Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/u4eTLWA5IB9keA3YTR_xxVpIc7I.roa
File: u4eTLWA5IB9keA3YTR_xxVpIc7I.roa (raw, json)
Hash identifier: t1/dtxjCewO/E5KH+fKAMvrbSHK37IMbvU533io63Sk=
Subject key identifier: BB:87:93:2D:60:39:20:1F:64:78:0D:D8:4D:1F:F1:C5:5A:48:73:B2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018C0005AE4E7957CB4518FE2527AA68CF03
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/u4eTLWA5IB9keA3YTR_xxVpIc7I.roa
Signing time: Fri 24 Nov 2023 06:30:21 +0000
ROA not before: Fri 24 Nov 2023 06:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.216.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Nov 2023 15:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:05:ae:4e:79:57:cb:45:18:fe:25:27:aa:68:cf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 24 06:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb87932d6039201f64780dd84d1ff1c55a4873b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:9d:e5:c2:88:04:24:ca:79:d7:ce:e6:08:
7f:7a:22:88:31:50:46:4f:fc:e3:76:e1:2c:63:91:
60:dd:79:7c:10:8b:0e:79:db:9e:79:04:8b:c5:0d:
5b:33:a3:cf:ff:5e:aa:6a:de:95:99:6a:57:80:2d:
cc:fb:7a:e5:21:62:43:62:d7:4f:71:5a:81:79:37:
b9:a3:95:05:71:0d:63:d3:df:3a:4d:17:7d:6b:c3:
16:3d:a2:27:d3:0c:ee:dc:9d:e0:3e:a0:ad:b3:5d:
a1:61:4e:37:0e:7f:29:be:ff:7c:a2:f2:28:ae:4c:
96:2f:60:ba:97:3c:c0:23:dc:bc:61:68:b1:14:05:
9f:2f:a8:a5:43:2e:92:6f:33:50:81:1e:9b:5a:f3:
ce:ea:6d:83:4b:8f:8e:1d:a6:1b:df:90:f6:51:e5:
ac:82:e4:b5:93:e0:89:81:92:65:36:80:06:65:91:
ed:18:cc:cb:ac:1e:6f:bb:66:72:d7:41:20:78:48:
dc:1d:19:99:95:25:dc:da:70:2c:8f:2a:ca:cc:21:
bb:3b:82:ff:66:ab:9c:a4:f0:1f:12:ef:60:d8:61:
44:4a:5f:a5:6b:6d:d5:a7:07:c6:68:13:a6:3d:c8:
22:45:76:73:00:ce:6e:a7:61:4d:64:12:e8:15:3c:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:93:2D:60:39:20:1F:64:78:0D:D8:4D:1F:F1:C5:5A:48:73:B2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/u4eTLWA5IB9keA3YTR_xxVpIc7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/24
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:0f:4f:39:e3:63:be:db:a4:47:e1:96:bd:23:f1:c9:f9:d4:
b5:17:3d:cc:b1:c9:b1:7b:46:69:75:6e:28:2c:32:dc:bf:d0:
5e:18:32:35:09:60:4b:1b:0b:14:58:cc:ba:84:7c:70:0a:f9:
f5:bb:69:e2:98:26:dc:44:d4:c1:69:9f:50:d7:55:6a:a7:4a:
fd:9c:79:6f:1d:67:7a:03:b5:0f:45:e1:ae:82:c8:ad:37:c4:
c2:62:d7:b8:39:1a:c0:5d:f4:40:5a:68:84:4b:aa:61:e1:37:
1e:21:80:ad:21:e8:78:73:32:f9:3c:c3:00:fa:41:19:6a:a6:
c7:33:4a:57:0d:79:bb:02:1f:03:5d:ac:12:88:79:d7:cd:f6:
03:63:ee:ec:c3:bc:27:40:d1:cd:e1:07:ae:57:46:6a:62:43:
56:60:6b:be:f0:bb:66:e0:55:e7:9c:11:ad:77:78:f9:d3:16:
53:e0:ff:20:7d:c2:7f:d0:94:e4:30:c7:b7:59:31:fb:c5:ca:
9b:1b:6f:24:79:c7:7e:c8:7d:7d:94:6c:c3:9e:90:92:0f:44:
11:e9:9e:94:e2:f8:61:70:74:98:58:10:87:a9:08:14:f2:10:
68:b2:3b:99:32:5d:ae:21:2b:ff:6b:36:b9:de:ac:8c:13:56:
3c:dc:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org