Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rqYJMuTEg8qlGI1QbWIjY0UrhaQ.roa
File: rqYJMuTEg8qlGI1QbWIjY0UrhaQ.roa (raw, json)
Hash identifier: IRaa/eWyJG4ENZu8soy0Af2cxjFq91yVRz7MO6R7+nc=
Subject key identifier: AE:A6:09:32:E4:C4:83:CA:A5:18:8D:50:6D:62:23:63:45:2B:85:A4
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0188BF7A4FAE9E76A1EEE58B2ECF30D05E68
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rqYJMuTEg8qlGI1QbWIjY0UrhaQ.roa
Signing time: Thu 15 Jun 2023 14:34:03 +0000
ROA not before: Thu 15 Jun 2023 14:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.194.0/23 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:7a:4f:ae:9e:76:a1:ee:e5:8b:2e:cf:30:d0:5e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 15 14:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea60932e4c483caa5188d506d622363452b85a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:90:af:37:55:3d:d9:a5:ce:7c:2f:9b:fa:
e9:36:3e:e5:17:ff:8d:62:e6:2f:ff:9e:d5:e4:b9:
5f:d2:05:90:38:80:56:9a:ff:4d:9b:73:19:a2:fa:
8e:28:b0:41:1d:9e:b9:d8:51:63:cc:53:fa:1f:77:
44:bd:b1:c0:12:b2:1d:08:a2:69:56:43:68:1d:49:
6d:27:c6:ab:6b:ed:ff:48:8c:70:85:b3:dd:d3:16:
7b:2d:36:b4:eb:a7:7b:08:e7:f2:90:d6:9b:9f:52:
d6:f2:36:4c:a5:00:c2:52:02:3d:24:1d:be:98:81:
e6:24:c0:15:53:e9:93:56:c5:c1:12:d4:5b:1b:bf:
8f:b5:b1:4f:a1:b0:05:a9:46:da:92:87:42:fb:da:
ba:e4:7c:bd:e7:ee:8b:cd:34:b6:cd:2f:bc:03:86:
29:7a:b5:8f:1b:8d:90:0f:04:4d:4c:ed:b8:63:3d:
f8:d6:75:87:cd:6b:9b:7f:16:68:7a:ed:07:a9:1a:
5d:86:c1:35:61:a5:9f:6e:34:9c:db:f5:4f:66:1c:
ba:38:36:23:4e:a7:b8:f3:83:09:b3:ec:6a:21:4c:
c2:02:a0:f3:70:33:93:19:51:3d:ad:65:87:72:5f:
20:57:a0:6a:6f:a5:40:37:23:87:60:f0:cc:a8:38:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A6:09:32:E4:C4:83:CA:A5:18:8D:50:6D:62:23:63:45:2B:85:A4
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rqYJMuTEg8qlGI1QbWIjY0UrhaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/22
83.147.252.0/22
91.186.194.0/23
91.186.216.0/22
94.241.136.0/21
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
00:63:bf:64:8f:16:50:67:9b:b9:ab:0f:78:ba:8a:8d:14:92:
ec:d4:64:e6:9b:b4:94:47:cd:de:1a:7a:26:cb:bd:e5:9a:a4:
0c:a5:6d:ce:3f:d3:3c:96:01:0f:c5:2b:77:49:e4:d0:b8:32:
7d:eb:12:4e:b6:87:c2:e3:27:49:a9:b6:9b:99:3d:7a:01:b2:
06:41:99:82:6a:6f:22:0f:c6:c5:2d:35:e4:16:68:f2:d8:8e:
0c:1f:64:d2:b1:1e:df:33:ba:a4:0c:4f:32:03:91:fc:c8:99:
f0:89:55:57:6f:ce:13:57:2d:f8:a5:c9:f8:62:89:c3:50:39:
44:ed:41:83:71:82:81:e5:e6:49:45:4f:f6:36:bd:e8:0d:1b:
b6:14:69:0b:30:7f:04:cc:e6:f6:b8:90:b8:ac:82:4c:91:2a:
b0:92:9b:8d:8a:8f:46:03:a6:1f:f2:f6:cc:a7:77:6d:f5:ec:
13:ad:22:1a:4d:d8:f1:4f:72:15:44:d4:ea:c5:a3:e8:04:c0:
b4:a9:6b:ca:7d:1f:d6:b2:63:a5:25:3a:71:4a:24:18:f4:d1:
62:45:c0:0e:61:d3:e6:09:47:ed:30:61:54:e7:f6:87:80:56:
76:ac:4d:95:0e:ee:72:00:d8:cb:9d:06:bf:5e:f6:df:9a:33:
07:b7:2e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org