Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/c8VFY3XkKcXttiDjMwwlaxdnyn4.roa
File: c8VFY3XkKcXttiDjMwwlaxdnyn4.roa (raw, json)
Hash identifier: lxO8+9C49MgUL3LNaAarGX8trQit+OCm/DdOAPS4/RM=
Subject key identifier: 73:C5:45:63:75:E4:29:C5:ED:B6:20:E3:33:0C:25:6B:17:67:CA:7E
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01860434164E0AE6468A5B41A417C3AA7C0B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/c8VFY3XkKcXttiDjMwwlaxdnyn4.roa
Signing time: Mon 30 Jan 2023 19:42:47 +0000
ROA not before: Mon 30 Jan 2023 19:42:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 94.241.164.0/23 maxlen: 24
94.241.160.0/22 maxlen: 24
178.253.26.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 20:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:34:16:4e:0a:e6:46:8a:5b:41:a4:17:c3:aa:7c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 30 19:42:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73c5456375e429c5edb620e3330c256b1767ca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6e:09:de:8a:fa:f8:0d:a2:68:4a:2f:a8:f5:
46:dd:79:7a:3a:6c:25:6a:c0:41:5a:10:5d:2b:1e:
f1:12:d2:66:e4:e8:eb:8e:5e:3e:e4:61:35:c2:f9:
85:9c:5f:ec:55:4a:c1:92:d5:03:a9:ae:85:50:0a:
d8:86:cd:2c:4a:c5:b9:e9:3b:31:72:e6:db:ea:4a:
20:ee:c5:ee:14:f0:60:28:e8:a4:19:6b:bb:cf:1b:
0b:60:16:16:72:31:38:7f:e8:b9:e0:46:b0:36:32:
22:66:d4:7c:0d:8d:2b:c0:33:63:52:de:16:ea:d5:
f2:61:2c:e7:70:d2:36:80:0b:77:46:b6:db:f9:e6:
27:06:73:e2:82:4e:b4:f0:77:f3:6b:f9:3d:fa:1c:
d0:45:79:ce:2a:32:e4:e1:64:32:0f:7c:86:ce:a5:
70:31:0f:fe:27:b1:7f:1d:13:d1:67:6a:8b:c6:db:
ef:2b:c5:a1:9c:97:79:1c:c5:98:45:44:e7:43:d9:
ee:ed:f7:8e:56:4e:cd:a3:fa:96:3f:fd:8c:2c:d0:
13:51:a2:45:f3:a3:1d:4d:f9:a2:c3:91:f0:b8:58:
53:16:ca:ce:1b:c6:ca:56:d7:6d:b4:2b:09:db:8d:
82:60:56:e2:91:73:dd:2b:af:67:9e:8c:57:4e:19:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:45:63:75:E4:29:C5:ED:B6:20:E3:33:0C:25:6B:17:67:CA:7E
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/c8VFY3XkKcXttiDjMwwlaxdnyn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
94.241.160.0-94.241.165.255
178.253.26.0/23
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
84:d9:3c:4d:85:24:ad:16:fc:48:53:88:b8:e4:19:74:06:42:
8b:85:90:a6:e4:e1:b4:82:35:d3:88:1b:de:ff:ca:6f:54:34:
e0:71:e4:d1:01:6b:22:0b:7d:82:dc:63:8c:df:7f:65:5c:db:
61:c4:e8:cf:cc:56:1a:64:29:d3:79:bd:c9:87:b0:4e:74:a9:
1a:b4:91:0d:bb:de:d0:8b:70:49:67:10:b1:9c:5c:cd:79:da:
f2:d8:7d:c1:82:d4:48:22:32:75:f1:7d:b5:fb:ee:fe:34:88:
e5:5a:ea:85:9e:36:f0:5b:76:85:e2:b3:3e:34:b7:e9:9d:ff:
84:25:dd:c9:e5:8e:c9:5f:05:e5:c4:5a:4d:08:35:8f:0c:d3:
c8:dc:9c:bf:74:63:65:57:e8:7b:7d:67:69:ab:78:0e:08:04:
9f:89:9a:70:76:b9:4a:9e:31:86:f6:01:bf:0f:58:18:ad:af:
b4:ca:7f:d2:8c:ca:37:f2:bc:40:ed:3e:1b:dc:af:fe:3f:50:
1f:47:64:2d:11:66:67:3e:dc:0c:e7:03:12:6a:ab:52:c1:6b:
1a:13:f1:88:af:cf:dd:fd:3d:1e:ea:29:6a:36:16:83:c5:b1:
ef:15:b9:2e:08:7d:bd:04:7e:15:12:5c:61:39:1a:65:b6:ee:
37:3c:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org