Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/mTI3YWAfq6g37ZsXhiLY8gx56dI.roa
File: mTI3YWAfq6g37ZsXhiLY8gx56dI.roa (raw, json)
Hash identifier: NxCVSavKdFCh1u3Q0nuY/d/2AKSX+2DQKqFnTRqxroM=
Subject key identifier: 99:32:37:61:60:1F:AB:A8:37:ED:9B:17:86:22:D8:F2:0C:79:E9:D2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018D05D6D2C3C276483C6E8D0969F3F638A6
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/mTI3YWAfq6g37ZsXhiLY8gx56dI.roa
Signing time: Sun 14 Jan 2024 02:39:41 +0000
ROA not before: Sun 14 Jan 2024 02:39:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.160.0/22 maxlen: 24
178.253.27.0/24 maxlen: 24
178.253.26.0/23 maxlen: 24
178.253.26.0/24 maxlen: 24
178.253.44.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 06:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:05:d6:d2:c3:c2:76:48:3c:6e:8d:09:69:f3:f6:38:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 14 02:39:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99323761601faba837ed9b178622d8f20c79e9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:f4:d0:98:85:ca:a1:98:6f:bb:ef:af:d4:
a7:72:af:a0:c4:2c:6d:42:e7:81:ee:8a:9f:1c:be:
88:09:ab:94:98:cf:8a:78:3c:34:d0:f0:c2:34:20:
d5:9d:9f:22:5d:6d:6e:13:08:fc:cf:d3:bf:58:b8:
3e:0d:0c:a9:7c:c2:e6:15:fc:ec:99:e1:d5:4d:a2:
1d:e7:72:f4:c0:f5:44:0d:8a:18:6d:00:36:72:1f:
f0:1c:92:fa:c1:6d:4a:42:92:88:54:70:73:61:3f:
fe:4e:44:6d:cf:00:34:f2:77:fb:3e:42:fd:96:34:
ac:79:4d:81:8e:47:7c:26:02:af:fb:4e:e4:ae:1a:
81:35:dd:2b:c4:ee:f5:c0:25:e8:2f:2b:52:1e:36:
ed:ec:db:07:86:cb:1a:f7:62:dd:e0:3d:52:05:18:
ed:12:4e:8e:33:ad:60:d6:3a:42:2e:0c:8f:ea:f5:
db:65:1e:d2:d3:12:79:af:60:e8:2a:d1:a0:55:e1:
30:61:fc:cd:75:73:e4:be:11:4f:5f:44:7c:1d:9a:
06:b7:cb:db:0c:87:34:04:ef:d4:21:d1:cc:db:c6:
77:5c:d0:8d:b0:aa:c0:2e:3f:cb:27:8e:bc:dd:25:
d0:f6:f3:88:97:b5:68:31:8c:79:b5:1f:bc:d9:0c:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:32:37:61:60:1F:AB:A8:37:ED:9B:17:86:22:D8:F2:0C:79:E9:D2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/mTI3YWAfq6g37ZsXhiLY8gx56dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.252.0/22
91.186.216.0/22
94.241.160.0-94.241.165.255
178.253.26.0/23
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
43:bc:0a:7e:7a:08:d7:2b:44:e6:d9:2c:bf:98:03:cf:ee:91:
cb:37:f3:60:b1:11:09:d2:8f:fc:3f:e1:84:c4:5f:0c:af:2c:
9d:06:70:e4:32:c4:96:2f:5a:8d:49:e6:ee:74:f8:8a:9d:97:
57:4c:90:5d:ad:7f:55:1b:b7:76:8a:42:5c:d9:7e:1f:4f:f2:
ae:2f:d1:ce:41:d2:17:7c:b6:0d:ab:b3:97:34:3f:8b:ae:b6:
d5:c2:27:0d:a8:97:ff:36:97:15:63:97:dc:b8:e7:54:7d:3f:
c0:12:e1:2d:52:49:7f:80:96:a5:77:98:29:65:1f:f9:c3:43:
76:50:c1:ea:20:6f:96:af:a2:2a:12:58:ce:b2:8a:a4:e0:1c:
ee:5d:96:a0:3f:46:a5:d3:f3:fc:49:44:4a:93:b1:99:bc:e0:
2d:96:be:9c:65:4b:98:10:74:70:d3:79:e5:e8:c6:50:80:da:
64:3c:c9:2f:34:6a:16:90:be:bd:9e:e8:39:7d:8a:42:3e:66:
9f:9c:99:dc:13:44:23:bf:a8:12:28:0a:6f:57:23:72:1c:64:
1f:c9:6c:63:e8:b6:c7:7e:00:01:6a:bd:9c:1b:7b:c3:b4:09:
df:23:4e:4e:bd:4b:fe:6e:ba:9e:53:7e:79:95:3b:d7:21:96:
d4:1b:68:1f
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAY0F1tLDwnZIPG6NCWnz9jimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwMTE0MDIzOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTMyMzc2MTYwMWZhYmE4MzdlZDliMTc4NjIyZDhmMjBjNzllOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZv00JiFyqGYb7vvr9Sncq+gxCxt
QueB7oqfHL6ICauUmM+KeDw00PDCNCDVnZ8iXW1uEwj8z9O/WLg+DQypfMLmFfzs
meHVTaId53L0wPVEDYoYbQA2ch/wHJL6wW1KQpKIVHBzYT/+TkRtzwA08nf7PkL9
ljSseU2Bjkd8JgKv+07krhqBNd0rxO71wCXoLytSHjbt7NsHhssa92Ld4D1SBRjt
Ek6OM61g1jpCLgyP6vXbZR7S0xJ5r2DoKtGgVeEwYfzNdXPkvhFPX0R8HZoGt8vb
DIc0BO/UIdHM28Z3XNCNsKrALj/LJ4683SXQ9vOIl7VoMYx5tR+82QyRwQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFJkyN2FgH6uoN+2bF4Yi2PIMeenSMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvbVRJM1lXQWZxNmczN1pzWGhpTFk4Z3g1NmRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCU5PoAwQC
U5P8AwQCW7rYMAwDBAVe8aADBAFe8aQDBAGy/RoDBAGy/SwwDQYJKoZIhvcNAQEL
BQADggEBAEO8Cn56CNcrRObZLL+YA8/ukcs382CxEQnSj/w/4YTEXwyvLJ0GcOQy
xJYvWo1J5u50+Iqdl1dMkF2tf1Ubt3aKQlzZfh9P8q4v0c5B0hd8tg2rs5c0P4uu
ttXCJw2ol/82lxVjl9y451R9P8AS4S1SSX+AlqV3mCllH/nDQ3ZQweogb5avoioS
WM6yiqTgHO5dlqA/RqXT8/xJREqTsZm84C2WvpxlS5gQdHDTeeXoxlCA2mQ8yS80
ahaQvr2e6Dl9ikI+Zp+cmdwTRCO/qBIoCm9XI3IcZB/JbGPotsd+AAFqvZwbe8O0
Cd8jTk69S/5uup5TfnmVO9chltQbaB8=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:24 2024 by rpki-client on console-ams.rpki-client.org