Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/iOER8mgt8Il8GD5WILQPfUknCaI.roa
File: iOER8mgt8Il8GD5WILQPfUknCaI.roa (raw, json)
Hash identifier: K4+HWxlNWIfqh+pQzlL/bSgWtCKBWv69KfNy/GvebAY=
Subject key identifier: 88:E1:11:F2:68:2D:F0:89:7C:18:3E:56:20:B4:0F:7D:49:27:09:A2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01865C43918323E3531C3A2976E8D6B37079
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/iOER8mgt8Il8GD5WILQPfUknCaI.roa
Signing time: Thu 16 Feb 2023 22:06:17 +0000
ROA not before: Thu 16 Feb 2023 22:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 83.147.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 May 2023 19:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:43:91:83:23:e3:53:1c:3a:29:76:e8:d6:b3:70:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 16 22:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88e111f2682df0897c183e5620b40f7d492709a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:9d:73:56:d8:75:1b:8f:ad:16:f1:a5:0e:
36:91:d2:83:c5:ce:2b:c8:59:89:46:8f:c2:45:77:
33:0a:d1:06:94:a6:d3:e5:99:28:3a:49:55:f5:32:
a7:70:72:ff:8c:5b:64:68:58:0a:10:7c:c7:78:a4:
7e:87:e9:45:46:83:25:ca:78:96:13:9f:0a:84:57:
5a:ed:50:05:b6:66:a3:cc:f3:3e:95:e2:21:1c:02:
66:b7:62:70:4b:5c:11:56:52:24:fa:a1:af:fb:af:
8f:a0:bd:d9:86:70:f7:9e:30:52:20:e2:f1:d3:b8:
d6:24:ec:a6:43:5f:a7:ff:21:bf:eb:6a:b5:02:00:
40:70:cb:58:bf:8e:47:59:9a:e6:13:6d:e1:da:9d:
4c:35:09:eb:e5:0a:a7:a4:3c:d8:20:8c:ce:32:67:
c7:b0:f8:d1:b4:7d:95:67:a6:2a:f0:f4:3d:76:45:
23:65:1a:c8:e7:63:95:ac:46:4c:98:79:80:fd:da:
51:34:47:0a:0c:fe:d4:ac:1f:99:3c:3b:05:ee:2a:
92:dd:d0:00:25:ac:e5:0b:8d:4c:34:56:b7:92:f4:
20:90:6b:29:82:11:53:6c:de:25:8c:d8:7a:54:2b:
95:9a:5a:c9:55:6b:d7:cd:02:1c:9f:3b:7c:26:d8:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:11:F2:68:2D:F0:89:7C:18:3E:56:20:B4:0F:7D:49:27:09:A2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/iOER8mgt8Il8GD5WILQPfUknCaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
Signature Algorithm: sha256WithRSAEncryption
09:ac:f8:44:43:f4:86:18:ce:7c:4d:0b:b0:66:43:67:97:1f:
08:3a:3f:56:00:6d:38:50:00:22:08:2f:db:dc:0d:1a:72:5e:
de:9f:5c:5d:1e:d9:38:64:45:91:87:ec:48:e1:eb:09:58:f7:
c4:93:44:27:b8:ca:59:e9:48:75:1b:d9:12:45:61:15:cf:42:
6a:50:1e:05:4a:23:3c:b6:2c:72:e4:ab:f5:07:66:bb:4f:de:
af:a7:90:6e:34:71:c1:6c:15:6b:5d:5d:aa:48:5c:7c:4e:74:
9d:a0:07:73:81:bf:56:40:21:ca:d7:97:9c:93:4d:da:a7:ff:
45:cc:e6:ea:92:df:37:f3:4e:d0:5b:45:8e:5c:75:b6:27:c6:
b0:44:53:f9:9d:60:b8:58:97:ae:13:93:1d:c8:f0:a8:78:da:
11:1d:9c:6a:d6:a4:f0:27:5d:44:f5:58:d0:22:e1:0f:d3:74:
ce:59:e7:8f:e2:54:c1:3f:99:44:e2:5f:6d:fc:40:b3:45:c6:
b5:af:53:b7:da:f3:12:20:53:2f:18:a6:8c:db:4c:da:60:68:
fd:7e:c2:79:d0:fe:42:0d:d2:7c:a0:6e:e2:aa:f3:96:fa:ca:
f5:22:df:7d:ce:62:06:54:34:61:f4:f2:0c:d0:b5:cb:d3:43:
ca:8c:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org