Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/l_u7uLjSwBBVF0hh9GPG-nz8kQU.roa
File: l_u7uLjSwBBVF0hh9GPG-nz8kQU.roa (raw, json)
Hash identifier: idMUUcdVzXCPcdEWUcYzH/SlqTZRsHFMwprkirF9bN8=
Subject key identifier: 97:FB:BB:B8:B8:D2:C0:10:55:17:48:61:F4:63:C6:FA:7C:FC:91:05
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A506547508A73995A62B01202E9474FEE
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/l_u7uLjSwBBVF0hh9GPG-nz8kQU.roa
Signing time: Fri 01 Sep 2023 10:58:49 +0000
ROA not before: Fri 01 Sep 2023 10:58:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16200
IP address blocks: 91.186.192.0/24 maxlen: 24
83.147.192.0/24 maxlen: 24
83.147.193.0/24 maxlen: 24
83.147.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:65:47:50:8a:73:99:5a:62:b0:12:02:e9:47:4f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 1 10:58:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97fbbbb8b8d2c01055174861f463c6fa7cfc9105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:39:03:91:fd:cc:14:67:e7:94:6c:e2:16:
7e:13:2e:ee:74:33:59:25:25:96:ec:3c:a8:df:79:
6b:e5:39:57:bb:6f:c4:52:e1:42:61:05:67:b6:47:
19:c1:a4:f1:24:7e:d7:49:38:c4:95:ae:7c:df:19:
a0:24:e4:0f:9c:44:85:46:aa:22:60:69:c6:97:8a:
87:b7:0b:8b:e1:57:cc:78:ac:e0:ea:e2:c9:05:9f:
af:c6:1e:a7:9f:56:b4:d1:21:ea:6e:f3:4d:30:df:
3e:fa:e2:bf:fc:ea:2b:c4:cb:b7:83:57:7c:78:86:
28:98:2c:24:77:22:da:86:31:70:f7:e7:7c:6a:7c:
71:30:19:4a:2e:fa:57:8f:f0:70:1a:13:8b:48:33:
06:e1:f7:da:27:6c:cb:3b:54:24:44:69:57:67:2b:
47:bb:6a:d8:15:c9:dd:25:ee:ea:31:78:d5:53:48:
eb:ab:3e:c9:20:3a:74:2f:92:0e:8a:52:a3:d7:88:
ae:27:b4:93:64:2a:11:77:c2:2f:9b:44:33:3e:4a:
6e:2f:6e:cf:18:3d:8e:b4:bf:c2:92:10:83:d1:00:
fc:0b:7d:b2:df:3b:53:1e:db:60:36:6d:86:da:1b:
a7:36:3e:83:b5:2d:c4:f5:f5:8f:c8:07:81:9d:b8:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:BB:B8:B8:D2:C0:10:55:17:48:61:F4:63:C6:FA:7C:FC:91:05
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/l_u7uLjSwBBVF0hh9GPG-nz8kQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0-83.147.194.255
91.186.192.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a0:d2:33:74:24:56:aa:d4:0b:fb:4c:67:f4:6e:f7:26:c4:
7c:a4:f2:73:47:da:9c:23:95:9b:98:c3:b1:0d:56:1d:9b:aa:
86:e3:36:8a:e6:c8:60:98:18:e6:5f:d1:06:e4:3b:8a:34:da:
9c:8c:6a:bd:1e:a0:99:5d:04:cd:8a:4d:e3:ca:59:55:a2:89:
06:89:e6:7c:6f:ad:b1:b2:42:aa:67:2f:82:12:b1:67:d6:66:
a4:ce:46:f3:8a:fe:ee:76:9c:15:91:41:24:b5:61:c8:c5:d3:
d8:83:3a:eb:b5:cb:4d:a1:c2:0c:6e:30:f0:d5:18:eb:91:38:
af:ab:9c:47:1e:df:57:5e:30:d9:f2:02:68:ad:fb:0c:d8:88:
68:2c:f6:aa:70:82:37:54:0d:45:04:98:c2:01:8d:a1:f3:78:
fc:56:3f:db:16:24:95:92:9f:91:35:64:b7:9d:d0:6a:d5:d4:
76:36:34:81:c3:d4:c0:a2:b5:9a:62:9d:ed:de:dc:19:c5:a8:
2d:94:1d:a7:41:93:21:fa:f0:6d:3f:5d:5e:48:b8:2b:90:82:
43:b3:24:7d:33:66:94:9e:c6:95:75:ff:30:65:84:c4:88:1f:
67:b7:96:65:9d:08:68:37:b5:53:f5:1d:a6:4e:6f:bf:63:13:
ed:f7:64:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:36 2024 by rpki-client on console-ams.rpki-client.org