Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/izrVm6YWHT2SHNb_EOsuuzSaXm4.roa
File: izrVm6YWHT2SHNb_EOsuuzSaXm4.roa (raw, json)
Hash identifier: rDoviRMQ8JY3qOWt4PRS85cvKmQ5ToQFX6pavMH6r4E=
Subject key identifier: 8B:3A:D5:9B:A6:16:1D:3D:92:1C:D6:FF:10:EB:2E:BB:34:9A:5E:6E
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018FE1F3E2943B45755B82616D0842F142C1
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/izrVm6YWHT2SHNb_EOsuuzSaXm4.roa
Signing time: Tue 04 Jun 2024 06:33:27 +0000
ROA not before: Tue 04 Jun 2024 06:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 83.147.252.0/22 maxlen: 22
91.186.200.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e1:f3:e2:94:3b:45:75:5b:82:61:6d:08:42:f1:42:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 4 06:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b3ad59ba6161d3d921cd6ff10eb2ebb349a5e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:55:cc:ac:63:cb:61:c6:d3:bf:f1:cf:7b:
bc:8e:f3:a8:f9:e1:36:0d:8b:20:ce:59:1f:c4:63:
cb:a0:8a:cf:03:c9:c0:88:35:b3:85:3a:15:f4:64:
c1:39:01:57:43:44:12:5d:01:75:89:c0:ed:5d:02:
8f:18:f1:bd:f6:a1:6a:0c:31:6a:98:0f:b6:80:0f:
ba:02:e9:70:d6:3f:bb:32:3c:57:e7:2c:cd:c4:f1:
f4:66:45:81:69:ba:33:84:98:a8:6f:93:60:c2:eb:
0c:ee:4b:fb:3d:84:e9:84:7d:21:89:6f:ca:29:76:
0a:69:c9:8f:d9:bb:04:3a:f5:ba:ea:9b:d9:b6:34:
f4:34:82:76:54:c1:b1:58:a0:4f:96:34:4e:6e:97:
94:aa:a9:05:b9:26:82:0e:95:13:d0:88:6c:0a:ea:
a3:05:94:8e:01:7b:25:c8:c5:f4:5f:99:ae:0a:0e:
db:9d:ec:03:65:f9:1c:39:28:77:2a:29:af:c7:14:
ae:d8:06:e3:94:aa:2a:38:b6:a8:c2:76:bc:62:81:
4b:a5:6c:e9:cf:56:60:f5:90:8b:37:5d:17:7b:71:
9b:5c:59:a8:3b:ea:fb:6c:ed:2d:84:4b:a7:71:3b:
fd:df:dd:14:49:00:19:61:ec:15:99:67:7c:2d:87:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3A:D5:9B:A6:16:1D:3D:92:1C:D6:FF:10:EB:2E:BB:34:9A:5E:6E
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/izrVm6YWHT2SHNb_EOsuuzSaXm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
91.186.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:ea:bb:a1:41:fe:29:9b:12:4f:f7:43:10:39:fd:8f:17:f6:
61:54:34:12:ef:87:7e:e1:a4:63:0c:1d:17:da:52:04:74:4d:
1b:5e:bb:b4:a2:2a:fd:bb:9a:ec:ff:50:3c:6f:5b:23:b6:df:
0f:41:67:8c:be:f6:1e:84:66:61:3d:c4:c8:4f:07:04:3c:59:
a7:f9:b6:7b:3c:f9:3d:b1:ee:d7:60:82:6f:b9:65:17:af:96:
e2:23:7c:08:62:03:4f:58:72:45:c1:d6:1a:04:c9:b8:b1:c5:
f1:ae:fd:18:d8:7a:9d:72:1e:b0:7b:f7:9c:ce:12:58:71:d2:
71:0e:33:a0:e7:36:68:65:4f:21:a4:13:39:79:81:bf:62:2c:
39:ec:79:37:85:f5:2e:b7:c6:5f:6f:bf:67:f5:e8:77:d8:34:
3c:b1:47:7d:5e:4e:d2:be:ce:96:33:20:fb:39:0c:ef:eb:b4:
10:18:00:e6:8c:8e:63:ce:73:15:a9:4d:0a:24:6f:6d:55:6e:
4c:23:96:60:30:e6:99:bf:fe:66:12:e5:da:f8:c9:cc:fe:fa:
cd:62:15:ac:a5:17:4c:a6:17:fe:7c:1b:c5:f5:97:ed:d7:b5:
08:00:91:48:9a:d6:39:87:a0:9f:35:da:db:09:26:21:3e:7d:
dc:33:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:40:22 2024 by rpki-client on console-ams.rpki-client.org