Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/vjQ2hnZC5aL54Af1_rXdSczNt8w.roa
File: vjQ2hnZC5aL54Af1_rXdSczNt8w.roa (raw, json)
Hash identifier: 8rVXZKSHaMEL8D6ZfJmHPq72eOByOQbbaFQNuCEodhk=
Subject key identifier: BE:34:36:86:76:42:E5:A2:F9:E0:07:F5:FE:B5:DD:49:CC:CD:B7:CC
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018F7C21DFB6F7804AA754D9024918791716
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/vjQ2hnZC5aL54Af1_rXdSczNt8w.roa
Signing time: Wed 15 May 2024 12:02:25 +0000
ROA not before: Wed 15 May 2024 12:02:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 19:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:21:df:b6:f7:80:4a:a7:54:d9:02:49:18:79:17:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 15 12:02:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be3436867642e5a2f9e007f5feb5dd49cccdb7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:a3:c8:f6:36:12:a8:50:72:55:9e:bb:30:
45:01:44:1a:11:a5:b1:aa:2e:d5:19:63:d7:63:c2:
34:57:35:ce:6c:2f:6e:b0:77:8f:ea:e8:c7:09:88:
c8:33:e8:61:d1:07:9d:32:ef:d1:64:2d:72:97:5b:
64:11:1b:81:05:e7:e4:bc:f6:ed:5b:42:07:8b:e7:
8b:e9:a8:d8:f4:2c:2d:24:55:c5:41:fc:e4:34:28:
3c:0f:4b:f8:76:8c:28:25:ac:b4:fc:e2:c8:a1:54:
67:4e:08:e3:8b:d9:7e:3e:1e:a7:21:54:76:a5:95:
47:15:72:02:d9:9e:ad:e7:ce:d8:52:6b:ad:a6:2b:
78:65:80:48:b6:4e:97:af:2d:c8:88:8c:a3:60:11:
cc:ce:ce:96:35:dc:98:a8:76:d9:aa:e4:a2:54:24:
af:ab:ee:fc:3a:99:4e:98:ea:ec:d5:ee:de:a4:a7:
43:fe:e1:be:d5:d1:34:89:c8:5d:a6:0b:1f:36:a4:
d4:4e:14:37:2d:c4:d8:8b:4c:97:99:b5:04:bf:33:
ad:5f:a3:6a:6c:3c:d8:a3:c0:89:bc:39:48:52:ef:
40:8d:29:4e:81:39:8e:ff:4d:99:75:90:28:56:55:
1e:ea:1b:2a:2f:07:a1:97:27:99:49:46:5f:98:bf:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:34:36:86:76:42:E5:A2:F9:E0:07:F5:FE:B5:DD:49:CC:CD:B7:CC
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/vjQ2hnZC5aL54Af1_rXdSczNt8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.204.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:b4:22:ca:f3:c1:1d:dd:23:d4:e4:3d:b0:2c:41:64:31:a3:
7b:64:c6:dc:85:d0:1d:e9:d8:12:60:d6:73:19:16:f2:4f:32:
af:a4:85:30:79:cc:6f:39:08:33:61:ed:7d:9e:ef:0f:d9:e5:
1b:10:80:a4:f4:3b:6c:55:01:e7:15:00:cd:40:9b:f7:c9:01:
f9:e6:f3:05:5f:2b:71:59:94:15:9d:53:ab:12:a5:66:71:0d:
eb:59:64:04:19:65:7b:3d:25:b2:f8:e2:68:16:e7:49:14:45:
f9:35:b4:db:c5:bd:d7:f1:7d:c2:c4:ed:ea:c4:4d:f3:e6:a1:
c0:94:48:92:f2:ea:d4:2e:16:4b:69:3e:c6:d6:71:db:8b:6f:
a8:73:71:e8:48:73:75:e2:3f:a8:94:c7:1d:02:bf:02:e3:f6:
9d:cd:1b:b3:77:cd:e6:55:94:1f:ff:6a:0d:72:93:2c:76:e2:
3a:16:8d:51:50:8a:64:ce:8b:1f:05:0e:b6:73:30:68:43:7b:
96:6d:4c:cd:3c:1d:c4:e8:b2:89:b4:c6:96:87:d8:49:d8:89:
8f:7c:66:b0:ef:59:7b:6f:d0:42:12:62:7a:fc:00:c9:22:7c:
68:6c:de:7a:35:9f:0d:89:ef:ad:58:9b:80:dd:60:4b:c2:52:
c9:3a:8a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:20 2024 by rpki-client on console-ams.rpki-client.org