Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dFXo-YiqNGP83NlLkB5pwRM5jcY.roa
File: dFXo-YiqNGP83NlLkB5pwRM5jcY.roa (raw, json)
Hash identifier: nV8uPON6PGniOJbdZF8+DWO1BIAMWKPf/IzbIa0QRqc=
Subject key identifier: 74:55:E8:F9:88:AA:34:63:FC:DC:D9:4B:90:1E:69:C1:13:39:8D:C6
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018E2DFF8852B546AC128102F6014B59FD55
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dFXo-YiqNGP83NlLkB5pwRM5jcY.roa
Signing time: Mon 11 Mar 2024 14:51:45 +0000
ROA not before: Mon 11 Mar 2024 14:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.162.0/23 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 22:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:ff:88:52:b5:46:ac:12:81:02:f6:01:4b:59:fd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Mar 11 14:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7455e8f988aa3463fcdcd94b901e69c113398dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:50:14:6a:3c:6f:c2:d0:83:43:12:a3:ca:
49:59:54:4a:bb:c9:f5:cd:67:98:d4:f5:64:84:48:
cf:ad:46:2f:19:8d:13:92:09:29:51:ae:67:df:53:
1b:e0:63:ab:7b:ad:a8:44:25:33:0e:e5:08:3e:c7:
5b:f3:14:ba:34:29:c4:11:c0:2f:5c:a4:24:0c:41:
da:3e:f6:ce:f9:8f:f2:40:92:23:e5:0d:31:a4:1f:
d5:58:f9:49:7e:04:55:76:f1:27:a1:26:96:fc:a7:
23:93:62:7e:85:b6:1f:3f:76:db:f9:da:fe:c5:24:
e1:ff:30:f9:ce:5b:c6:54:0e:c6:29:4d:cb:05:8f:
77:53:40:48:79:25:b0:e2:b2:23:a5:e5:39:4b:a7:
70:e1:99:78:36:aa:9b:78:0e:9b:fc:c3:76:b1:80:
88:ad:56:7f:fe:98:3b:53:a6:08:61:b2:88:28:08:
2d:8c:4c:e6:9f:af:c1:aa:02:97:21:55:d6:af:06:
2b:1e:74:f9:2f:1e:34:0f:c1:97:2c:64:4d:26:7c:
f1:75:2e:14:99:0b:34:33:5f:28:c9:2f:50:33:1f:
9d:75:e3:82:15:95:b4:db:ef:e6:7e:3d:2d:c4:42:
da:0b:37:08:60:5f:a3:60:8a:04:2f:70:d5:a3:ac:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:E8:F9:88:AA:34:63:FC:DC:D9:4B:90:1E:69:C1:13:39:8D:C6
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dFXo-YiqNGP83NlLkB5pwRM5jcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.204.0/22
94.241.162.0-94.241.165.255
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:c2:7b:83:06:3e:ff:ff:a7:32:8d:bb:4c:ab:6b:db:3c:bc:
d3:0e:2e:61:a5:a6:2a:b9:e0:4c:4e:2d:b6:89:95:b3:e1:f3:
d2:e4:e3:c4:7f:2a:89:6d:a5:51:4d:ec:26:95:2c:a1:71:b0:
99:b1:d4:ca:31:b2:ca:9c:84:be:2b:00:04:4a:dc:6a:75:d3:
d3:ac:e8:e9:55:16:37:63:0e:8b:43:16:16:c6:d5:79:f9:24:
c6:81:56:3f:84:cd:bd:11:e0:55:88:1a:56:85:c3:77:86:af:
92:da:c8:2d:d4:8c:e8:41:61:d1:36:a4:30:71:8c:c2:a4:59:
98:4c:1c:3a:45:9a:c3:48:e2:35:96:53:48:61:a6:37:59:57:
e3:d3:0c:a1:e3:4e:83:e0:58:94:aa:8a:65:a6:e7:f8:72:a9:
3b:90:29:52:61:73:a1:9b:42:8f:c1:58:d2:dc:6f:c4:4b:22:
fd:85:c4:a6:4f:97:e4:09:3d:f2:ce:33:fc:94:b8:6f:57:7d:
55:0b:ed:b8:cf:18:a6:e5:28:be:16:46:39:bd:a0:29:21:40:
54:0c:d9:cb:ba:52:e8:e5:2b:f3:50:3d:3d:5e:36:1b:70:36:
b2:4f:44:04:6d:88:12:92:95:29:9b:8a:2a:29:05:7a:8e:b7:
69:24:0a:1b
-----BEGIN CERTIFICATE-----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Generated at Tue Mar 12 23:26:35 2024 by rpki-client on console-ams.rpki-client.org