Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/o49UpJovBJD36QT_xqfToQ5PPy8.roa
File: o49UpJovBJD36QT_xqfToQ5PPy8.roa (raw, json)
Hash identifier: jYBioD34tsMwWaW9c2DxxmjgBc8xBiM031zARu03Wf4=
Subject key identifier: A3:8F:54:A4:9A:2F:04:90:F7:E9:04:FF:C6:A7:D3:A1:0E:4F:3F:2F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01935E2B621F8411372212819D93633D864B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/o49UpJovBJD36QT_xqfToQ5PPy8.roa
Signing time: Sun 24 Nov 2024 12:35:21 +0000
ROA not before: Sun 24 Nov 2024 12:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.192.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 19:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5e:2b:62:1f:84:11:37:22:12:81:9d:93:63:3d:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 24 12:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a38f54a49a2f0490f7e904ffc6a7d3a10e4f3f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:29:8e:63:61:5a:31:f9:c6:e6:de:e6:f2:
3d:f7:a7:0f:a9:ad:3b:e5:a9:9e:43:8b:44:a3:1f:
ce:77:f0:38:9e:16:ad:aa:fc:02:4d:92:88:c8:06:
52:f5:35:94:96:4f:a7:e8:24:e3:f1:ce:b4:78:e2:
64:5a:c5:05:30:e9:6d:02:93:ec:8a:fd:75:cb:4a:
40:73:c1:f8:79:20:f0:51:3e:1e:b9:9e:7b:58:34:
9c:fb:97:1b:ca:09:b5:a9:a9:5a:17:70:71:93:06:
b3:bb:1e:46:67:a8:9c:de:b0:4a:42:c7:3d:51:17:
b7:54:a7:16:01:49:41:ea:93:d1:d5:6d:e4:4e:a5:
ac:a8:f9:8a:da:e4:65:ea:9f:1b:a7:31:c7:a5:13:
5b:62:17:7e:2e:1a:c2:30:a4:22:b3:3f:48:e5:ac:
8b:57:0c:89:43:8c:48:a5:b5:9b:b8:29:81:39:b6:
a5:ed:2d:88:e2:5b:13:47:a8:48:cc:a2:a4:15:93:
f0:76:95:0c:d8:a4:13:07:15:05:9a:5d:73:98:1b:
15:36:d3:43:05:88:e9:15:ef:51:3a:70:bf:a8:63:
63:b1:20:53:1c:29:f4:41:27:70:1c:cb:b0:89:15:
a1:a7:02:14:df:51:d5:d4:93:c3:f8:db:1d:cb:24:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:54:A4:9A:2F:04:90:F7:E9:04:FF:C6:A7:D3:A1:0E:4F:3F:2F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/o49UpJovBJD36QT_xqfToQ5PPy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0/24
83.147.244.0/22
91.186.200.0/21
94.241.168.0/21
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
92:08:f4:bd:5e:8c:70:97:fc:25:af:85:a8:21:2d:b2:b2:39:
95:e4:0a:4a:a8:b1:85:c1:f4:ab:49:94:da:aa:1b:b2:f5:ab:
c5:0f:17:99:f6:94:1d:a8:be:a5:f0:74:d6:b9:f5:02:7e:30:
d3:4b:10:bf:24:89:d2:12:cb:8f:9a:d7:2a:c1:a7:66:3c:d8:
4a:ac:a6:74:66:c6:8b:0b:9d:de:84:db:a9:43:c4:7b:61:8d:
f9:93:4b:35:55:eb:1e:6c:6e:ea:b0:fd:5c:aa:18:b2:cc:40:
7f:26:67:e4:13:8b:ef:b6:c8:74:2a:4f:e8:54:d9:8f:7b:07:
b1:2c:50:35:2c:53:2a:9e:6a:f1:d4:e5:76:93:ca:d7:98:38:
5f:b3:e2:8a:d9:51:31:9c:7b:e9:90:16:fa:6b:71:9b:90:20:
e3:14:f1:75:dd:ff:11:ca:1e:31:fc:39:b5:c7:e7:fd:76:d1:
55:92:e2:09:a6:51:d7:4f:1d:4b:3a:1a:41:95:84:e0:c0:d9:
67:0d:6c:be:c3:a5:a1:ab:d2:72:ba:53:81:59:4f:7c:d9:9c:
e4:bc:31:fd:c4:61:2d:62:0d:62:88:87:69:22:87:61:fa:48:
36:d2:00:0f:d5:d4:f5:b6:b6:0d:7e:11:8c:62:6a:2d:d3:b2:
2d:f4:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:18:53 2024 by rpki-client on console-ams.rpki-client.org