Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/gWlpyLCf4dUOKaoplxvqmhYiOtk.roa
File: gWlpyLCf4dUOKaoplxvqmhYiOtk.roa (raw, json)
Hash identifier: YGU/yjX8nXIb5+YEduqo41n53EF8roUqrL5EllCzle8=
Subject key identifier: 81:69:69:C8:B0:9F:E1:D5:0E:29:AA:29:97:1B:EA:9A:16:22:3A:D9
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018E10993A1A19C4F84EF012B5C6FA998D92
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/gWlpyLCf4dUOKaoplxvqmhYiOtk.roa
Signing time: Tue 05 Mar 2024 21:51:01 +0000
ROA not before: Tue 05 Mar 2024 21:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 21:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:99:3a:1a:19:c4:f8:4e:f0:12:b5:c6:fa:99:8d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Mar 5 21:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=816969c8b09fe1d50e29aa29971bea9a16223ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:bb:c1:c6:6c:8f:5f:a5:4c:b6:d2:fe:d7:
87:65:00:8e:09:8b:1e:f0:dd:1e:0a:14:7d:8c:0d:
16:77:82:ee:c1:a9:0a:97:24:4f:8d:e2:84:5d:07:
bb:af:1a:9d:aa:fa:a1:6e:3b:de:74:d4:99:22:5d:
19:1e:77:e6:d3:d8:de:14:77:6e:2b:54:fb:d8:f3:
c9:9f:f3:75:69:c2:a5:f6:52:31:5a:b4:54:ba:45:
18:d7:65:a4:68:e8:35:51:18:f1:6f:4a:d8:48:cc:
ec:06:e4:9c:be:ef:4c:cc:72:8e:54:7b:48:66:07:
e5:e7:fe:61:e9:de:64:50:75:ab:77:ef:06:ba:f3:
28:80:1c:dd:55:f3:34:43:d1:cb:33:81:6d:77:d8:
3e:c7:07:78:95:f8:2c:5e:31:96:a8:00:04:d0:70:
1b:58:4c:7f:a5:5d:53:e9:39:a3:54:f9:7d:07:11:
7e:96:c9:ab:1e:ad:6c:89:a0:ab:71:2d:eb:b8:97:
dd:c7:f8:90:02:d0:fb:5e:7e:75:cd:e5:e7:63:0f:
d3:1b:be:5b:0e:3b:10:46:7f:e1:c9:be:ec:0a:49:
d0:f8:99:80:5b:12:64:a5:26:2b:d0:75:bf:e1:03:
77:a8:d6:c5:c0:05:68:95:2b:ff:59:e9:fa:11:a8:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:69:C8:B0:9F:E1:D5:0E:29:AA:29:97:1B:EA:9A:16:22:3A:D9
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/gWlpyLCf4dUOKaoplxvqmhYiOtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.204.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
42:94:6f:de:fd:79:f2:4d:d3:87:52:bf:5a:27:a7:b2:75:4a:
b9:8f:36:c3:38:96:2b:cf:da:95:1c:b8:ac:c9:b3:09:ec:4d:
b0:33:de:f8:fc:08:19:de:cf:0c:23:6f:a4:14:18:10:0d:90:
8c:4d:61:f2:52:04:d1:6b:2c:6d:e7:03:9b:8d:f7:2d:fe:66:
14:1e:ee:0a:ee:78:84:6e:10:ba:38:54:92:ea:6a:8c:69:77:
8a:d3:f6:2e:a1:f2:f6:e5:c6:f2:58:f6:d9:31:a2:bb:b1:2a:
4c:c6:5a:69:a4:0d:10:1b:87:cc:3b:f4:75:19:29:01:c8:62:
32:d8:54:d3:e5:8f:03:58:0b:b3:a4:df:27:b1:8f:7e:3b:29:
46:14:b3:89:eb:98:1d:00:b5:e3:9a:01:60:b0:46:2d:b6:40:
10:b3:54:98:c9:0f:a6:13:94:ed:07:a2:8a:b5:51:34:a9:7c:
d0:c0:70:e0:71:b4:84:18:9c:50:d7:0b:de:78:b6:bb:d3:66:
81:cf:bc:d4:38:6d:71:a2:f6:d5:58:7a:fb:5a:24:de:5f:9c:
8f:7b:f4:45:a9:b3:be:93:cc:3c:a7:af:36:46:cb:e8:6d:c6:
49:6c:5f:d2:e5:5f:ce:ec:73:92:97:d3:81:f3:a4:1a:46:4e:
ec:b1:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 22:50:11 2024 by rpki-client on console-ams.rpki-client.org