Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8BAmCKWUgMYQm_3oZd4sy-2FPbA.roa
File: 8BAmCKWUgMYQm_3oZd4sy-2FPbA.roa (raw, json)
Hash identifier: OG3IP8noC/Ett9FmnEQ5PGR+YEtIAWgOl6giWjzLeog=
Subject key identifier: F0:10:26:08:A5:94:80:C6:10:9B:FD:E8:65:DE:2C:CB:ED:85:3D:B0
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0188FDCB460043E64F819B72D9F20AFD2F4F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8BAmCKWUgMYQm_3oZd4sy-2FPbA.roa
Signing time: Tue 27 Jun 2023 16:58:57 +0000
ROA not before: Tue 27 Jun 2023 16:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.40.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:cb:46:00:43:e6:4f:81:9b:72:d9:f2:0a:fd:2f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 27 16:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0102608a59480c6109bfde865de2ccbed853db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b3:36:f7:c1:b1:86:bd:4d:a7:69:07:fb:6a:
a7:0d:e1:e1:24:8a:22:14:fa:18:91:97:55:85:95:
ed:32:23:ea:4e:e3:b1:25:a2:d1:ab:cb:b5:dd:87:
ab:21:04:82:a5:5a:75:cd:92:94:c8:4c:3d:fa:65:
ed:cf:64:15:52:c8:85:2e:d5:82:ec:09:ea:9b:6f:
8b:3d:4d:14:e6:49:aa:4f:95:9f:e1:a3:83:38:06:
1f:98:58:db:9b:c8:1f:d7:a3:53:cf:71:dd:14:74:
f2:32:d9:9b:19:9f:8e:8b:e9:89:e3:13:77:6a:07:
47:03:93:0b:35:ea:2c:fd:e9:51:9f:6b:a9:3a:4a:
4a:ba:5a:77:04:6f:9c:74:35:2e:d3:44:a5:c9:86:
c8:6a:20:c6:74:7d:ad:e1:75:4f:be:8f:75:6e:22:
48:8b:6b:be:e3:b0:a5:8e:77:4e:b1:58:a1:0b:41:
35:f0:aa:f6:de:e8:9b:4c:7a:44:b7:4a:a7:fa:13:
b8:e3:d6:16:d7:19:b5:12:10:43:af:8c:e0:a0:16:
cf:59:13:ca:3d:cd:76:f8:3f:41:ab:1e:34:f2:72:
1f:99:98:10:7f:c0:e5:8c:bb:27:84:7b:39:9d:b3:
ee:e5:e9:fc:5c:7a:e3:8d:2c:cf:f6:4a:f8:b9:75:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:10:26:08:A5:94:80:C6:10:9B:FD:E8:65:DE:2C:CB:ED:85:3D:B0
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8BAmCKWUgMYQm_3oZd4sy-2FPbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/21
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
178.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:93:8e:d8:c1:1d:e0:6f:e5:ad:2d:cf:da:23:f3:12:9d:df:
39:c4:1a:b0:1d:ed:7c:62:f2:32:60:ec:8b:76:9d:ab:f7:d8:
73:99:8f:4e:54:52:fa:be:8e:a6:c1:0b:f6:c3:b8:85:c2:e7:
1f:29:0d:97:37:9e:18:ba:b1:73:d3:06:94:b3:b7:37:36:53:
d2:37:b2:ef:65:3e:21:17:82:36:b4:01:be:be:9c:01:85:2a:
89:a2:e5:24:9a:b6:86:73:96:2e:d0:51:23:78:03:47:b3:16:
a2:60:51:4a:03:0b:41:57:31:7f:a5:e1:0b:d2:33:b2:d4:a9:
3a:c8:25:fe:08:4b:74:62:ab:24:e0:ce:f8:1a:0d:e6:3e:f3:
2a:87:59:dc:70:98:b7:2a:b0:5d:4b:cd:16:82:01:cc:ec:4a:
54:55:b6:8e:ce:c4:5b:b4:8f:d2:ae:6b:3e:13:06:ee:66:c3:
48:00:e6:af:78:88:b4:a1:8f:83:4e:a3:fb:18:d6:ed:3e:b1:
3e:f4:05:95:7a:a8:c6:83:37:01:98:b7:9c:d9:f1:92:f3:df:
db:e7:ad:79:41:1c:2b:17:c8:74:f0:64:d1:a3:69:bc:fb:67:
e9:00:d3:a6:74:03:1e:d3:a6:66:d7:b2:e3:88:f0:f1:85:b5:
35:2e:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net