Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/t4DjYYIRhPFcNSzvLidr5hQedyI.roa
File: t4DjYYIRhPFcNSzvLidr5hQedyI.roa (raw, json)
Hash identifier: WqSjO175dzT6qUzigxuPOu+6fZeBWWVpXABl4ulQDQk=
Subject key identifier: B7:80:E3:61:82:11:84:F1:5C:35:2C:EF:2E:27:6B:E6:14:1E:77:22
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A3206C5DE1D9419CEB001BAF65DDAA2A7
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/t4DjYYIRhPFcNSzvLidr5hQedyI.roa
Signing time: Sat 26 Aug 2023 13:26:59 +0000
ROA not before: Sat 26 Aug 2023 13:26:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16200
IP address blocks: 91.186.192.0/24 maxlen: 24
83.147.192.0/24 maxlen: 24
83.147.193.0/24 maxlen: 24
83.147.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Aug 2023 13:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:32:06:c5:de:1d:94:19:ce:b0:01:ba:f6:5d:da:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 26 13:26:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b780e361821184f15c352cef2e276be6141e7722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:eb:2f:73:da:f3:ef:94:7d:da:01:6e:59:
5b:6e:7d:f8:b8:f6:a4:4b:f8:cd:36:04:0b:44:ac:
37:c2:60:37:a1:59:eb:28:5f:c9:e2:b3:7e:03:15:
ff:24:ac:7a:ea:9f:6e:5d:c7:29:76:95:2f:ea:72:
9d:47:ae:9c:cc:19:6e:03:54:14:f0:a4:c6:78:da:
5f:05:60:92:b4:e5:78:58:d8:7a:a5:b8:a0:a4:ac:
3d:58:ce:8b:64:10:7a:7e:27:6d:e0:f2:4b:a3:3c:
aa:67:80:3f:3a:76:13:2f:10:3a:a3:f1:94:be:c5:
05:24:23:56:82:e0:50:c6:bb:b4:d9:32:93:c3:ef:
49:1c:a7:f0:4d:ad:da:2c:42:79:6a:c2:c6:88:eb:
09:e8:38:84:6f:f7:9c:1d:e5:1f:6f:a2:90:67:d3:
a2:73:7c:aa:fd:46:a1:a3:ea:c8:f4:f2:88:8a:e0:
bc:fd:54:a9:f1:a0:fe:a1:12:21:fb:e0:b5:54:ef:
01:49:a3:63:f8:40:7d:a5:2f:a4:72:af:2d:b5:c1:
a2:38:4f:90:b3:25:1d:d6:e2:e3:fb:ec:b9:05:ec:
33:a0:f6:f0:f9:54:d7:74:f6:0c:38:83:36:92:de:
ae:42:38:2f:fd:55:51:ed:23:ae:40:08:6b:3e:b1:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:80:E3:61:82:11:84:F1:5C:35:2C:EF:2E:27:6B:E6:14:1E:77:22
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/t4DjYYIRhPFcNSzvLidr5hQedyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0-83.147.194.255
91.186.192.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3b:91:0b:29:a5:68:fc:2d:36:7f:db:1f:4f:57:f2:ac:be:
fc:9d:d9:cd:9a:a6:5f:98:6f:69:f6:4a:62:80:81:6e:67:c0:
43:49:94:54:03:a5:64:2f:0c:29:10:d2:4b:a5:b2:db:40:a0:
f0:79:8a:05:ca:dc:32:02:b9:e2:8f:13:6f:89:e2:cf:fe:b8:
32:0c:81:c4:6e:d6:6c:5f:35:91:03:3e:58:c7:12:9b:8e:28:
9a:9f:74:32:46:cd:6a:39:8c:d6:a9:e6:1f:02:60:07:f5:90:
b7:bf:17:eb:58:0c:a2:b5:53:6f:ad:58:83:36:e3:b8:be:36:
d3:02:7f:5f:64:70:a6:0e:fd:86:80:b8:bf:98:c6:af:fd:bf:
ee:7b:1d:99:53:00:e7:c0:4f:55:96:05:b6:31:bc:e1:03:36:
63:83:a1:cb:eb:12:dd:84:17:bb:7b:b1:87:d5:c8:f5:03:ca:
76:dd:81:aa:6d:b6:dc:27:ce:06:7f:29:7e:1a:22:7d:0b:6e:
f0:02:d2:cf:29:32:0a:eb:89:fc:0f:20:9a:c7:1c:f0:96:66:
89:c0:e7:95:e9:4f:4e:25:d5:c1:e8:7c:b4:ff:7a:d0:fa:4f:
23:dd:69:4d:c9:0d:8c:94:df:da:4d:02:4a:62:ca:b0:6c:b5:
c3:26:39:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:20 2024 by rpki-client on console-ams.rpki-client.org