Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/s18PwIcnGm86IGgmWNCK1B6fe_I.roa
File: s18PwIcnGm86IGgmWNCK1B6fe_I.roa (raw, json)
Hash identifier: NdlbfPXP2dNLozgrPQdOGkOmkbRJLuASl0HHHoZFhTI=
Subject key identifier: B3:5F:0F:C0:87:27:1A:6F:3A:20:68:26:58:D0:8A:D4:1E:9F:7B:F2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018582BED2A791D53E07573AD350313F4C33
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/s18PwIcnGm86IGgmWNCK1B6fe_I.roa
Signing time: Thu 05 Jan 2023 16:23:41 +0000
ROA not before: Thu 05 Jan 2023 16:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211584
IP address blocks: 91.186.208.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:be:d2:a7:91:d5:3e:07:57:3a:d3:50:31:3f:4c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 5 16:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b35f0fc087271a6f3a20682658d08ad41e9f7bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:06:7b:62:e9:ff:9a:00:86:2b:42:20:d8:5d:
56:2f:d9:25:15:97:92:d3:2f:2b:f2:60:ff:bd:44:
8b:58:41:3f:8a:26:54:39:50:fc:1b:ae:da:6e:fd:
34:a4:30:58:62:77:02:82:3f:e3:95:b4:7e:7a:0f:
42:ff:f0:b8:ed:7c:cf:bc:da:67:f0:94:e9:99:b1:
e5:e8:70:5a:d4:5c:86:01:6f:de:f1:35:76:62:d7:
72:02:f6:bd:cc:d8:5a:23:02:80:f5:c0:e6:d2:43:
46:da:2d:c3:79:56:1a:98:04:58:96:a9:d1:bd:67:
b2:c5:95:66:2a:73:d4:02:b2:8a:f1:19:e9:2c:8c:
bd:e5:bf:ec:a8:33:84:52:6e:cb:f9:e9:6d:bd:29:
ee:87:40:f3:ba:57:81:55:5a:6a:a9:fe:d7:5c:31:
95:e4:7d:1c:ec:4e:27:1c:ac:ee:6e:2b:cb:1f:52:
0f:9d:05:66:5f:f8:82:d7:d2:9e:0c:d7:ab:d2:42:
89:9a:c1:e0:9c:f3:c1:d2:26:4f:b8:e2:6c:7b:29:
24:8a:77:ad:f1:7f:58:c8:16:cf:a7:1d:ef:c4:35:
e8:cf:10:f4:af:2d:bf:e9:e6:a4:7b:49:5f:a8:81:
26:bd:eb:11:a8:6a:39:ed:2e:59:52:b4:15:03:a7:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:0F:C0:87:27:1A:6F:3A:20:68:26:58:D0:8A:D4:1E:9F:7B:F2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/s18PwIcnGm86IGgmWNCK1B6fe_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
91.186.208.0/22
Signature Algorithm: sha256WithRSAEncryption
63:7e:28:50:af:9f:9e:1f:25:26:fc:78:2e:1d:05:66:b9:78:
ad:c6:fe:7e:56:ee:ab:70:76:61:f1:8d:f5:54:3e:37:a5:57:
bf:8a:cc:17:31:e4:1f:f0:f1:e1:a0:39:b1:07:a8:f2:ed:d1:
ff:6a:8a:27:b4:e4:dc:09:a5:29:af:fd:d4:46:13:1e:c6:93:
be:70:66:5e:34:97:4c:a6:67:3c:e1:e2:8c:56:40:4c:0f:de:
67:aa:8f:5e:83:3b:b5:95:35:ee:23:e2:fe:6f:1e:43:40:59:
f6:00:c5:d9:f3:2b:86:ba:40:b4:06:c4:b1:01:f4:25:be:e2:
33:78:32:8a:2d:70:62:65:b4:f7:11:7c:8e:75:ad:f2:21:6f:
58:e4:08:64:82:b7:c7:54:bd:44:2d:f4:83:b8:bd:f4:0a:2f:
48:29:57:e9:47:fd:ef:50:7b:e4:32:e7:f2:b4:57:ad:27:3d:
98:36:62:5d:ae:47:00:10:69:82:ee:f4:0c:43:85:f7:46:f3:
b3:75:bc:3f:38:7a:a9:20:af:4c:86:0d:fc:be:9d:92:a9:51:
74:5a:9b:05:c3:b3:b7:98:52:2f:94:2e:76:f7:d4:f2:8e:4a:
a4:e6:b1:27:ff:1c:d9:97:c6:f1:62:81:70:d0:a3:96:2d:f7:
d6:3a:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org