Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/8ItJFJJUXqKbCJ13JDdZDTplaAE.roa
File: 8ItJFJJUXqKbCJ13JDdZDTplaAE.roa (raw, json)
Hash identifier: Tc5BlzgbKRRJnAsKJevZ8fRpKZhb5KXNEQWaqyu1h1I=
Subject key identifier: F0:8B:49:14:92:54:5E:A2:9B:08:9D:77:24:37:59:0D:3A:65:68:01
Certificate issuer: /CN=82305ee267be68e82b3d5d69c4ed065b2e239fe5
Certificate serial: 01857371673D7AFB2BFA2C845EC456F5774B
Authority key identifier: 82:30:5E:E2:67:BE:68:E8:2B:3D:5D:69:C4:ED:06:5B:2E:23:9F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/8ItJFJJUXqKbCJ13JDdZDTplaAE.roa
Signing time: Mon 02 Jan 2023 17:04:49 +0000
ROA not before: Mon 02 Jan 2023 17:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59437
IP address blocks: 195.211.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:67:3d:7a:fb:2b:fa:2c:84:5e:c4:56:f5:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82305ee267be68e82b3d5d69c4ed065b2e239fe5
Validity
Not Before: Jan 2 17:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f08b491492545ea29b089d772437590d3a656801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:dd:83:23:9e:44:a7:cc:5a:42:06:5d:87:
84:3a:cb:4f:da:6b:2d:db:67:69:4b:df:cb:39:42:
2e:6a:5b:bc:55:19:02:ea:2e:42:32:97:cc:db:32:
cf:07:4f:ac:16:6e:a6:81:e5:e7:3d:cf:f7:68:25:
4f:9b:8f:e9:29:50:bc:3b:96:d2:08:31:fe:1e:20:
d7:d2:7c:d7:c1:1d:d1:6b:70:7f:00:f6:3d:96:89:
72:4b:51:c6:30:8d:b7:18:77:86:f2:97:af:df:2e:
6e:73:d9:01:ad:ef:0d:12:0e:a3:fa:61:64:1e:73:
47:a2:bc:12:dd:b7:6f:b7:d7:72:3d:68:82:c9:61:
f4:69:f8:57:4f:7f:21:aa:0c:c4:d6:35:5e:6f:e8:
78:26:63:48:89:ca:a3:f3:90:07:53:8b:5f:ba:29:
4e:29:50:1f:5b:8e:40:9b:76:32:f9:cb:f3:ed:d3:
0a:7c:c0:64:a7:f7:dd:d0:4e:fe:c5:5c:d8:db:ff:
60:09:9a:23:26:b5:18:e9:61:f3:4b:ce:96:38:da:
70:da:12:f7:c6:05:72:67:c2:91:20:b5:ac:c2:43:
b4:b7:de:f2:7c:3a:c4:d9:a5:ce:ec:bb:36:fe:b6:
7f:95:b9:43:da:2f:c3:0d:c5:ed:0d:f7:57:06:9a:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:49:14:92:54:5E:A2:9B:08:9D:77:24:37:59:0D:3A:65:68:01
X509v3 Authority Key Identifier:
keyid:82:30:5E:E2:67:BE:68:E8:2B:3D:5D:69:C4:ED:06:5B:2E:23:9F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/8ItJFJJUXqKbCJ13JDdZDTplaAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:eb:30:33:58:8c:d1:63:33:02:08:98:87:96:62:ae:6c:c6:
8d:bc:a9:b8:38:ea:82:73:b5:ee:47:f2:e7:ff:8b:73:5c:96:
1e:8f:c0:f6:29:79:1b:c6:a0:f2:ae:19:81:70:c3:12:6d:ab:
0e:d2:47:f9:01:78:b0:a8:2d:a5:36:40:3c:de:63:9e:14:ce:
91:d1:a3:7b:25:38:1c:ec:bd:08:88:93:76:90:4b:39:f9:6a:
87:c3:f8:a2:67:54:73:b3:93:84:97:0e:82:39:b7:10:1d:6a:
66:49:d2:f3:34:68:43:87:19:76:0d:f9:8b:d7:28:5f:95:e9:
48:fc:e4:c5:65:fd:a9:c3:98:a5:cc:ef:44:26:56:51:4e:ca:
b4:b5:8b:ed:47:74:9f:8b:49:c1:84:38:e8:a9:6e:e3:eb:f4:
9d:da:8e:a9:40:71:fa:b3:22:1a:21:c9:b4:df:fa:f2:1c:3f:
0c:73:8d:f1:ad:8e:29:79:06:15:ef:99:cb:6c:e0:cf:71:ae:
f6:b9:4b:21:77:c7:dd:eb:97:a4:c6:4e:a1:bd:e6:41:b6:70:
2b:7b:00:da:f0:7d:31:5f:e7:cd:d8:d3:0c:aa:53:2e:b2:9b:
e5:e5:6d:70:a8:d9:75:d8:99:4d:95:00:90:a2:c1:3b:cf:34:
b2:dc:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:11 2024 by rpki-client on console-ams.rpki-client.org