Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/l6YSZFcQfG7kw4F5K1SkAworDjk.roa
File: l6YSZFcQfG7kw4F5K1SkAworDjk.roa (raw, json)
Hash identifier: 2SzNsIF08z7U91J9fEuIMkYAex5Pke7uxd1F9RidQXE=
Subject key identifier: 97:A6:12:64:57:10:7C:6E:E4:C3:81:79:2B:54:A4:03:0A:2B:0E:39
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0188B5B081F3626F6AB72F5C579C6426DF76
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/l6YSZFcQfG7kw4F5K1SkAworDjk.roa
Signing time: Tue 13 Jun 2023 16:57:03 +0000
ROA not before: Tue 13 Jun 2023 16:57:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.194.0/23 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.216.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 14:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:b0:81:f3:62:6f:6a:b7:2f:5c:57:9c:64:26:df:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 13 16:57:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97a6126457107c6ee4c381792b54a4030a2b0e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:a4:04:a9:09:ed:38:f8:20:bb:d0:24:0f:
d5:8c:86:12:d4:92:c6:08:71:cd:bf:b9:8c:18:4c:
e7:28:30:8b:4d:b9:d7:02:ab:dd:0e:fb:25:af:3c:
cf:8f:44:f0:50:8e:c7:89:76:6e:49:63:e8:ec:18:
6e:6c:ae:8e:e6:7e:b1:c7:d2:40:12:16:90:61:f7:
3d:1f:eb:28:64:02:36:ab:54:b5:15:09:56:a7:e6:
2e:45:a1:f2:69:27:4d:f3:90:f1:25:71:95:0f:21:
98:22:e2:9f:84:11:05:34:35:f7:52:63:9b:04:ab:
70:0a:70:10:d1:93:53:2a:de:61:44:da:89:9f:e2:
7f:ba:a9:69:c6:0f:f6:29:2b:12:93:42:f3:f1:8b:
50:4d:68:68:9c:11:1f:95:06:5e:f9:39:e6:7f:ac:
2a:12:9d:8d:67:04:c4:8e:35:d3:81:47:2d:d1:f1:
89:6a:e9:d0:6b:60:d2:07:db:fb:c6:3f:bf:91:60:
d8:02:cb:5c:56:79:8f:c5:14:84:0e:f8:60:e5:e4:
25:6d:5f:f0:7f:65:c1:92:5b:9b:73:ed:6a:bb:23:
9e:22:27:5d:ea:50:da:c0:01:2f:95:c3:13:21:58:
eb:90:3d:75:65:c4:b1:d8:d2:9e:3a:2c:7e:60:e4:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:12:64:57:10:7C:6E:E4:C3:81:79:2B:54:A4:03:0A:2B:0E:39
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/l6YSZFcQfG7kw4F5K1SkAworDjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/22
83.147.252.0/22
91.186.194.0/23
91.186.216.0/22
94.241.136.0/21
Signature Algorithm: sha256WithRSAEncryption
10:99:81:be:71:82:20:85:c2:c0:e3:eb:7c:96:e3:ed:55:63:
6a:13:ee:3b:88:4f:cb:5f:bb:c9:1a:b0:c5:c7:4e:d3:0c:00:
15:d7:1b:39:53:51:86:86:73:c4:4d:bf:39:48:51:b9:1f:12:
c0:78:90:1f:f1:6a:2a:7c:39:e5:c6:48:46:53:f9:d6:9e:84:
06:ae:08:d6:f4:2c:e3:70:fb:37:74:3e:fe:23:0c:12:90:f1:
dd:23:8b:09:41:a8:fd:fb:3b:f0:1d:99:59:b4:11:4c:79:cc:
78:b3:70:62:61:bc:d4:22:ae:bc:4d:34:c2:ab:0d:ef:be:3a:
a7:16:96:7d:89:85:4b:5e:27:6c:19:04:cb:cc:71:e1:84:0e:
92:18:44:13:18:b5:2c:89:d4:a2:d9:9d:f7:2d:bc:9b:45:ab:
0c:7c:33:39:e8:38:30:f7:43:86:e4:44:6f:fa:33:91:74:76:
04:04:59:3d:dc:bc:12:73:c6:b3:f1:54:fb:24:54:7e:4b:46:
b0:d9:a4:22:d0:94:c5:b4:21:88:f7:ce:54:65:e0:04:f4:01:
ee:8a:3c:ea:6f:b1:c2:94:04:6f:5f:74:41:a6:f7:59:6a:3d:
e9:c3:f8:1c:ac:7e:f5:9d:dd:ff:26:04:c2:52:2f:ff:c9:fd:
43:56:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org