Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/c7LC1dsJbFSCLTRL_PEdvXSznto.roa
File: c7LC1dsJbFSCLTRL_PEdvXSznto.roa (raw, json)
Hash identifier: d8zCshnzyyUwvXMtw9xRUbTY0h7fVojFbQnCz7HljhM=
Subject key identifier: 73:B2:C2:D5:DB:09:6C:54:82:2D:34:4B:FC:F1:1D:BD:74:B3:9E:DA
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0191ED588BFA68C519DF5E13F061D05AA386
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/c7LC1dsJbFSCLTRL_PEdvXSznto.roa
Signing time: Fri 13 Sep 2024 21:44:48 +0000
ROA not before: Fri 13 Sep 2024 21:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.222.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 18:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ed:58:8b:fa:68:c5:19:df:5e:13:f0:61:d0:5a:a3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 13 21:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73b2c2d5db096c54822d344bfcf11dbd74b39eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:1c:a1:3a:37:0c:5d:60:df:ee:15:8b:4f:
72:86:2c:a0:99:c2:90:df:4c:4e:39:0f:29:d8:13:
2d:07:d8:1a:66:82:48:a1:9b:38:59:45:1a:20:12:
37:4a:aa:9d:7b:b9:e5:d5:01:9d:68:3f:0f:05:53:
d1:f8:e0:1b:65:d3:fd:f3:5c:43:5e:09:ad:81:8b:
b1:c3:66:ff:2d:b9:be:0d:2e:23:40:af:11:d0:96:
ee:63:ba:4a:03:f9:1a:26:8a:b8:90:ea:27:95:92:
ec:9f:2b:7e:bd:8f:1c:1d:bd:b9:c3:cf:11:f2:c0:
ad:2f:3c:24:c1:7e:41:17:a6:cd:54:02:36:0f:98:
21:36:9b:a3:cf:aa:97:47:34:3e:f1:e4:b8:28:f5:
ee:e0:41:c4:5d:4d:eb:a5:23:df:6f:4d:76:8c:4d:
0b:a7:f8:91:19:95:65:4f:73:89:39:21:fb:dd:b2:
d7:ce:e4:95:b8:f5:d6:86:af:00:94:a5:7d:c6:54:
f5:d3:28:42:fb:a1:37:5b:d5:8c:a9:ec:6d:d3:ee:
fd:69:27:7c:48:f6:dc:a7:85:04:8b:2a:69:50:b6:
40:c9:37:6f:81:d1:2f:01:01:94:3d:e1:46:ae:dc:
7b:81:85:8c:84:77:e0:de:e2:e9:1e:a6:17:ee:f3:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B2:C2:D5:DB:09:6C:54:82:2D:34:4B:FC:F1:1D:BD:74:B3:9E:DA
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/c7LC1dsJbFSCLTRL_PEdvXSznto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
83.147.244.0/22
91.186.200.0/21
91.186.216.0/23
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
77:75:a1:d3:62:15:b7:25:17:5f:78:60:50:38:cd:b1:7c:bb:
c5:73:6d:7c:27:b2:49:ea:1d:e5:94:9f:3b:36:63:e2:6e:79:
31:ca:83:20:39:58:a1:f1:0a:d7:3c:86:d4:2d:4d:cf:9c:91:
2a:1d:46:7a:96:10:55:7d:90:80:62:4c:04:b1:70:ab:a1:d9:
44:a8:9c:ff:13:97:dc:0c:fb:97:23:de:fb:77:e7:a2:4b:3a:
06:fd:d2:37:18:a1:8f:1f:41:d5:bd:e9:8e:8f:c9:4e:8d:87:
67:5f:c8:a5:48:a3:6f:c4:96:62:82:34:a4:51:63:ad:d6:c1:
7a:19:ed:95:45:e5:87:26:3a:43:29:b4:93:75:cc:a0:cc:3e:
c9:3a:52:44:26:6b:48:04:2f:c3:25:d3:e5:e3:18:d8:30:ac:
43:4f:f9:31:96:02:6a:7a:dd:e8:89:90:a3:61:71:9a:62:2d:
f6:31:fb:e3:64:ef:1d:6c:7a:7a:65:21:5f:93:b8:53:82:cb:
78:08:b9:4b:b8:cb:46:d1:4a:b4:f2:47:b0:e2:0d:3c:dc:6a:
09:26:79:9f:52:5d:fd:54:4e:39:88:2a:72:8d:9f:36:2a:45:
cb:66:e1:c1:10:6e:30:9d:64:72:8d:bb:34:b3:9e:0f:6d:4b:
da:c4:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 23:58:37 2024 by rpki-client on console-ams.rpki-client.org