Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/8RcssIVE3yerLscEhEOXJAC-fo8.roa
File: 8RcssIVE3yerLscEhEOXJAC-fo8.roa (raw, json)
Hash identifier: wVZVAKMrsCwEGYS7QQFjNKSC4J/Y8Aw19ASTUXNZQ7Q=
Subject key identifier: F1:17:2C:B0:85:44:DF:27:AB:2E:C7:04:84:43:97:24:00:BE:7E:8F
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 01856D385BCE8C670004FAC0229F7D15B4AF
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/8RcssIVE3yerLscEhEOXJAC-fo8.roa
Signing time: Sun 01 Jan 2023 12:04:48 +0000
ROA not before: Sun 01 Jan 2023 12:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24833
IP address blocks: 195.244.10.0/23 maxlen: 23
2a00:7460::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:5b:ce:8c:67:00:04:fa:c0:22:9f:7d:15:b4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Jan 1 12:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1172cb08544df27ab2ec7048443972400be7e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:79:c5:0f:2c:77:4a:f8:af:3c:0c:db:bd:
6e:00:ad:15:6a:8b:2f:ac:72:cc:3a:ad:18:c3:5d:
f3:da:0e:33:d1:74:38:7d:91:a7:91:62:5a:64:4a:
a8:bf:00:d4:16:5f:d1:9d:47:1d:38:6c:b3:b3:9d:
cd:e8:39:4d:44:b1:f2:c3:b7:b8:1a:bc:f8:89:a2:
6f:0f:0d:95:b2:8c:2a:59:f8:89:e3:73:a1:0e:23:
bb:83:f9:37:1e:5b:53:73:ec:81:e7:0f:9f:ec:88:
a0:f9:31:e2:95:8a:b2:8b:24:f5:30:e4:b8:e0:e0:
ae:57:74:23:93:60:83:6e:fa:dc:e5:04:25:a8:6c:
f3:71:4f:ad:38:67:2a:b8:8f:c2:e6:c4:96:1a:08:
d5:83:19:3a:5f:25:3b:8b:12:e1:41:78:d0:be:30:
3b:aa:5e:b4:6e:60:fd:5f:09:ec:08:f4:90:77:66:
3a:61:16:29:73:66:7b:2c:d7:4a:0b:7e:2c:e8:be:
2b:46:66:f7:55:bd:94:ec:34:6d:67:ac:94:f2:b7:
e9:71:fe:53:55:b4:9b:02:60:c0:46:91:19:8e:bc:
70:15:a6:82:76:9c:cd:33:7b:f2:39:c8:81:67:e1:
00:a9:13:63:51:d2:9c:04:d5:0f:1f:30:c3:da:24:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:17:2C:B0:85:44:DF:27:AB:2E:C7:04:84:43:97:24:00:BE:7E:8F
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/8RcssIVE3yerLscEhEOXJAC-fo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.10.0/23
IPv6:
2a00:7460::/32
Signature Algorithm: sha256WithRSAEncryption
74:89:b5:ba:80:59:4e:5b:18:43:5f:6f:eb:9e:e9:88:70:a7:
53:3a:03:ab:10:99:06:63:c6:70:18:45:78:e3:f7:5a:43:72:
b3:2f:66:52:19:ae:e5:5f:5e:8d:2f:ac:12:1a:df:41:8b:fe:
98:35:63:b6:d8:77:f1:b6:bd:48:e2:cc:42:f6:85:25:ce:1c:
15:b1:b0:24:43:c8:dd:86:5b:c5:65:a3:ee:30:05:37:03:71:
ef:49:cf:a7:45:97:e7:c7:0e:76:65:d8:3e:10:04:31:f2:1e:
c0:2b:f7:4c:ef:23:47:26:1e:26:b2:bc:42:4e:72:3c:40:e8:
d1:c8:0b:a8:ed:9e:cd:1c:26:7f:66:a3:ed:ad:7a:52:86:95:
64:6e:c6:bd:1c:29:a6:21:74:58:e9:12:49:a1:6b:df:3d:62:
c4:d3:6c:55:af:c0:75:6a:07:82:76:ad:4a:b4:7d:73:b4:10:
a1:7c:3e:9d:b0:01:a1:8f:07:2e:7b:44:05:b7:0f:a8:86:eb:
b2:0c:24:c4:bb:37:c1:3a:1d:46:2f:dd:d7:52:fc:0d:29:60:
0d:9a:ba:ae:4d:d1:32:37:ed:17:63:63:bf:ff:55:32:67:82:
1f:3f:70:40:1d:66:7e:4e:f9:77:00:56:7d:e9:83:29:d0:79:
8d:ad:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:48 2024 by rpki-client on console-ams.rpki-client.org