Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/m0X4r3NmEPvsThZ7X6fl7xeZSPk.roa
File: m0X4r3NmEPvsThZ7X6fl7xeZSPk.roa (raw, json)
Hash identifier: lUjTQbtjfFvVF1xx0EayRzBdWZxdkjanYOjBkrsxXoQ=
Subject key identifier: 9B:45:F8:AF:73:66:10:FB:EC:4E:16:7B:5F:A7:E5:EF:17:99:48:F9
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018998214F106B742F5CC4FC27EA243EC786
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/m0X4r3NmEPvsThZ7X6fl7xeZSPk.roa
Signing time: Thu 27 Jul 2023 16:14:27 +0000
ROA not before: Thu 27 Jul 2023 16:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.22.0/23 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:21:4f:10:6b:74:2f:5c:c4:fc:27:ea:24:3e:c7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 27 16:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b45f8af736610fbec4e167b5fa7e5ef179948f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:dc:23:a4:1c:e2:37:52:3d:44:5e:33:16:
a4:0c:98:88:c1:d2:e5:4c:95:ec:a6:ae:0c:14:4e:
58:9e:11:88:31:9d:53:7f:cc:76:a1:7d:58:dc:13:
de:3e:eb:a5:9f:07:64:0b:e1:a3:51:aa:de:00:28:
19:b2:47:1f:84:58:9d:9d:34:48:26:9a:4b:59:83:
6f:e6:85:f3:12:1a:14:bb:a7:40:91:66:9c:65:2c:
a4:96:92:03:9a:c2:3f:84:18:8a:6c:be:52:91:11:
e9:c5:78:d5:91:e4:8b:0c:c1:b9:b5:f6:3f:29:ba:
0b:29:9a:78:d9:54:06:1a:73:ff:f5:08:ed:5d:41:
2e:15:f7:db:14:26:61:ed:2d:3c:6e:30:9f:5e:ee:
ed:f1:0f:f9:90:eb:12:01:00:81:8f:67:27:47:62:
27:2a:30:96:5a:dc:89:94:69:01:e6:d8:88:90:83:
51:fe:74:d6:59:c2:b0:34:9f:b7:6d:8b:ca:27:a2:
15:e5:f5:91:1b:77:3c:7f:d5:69:83:68:85:0a:a0:
f1:13:31:05:65:4b:e2:cc:51:eb:c4:b8:38:6c:1c:
66:a7:8c:d6:24:3c:2d:e6:1b:c8:48:b9:a7:fb:0d:
09:ab:95:b3:22:18:0e:b6:8c:d4:32:85:8d:94:53:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:F8:AF:73:66:10:FB:EC:4E:16:7B:5F:A7:E5:EF:17:99:48:F9
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/m0X4r3NmEPvsThZ7X6fl7xeZSPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
71:05:31:d9:f4:5f:4f:41:7f:78:e6:1a:76:ac:b9:62:c5:bf:
54:2b:24:6e:7f:25:6f:00:b9:b7:46:4a:a9:4b:7f:a4:1d:28:
3e:b2:f0:02:6e:95:d9:83:2a:f6:e5:52:fd:b9:98:ad:f9:0c:
66:a8:0d:60:4e:10:d6:3c:d6:d1:3a:c8:7f:cf:73:5d:be:8f:
f7:fd:f5:08:e7:67:d1:70:4f:da:96:40:d8:3d:5a:6d:39:9f:
39:d2:41:fc:0b:a2:7b:ac:37:31:b1:3a:48:79:7b:bc:4b:ae:
1d:2a:b1:b2:fa:e9:f7:a6:95:86:d3:4f:7c:40:49:46:11:bd:
fb:c0:c8:e1:4c:79:42:38:64:e5:76:df:90:06:52:c6:2b:76:
cf:5d:d0:79:4d:08:4a:5d:f1:ea:49:78:bc:3c:0c:28:77:5a:
bc:ed:a7:1c:f5:64:1b:2b:04:b3:e5:b3:71:9e:da:6e:92:7a:
df:9a:ee:3a:31:7e:d9:45:2b:40:53:a7:00:24:48:57:2b:c9:
80:8f:5f:0c:61:01:39:b7:c2:5a:6a:59:60:e4:0d:9f:0d:0b:
96:c8:13:1d:6c:dd:d9:e7:86:01:86:be:7a:ee:96:05:dc:47:
90:89:05:75:3f:f9:5e:2f:75:16:0f:ce:78:9a:fb:21:73:74:
71:1e:b1:1f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYmYIU8Qa3QvXMT8J+okPseGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwNzI3MTYxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjQ1ZjhhZjczNjYxMGZiZWM0ZTE2N2I1ZmE3ZTVlZjE3OTk0OGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8XcI6Qc4jdSPUReMxakDJiIwdLl
TJXspq4MFE5YnhGIMZ1Tf8x2oX1Y3BPePuulnwdkC+GjUareACgZskcfhFidnTRI
JppLWYNv5oXzEhoUu6dAkWacZSyklpIDmsI/hBiKbL5SkRHpxXjVkeSLDMG5tfY/
KboLKZp42VQGGnP/9QjtXUEuFffbFCZh7S08bjCfXu7t8Q/5kOsSAQCBj2cnR2In
KjCWWtyJlGkB5tiIkINR/nTWWcKwNJ+3bYvKJ6IV5fWRG3c8f9Vpg2iFCqDxEzEF
ZUvizFHrxLg4bBxmp4zWJDwt5hvISLmn+w0Jq5WzIhgOtozUMoWNlFPGYQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJtF+K9zZhD77E4We1+n5e8XmUj5MB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvbTBYNHIzTm1FUHZzVGhaN1g2Zmw3eGVaU1BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCU5P0AwQC
U5P8AwQCW7rYAwQDXvGoAwQBsv0WMA0GCSqGSIb3DQEBCwUAA4IBAQBxBTHZ9F9P
QX945hp2rLlixb9UKyRufyVvALm3RkqpS3+kHSg+svACbpXZgyr25VL9uZit+Qxm
qA1gThDWPNbROsh/z3Ndvo/3/fUI52fRcE/alkDYPVptOZ850kH8C6J7rDcxsTpI
eXu8S64dKrGy+un3ppWG0098QElGEb37wMjhTHlCOGTldt+QBlLGK3bPXdB5TQhK
XfHqSXi8PAwod1q87acc9WQbKwSz5bNxntpuknrfmu46MX7ZRStAU6cAJEhXK8mA
j18MYQE5t8Jaallg5A2fDQuWyBMdbN3Z54YBhr567pYF3EeQiQV1P/leL3UWD854
mvshc3RxHrEf
-----END CERTIFICATE-----
Generated at Mon Aug 7 16:39:03 2023 by rpki-client on console-ams.rpki-client.org