Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/P7HFrVqvYpbHygBE_D2yTqpY-4A.roa
File: P7HFrVqvYpbHygBE_D2yTqpY-4A.roa (raw, json)
Hash identifier: JL6YBz7lRwQEm+YptZd1boVmWcQB556Xw9IecgQ3vPs=
Subject key identifier: 3F:B1:C5:AD:5A:AF:62:96:C7:CA:00:44:FC:3D:B2:4E:AA:58:FB:80
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018926BC6DD0E1BE2E1EAFE6470C04BC3D63
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/P7HFrVqvYpbHygBE_D2yTqpY-4A.roa
Signing time: Wed 05 Jul 2023 15:47:10 +0000
ROA not before: Wed 05 Jul 2023 15:47:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.32.0/24 maxlen: 24
178.253.40.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:bc:6d:d0:e1:be:2e:1e:af:e6:47:0c:04:bc:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 5 15:47:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fb1c5ad5aaf6296c7ca0044fc3db24eaa58fb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:ab:e1:e4:3b:88:23:7c:1c:bd:fe:3d:4d:
75:35:80:af:e9:f6:57:1a:7a:ec:9c:dd:be:54:75:
4a:40:73:da:f0:ef:72:46:50:dd:13:6e:e5:a9:92:
02:21:45:74:32:c7:b5:ff:20:e1:6c:41:27:05:45:
18:05:cd:91:97:c7:ab:27:3e:ac:22:af:e4:a3:c1:
6d:a5:93:2a:b7:ed:f9:b8:8d:94:b8:d0:df:bc:24:
0b:e5:bf:a5:c6:d3:45:d1:a7:8d:02:39:1d:53:5d:
f8:ae:17:13:23:2b:6e:3e:4d:72:dd:10:72:2a:3f:
39:2a:d0:f7:71:1e:98:90:af:32:c7:ca:cb:91:85:
14:79:1c:40:64:d8:9f:c3:a4:4b:0e:f4:43:06:1f:
a4:75:28:a3:73:b1:a8:75:5a:72:a3:5b:bb:39:fd:
d8:1e:9e:55:78:08:d9:07:f5:f3:87:a3:9c:f6:16:
6d:f4:7e:46:87:31:db:8f:7a:7c:f7:dc:52:b3:4a:
5e:e6:17:f8:9d:de:ea:55:18:a1:7b:ec:1a:f8:55:
39:56:5a:3d:df:55:0e:2f:6c:49:d7:ed:2d:3d:9c:
31:36:ab:ae:a4:56:d3:fa:5a:55:9e:fe:40:53:c6:
b2:36:29:ea:ec:c5:5f:7e:5a:79:3b:dd:23:c9:4c:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B1:C5:AD:5A:AF:62:96:C7:CA:00:44:FC:3D:B2:4E:AA:58:FB:80
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/P7HFrVqvYpbHygBE_D2yTqpY-4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/21
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
178.253.32.0/24
178.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
01:6a:91:8c:90:95:e2:46:f7:e4:53:58:fd:85:00:21:79:bb:
ea:c2:46:df:ee:d9:83:c6:5a:5f:f4:73:89:c5:51:e5:f3:85:
9e:e4:db:dd:e4:75:88:d7:b9:ca:be:04:e8:1e:8a:39:22:f7:
2a:84:e9:8c:da:6c:84:67:0c:5d:74:ee:0a:40:c2:bb:d8:dd:
a6:88:de:e1:72:6c:93:27:00:b6:0c:3e:bc:ba:e9:35:ea:48:
ca:32:8d:46:d7:76:36:2d:07:b5:93:59:8d:27:d6:13:e7:7b:
1c:d0:d1:1c:d7:6e:25:5d:09:fc:a1:4a:a1:5b:e3:0f:af:5b:
b5:2a:40:19:4f:78:8d:94:95:4b:6b:f2:5a:db:56:ad:b5:97:
d4:bd:39:96:09:cb:43:97:0f:aa:4a:fc:0c:19:63:b1:81:7f:
3d:c6:b7:c9:0c:2b:be:3b:fe:e8:31:95:59:a4:4c:4e:e1:e3:
86:23:5b:a6:a3:50:86:ab:39:78:66:b2:5d:f0:b2:64:f4:09:
08:a5:fd:7c:4d:c5:9b:da:f2:70:38:22:80:8b:6c:a6:aa:1c:
97:77:ea:ff:c3:a0:6e:6b:8f:e6:2b:7b:03:71:81:0e:4f:9c:
6c:83:2e:bc:28:77:f3:0d:23:7e:4b:93:78:0a:46:f6:be:ec:
00:55:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net