Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/oizTzB9Sn2W5JQlJ1jFuldLyg2Y.roa
File: oizTzB9Sn2W5JQlJ1jFuldLyg2Y.roa (raw, json)
Hash identifier: 3SMdc1W4F7YYKVmpKqpTv1TwBKxHAcVdzogPP5LpLTY=
Subject key identifier: A2:2C:D3:CC:1F:52:9F:65:B9:25:09:49:D6:31:6E:95:D2:F2:83:66
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A0034F2AD3263ABF85EFE48C63BFA299B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/oizTzB9Sn2W5JQlJ1jFuldLyg2Y.roa
Signing time: Wed 16 Aug 2023 21:16:24 +0000
ROA not before: Wed 16 Aug 2023 21:16:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.208.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.22.0/23 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 16:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:00:34:f2:ad:32:63:ab:f8:5e:fe:48:c6:3b:fa:29:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 16 21:16:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a22cd3cc1f529f65b9250949d6316e95d2f28366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:0d:f5:79:4f:a7:b6:43:f7:70:b4:db:71:
f0:44:6f:f9:92:46:93:62:0d:ec:0a:00:5a:97:55:
56:d9:dc:01:da:1d:00:88:87:fe:03:cd:e0:46:14:
ac:ca:4f:d3:8c:19:15:9a:bb:ed:9b:3a:58:38:0f:
5a:fc:fc:74:cd:b2:88:e3:19:5d:f7:27:f1:d7:18:
66:2a:75:51:1d:b2:67:c2:f0:c6:a5:59:b7:e7:7f:
5b:06:48:ef:f2:93:4b:c5:25:86:05:af:3a:47:f7:
97:8b:e2:83:3f:5d:c3:d5:cd:44:f2:b0:f0:47:97:
2e:b9:a3:a1:f4:c8:93:76:14:d8:f2:bf:2a:3f:ab:
c5:9e:db:6d:d5:b0:fa:8b:78:b9:c6:cc:84:c4:25:
6d:b5:c0:48:73:81:6d:dc:79:1d:c8:e2:f7:5d:a2:
76:28:6b:7f:78:38:ac:ec:80:68:45:90:bd:f0:ef:
8e:cf:97:8f:17:70:f0:01:ed:59:ab:37:a8:74:87:
f1:09:23:fc:ff:99:b6:13:7c:b0:fc:73:f5:7c:ac:
4e:74:7a:19:a2:eb:66:db:b2:79:48:98:ef:f9:26:
69:93:57:52:cd:73:23:3e:90:2a:fd:b1:07:51:ef:
03:7a:ee:88:42:63:01:80:dc:45:cc:fc:73:fb:57:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:D3:CC:1F:52:9F:65:B9:25:09:49:D6:31:6E:95:D2:F2:83:66
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/oizTzB9Sn2W5JQlJ1jFuldLyg2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.208.0/22
91.186.216.0/22
94.241.168.0/21
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
03:80:06:d8:12:f0:a2:5c:eb:ef:04:86:24:8f:68:79:12:04:
4d:f8:0b:87:43:32:c2:c6:c8:bd:a6:78:96:fb:00:0e:0f:87:
59:87:86:47:27:69:9e:96:c2:c1:5a:2f:2c:61:71:54:40:8e:
4a:d8:ce:14:02:e2:94:a0:26:eb:a9:b4:e7:23:d1:34:06:45:
36:52:59:d7:be:7f:29:93:2b:ec:2d:b3:54:75:96:22:3a:48:
b7:e7:1b:5e:dd:88:bb:48:e8:a3:f3:91:6d:2b:1e:a4:4a:2b:
fe:a0:42:15:03:b3:f9:03:65:7d:3e:19:6f:09:7c:17:50:76:
e8:86:f1:c6:dc:95:4f:55:09:f8:44:ca:66:25:05:3b:fe:eb:
d7:b7:d7:c0:8d:d7:df:53:1a:bb:d5:15:94:8e:74:3f:59:5a:
13:ff:ae:e7:bc:8d:61:3b:86:c2:a3:4c:dd:ae:45:8e:87:80:
3d:33:32:23:af:45:8d:b1:02:9a:93:62:8c:bd:83:50:a3:d4:
90:20:e3:bd:84:dc:a9:2d:0e:74:73:ec:72:7e:eb:b1:e9:18:
cb:d5:d7:a4:65:39:03:db:77:96:38:d5:7f:0a:fa:20:7c:dc:
40:80:4f:ee:fb:b1:a2:47:c3:11:b5:c0:7f:d9:d9:ae:f6:1f:
17:4e:c0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org