Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/u1p1dcUs2rXHVf3LGVifMu95O4A.roa
File: u1p1dcUs2rXHVf3LGVifMu95O4A.roa (raw, json)
Hash identifier: NBCNcMFY/lLsQBDPbopFkVOi1FWhjv6nKz4ZiXmfC4w=
Subject key identifier: BB:5A:75:75:C5:2C:DA:B5:C7:55:FD:CB:19:58:9F:32:EF:79:3B:80
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BA94CD270D98A63733D95FC1CF3BF5
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/u1p1dcUs2rXHVf3LGVifMu95O4A.roa
Signing time: Tue 02 Jan 2024 10:31:37 +0000
ROA not before: Tue 02 Jan 2024 10:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 83.147.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:94:cd:27:0d:98:a6:37:33:d9:5f:c1:cf:3b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb5a7575c52cdab5c755fdcb19589f32ef793b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:b8:0e:77:5b:f3:f8:11:7a:89:03:44:d0:
b2:a1:b2:6a:f1:fe:d1:26:ca:2a:9d:cc:86:85:97:
cf:8f:9c:07:cc:4e:f6:fd:7d:5f:67:f8:84:ac:28:
6f:cb:5c:a6:4e:0f:fd:59:ac:08:f9:77:4e:1e:9c:
23:f7:45:2a:7f:fe:53:4e:7f:28:a1:ec:c7:3c:29:
20:57:05:cd:64:97:b5:65:b0:dc:c3:33:a3:82:61:
a2:05:a6:16:6d:9d:90:36:11:8c:ef:bf:b4:e4:2b:
16:55:9e:17:b2:ae:83:03:8f:78:8d:7b:f9:6e:6e:
fe:fa:53:a9:6f:2f:f3:19:f7:b1:a3:9a:3c:46:1a:
40:19:71:b3:be:95:99:d6:56:b9:c1:7c:b2:b7:3d:
ae:8d:8e:af:ac:cb:58:04:63:ef:f3:6b:0d:c9:f8:
7f:1b:1e:85:49:49:6d:a4:15:40:48:f0:57:19:01:
21:cf:79:e3:5a:90:9c:fa:f9:e0:3b:10:da:2d:41:
24:50:27:97:48:4b:06:1b:2b:99:ac:2e:4e:f7:3b:
c7:a1:9d:93:4c:31:9e:09:a1:8c:a2:ff:72:86:56:
42:49:cc:8a:a0:72:84:73:f5:8d:d6:d5:4b:70:4e:
b9:75:fe:05:33:97:af:19:98:2c:57:a4:9c:c0:b4:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:75:75:C5:2C:DA:B5:C7:55:FD:CB:19:58:9F:32:EF:79:3B:80
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/u1p1dcUs2rXHVf3LGVifMu95O4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
Signature Algorithm: sha256WithRSAEncryption
57:52:6e:22:86:69:16:17:73:58:0a:c1:05:4d:8c:0c:8b:fa:
09:eb:51:e6:a4:34:3c:84:e3:4b:20:82:b4:e8:dc:bf:99:ef:
42:7a:cb:b3:26:b2:31:32:20:d2:f0:59:99:1c:86:c8:70:2b:
f1:ea:f7:63:2b:0b:6d:76:8b:d3:70:71:2b:62:76:4a:e4:b3:
54:45:e7:b0:51:6b:28:1e:10:30:82:66:64:47:fb:ad:9b:d6:
50:be:81:53:bb:96:2e:ba:a7:ab:5a:34:b7:84:4b:b2:fa:09:
cc:e8:25:cc:da:37:8a:1e:32:ad:d0:14:8f:41:89:bf:f0:c4:
cf:8d:14:ca:3b:03:f7:83:49:66:a3:c4:ee:c0:1e:46:af:9e:
1c:8f:72:9a:0a:1a:33:7a:1c:92:ad:88:c7:f6:52:e0:06:85:
58:4a:90:fc:0b:de:a7:aa:78:67:0b:8a:9b:c7:47:79:41:2e:
74:fa:a6:db:f4:1a:e4:82:b8:92:fa:7a:31:1c:d7:e3:c1:08:
82:55:22:70:03:f9:c9:73:11:73:95:20:e8:b5:71:37:9f:76:
fc:d6:e3:f5:6c:ed:c0:85:60:8f:50:c6:2c:5b:35:aa:ea:8b:
d4:60:7e:87:b0:9e:ed:c2:06:0d:fa:87:da:b1:c8:95:3a:d7:
84:bb:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:20 2024 by rpki-client on console-ams.rpki-client.org