:12:6a:d7:0d:92:cd:02:ca:ad:77:8a:97:17:7b:4e:02:
9c:04:37:7b:ab:cb:6a:0e:e8:1c:1f:7b:20:5e:15:7f:22:58:
e8:6d:de:17:b8:f4:e9:85:ff:e5:aa:9f:29:e4:e3:34:f4:dc:
57:ec:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org