Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/8e4d20WPcHI3uGTD53bWDsGYWQI.roa
File: 8e4d20WPcHI3uGTD53bWDsGYWQI.roa (raw, json)
Hash identifier: yjaYeLRKzOE2JgP7ufS/I03BWPQqcGYYqRPlV7SDsoQ=
Subject key identifier: F1:EE:1D:DB:45:8F:70:72:37:B8:64:C3:E7:76:D6:0E:C1:98:59:02
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018FBEB102E519E46325F13621E007FB5F0A
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/8e4d20WPcHI3uGTD53bWDsGYWQI.roa
Signing time: Tue 28 May 2024 10:13:42 +0000
ROA not before: Tue 28 May 2024 10:13:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6663
IP address blocks: 94.176.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 12:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:b1:02:e5:19:e4:63:25:f1:36:21:e0:07:fb:5f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 28 10:13:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1ee1ddb458f707237b864c3e776d60ec1985902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:95:25:01:34:69:32:f0:06:58:e0:73:ff:
42:db:bd:95:1d:cf:43:58:16:b7:19:e0:a2:4f:09:
99:b3:32:d8:94:c4:d1:68:ad:d4:18:29:eb:16:b8:
9e:a9:bc:d4:0f:57:cd:2c:c3:dd:c7:07:77:55:52:
0f:cc:ec:93:e2:c4:11:3f:44:63:97:05:ba:83:1a:
c1:d7:f3:79:80:3e:d1:13:86:3d:c0:f9:e6:72:cc:
43:8a:1d:93:a7:16:78:09:8f:d3:f2:b6:51:17:bd:
b3:07:3d:af:1c:a3:85:19:f7:eb:bc:4d:13:b5:7e:
39:c7:67:19:b6:85:2e:1b:d8:a7:a3:22:83:69:70:
6f:92:70:df:3c:76:5c:c9:12:97:28:12:f7:e7:b6:
07:35:82:69:5b:8e:40:80:69:9a:87:e8:27:da:d9:
f7:b4:18:6c:91:d5:33:ea:b8:64:05:9d:4e:48:2d:
c1:7b:49:f4:fd:30:98:a1:90:0e:a3:a4:b4:98:3f:
b9:8a:aa:48:96:74:8a:21:cd:84:88:ea:3c:e0:29:
6e:01:bc:a2:b1:d2:e1:16:30:b6:54:16:b3:36:8c:
6d:c2:e6:be:1c:cd:23:5f:b2:34:8a:35:9b:8d:d1:
d8:74:36:68:88:45:da:4d:a8:36:18:9b:cc:55:13:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EE:1D:DB:45:8F:70:72:37:B8:64:C3:E7:76:D6:0E:C1:98:59:02
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/8e4d20WPcHI3uGTD53bWDsGYWQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.5.0/24
Signature Algorithm: sha256WithRSAEncryption
db:5b:87:cd:f9:f7:ee:7c:23:ba:6d:f4:7a:90:61:a0:1e:6d:
49:8a:bb:87:be:80:14:d1:89:bd:3b:cb:53:9a:43:7e:dd:3d:
9a:c9:5f:7a:3a:dc:37:3a:55:0a:c5:f4:78:12:73:0c:ba:94:
b5:96:f7:0a:c4:b9:94:a3:57:e1:72:e4:38:bc:63:62:13:27:
59:8c:94:c0:6c:d2:8d:50:61:42:94:87:95:04:ab:b5:a9:63:
d2:a9:f6:dd:8a:56:a9:15:c5:20:60:da:8d:2f:0e:0a:ba:5d:
54:0a:b4:8c:3f:b5:8d:05:91:68:15:ac:38:85:f5:05:1d:50:
ea:a4:41:f9:e7:e3:5b:37:3e:e5:72:7b:f6:14:76:77:3b:a2:
58:a3:e4:16:2a:47:92:dd:07:c0:9f:73:e3:06:de:1c:11:4d:
08:d5:e0:54:a7:99:58:56:1c:d0:33:90:52:9e:8e:cd:37:7e:
3a:d8:07:7c:16:72:a8:91:5e:91:47:04:09:c5:e1:df:fe:50:
d0:3b:fd:59:a9:df:44:0e:80:90:65:f6:e0:57:59:a2:4b:d4:
66:64:9e:09:5c:55:a3:b2:e4:fb:17:04:91:97:ae:f0:69:26:
a9:cb:5c:a3:07:28:73:a9:62:64:53:5d:19:08:de:08:41:8c:
d3:38:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org