Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/8w7Zp0PQcDxog59HdY_h2yM_n5g.roa
File: 8w7Zp0PQcDxog59HdY_h2yM_n5g.roa (raw, json)
Hash identifier: cu5f0D9+bQoJr847CKEgFw68r38hfVPtHQe4DC3zJH0=
Subject key identifier: F3:0E:D9:A7:43:D0:70:3C:68:83:9F:47:75:8F:E1:DB:23:3F:9F:98
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018C7E6570EDB8F6C7BA285CA3603A9BA08B
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/8w7Zp0PQcDxog59HdY_h2yM_n5g.roa
Signing time: Mon 18 Dec 2023 19:27:06 +0000
ROA not before: Mon 18 Dec 2023 19:27:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204769
IP address blocks: 193.38.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:65:70:ed:b8:f6:c7:ba:28:5c:a3:60:3a:9b:a0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Dec 18 19:27:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f30ed9a743d0703c68839f47758fe1db233f9f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:06:52:49:aa:20:d4:d7:56:54:3a:76:28:
0c:0a:93:79:76:a6:d0:73:d3:b6:71:86:26:ae:15:
b4:9a:73:36:00:1f:a8:1a:4a:e6:8b:94:7b:53:51:
a0:af:4f:0f:d4:b4:40:f0:8a:f6:d4:ad:14:ac:46:
78:a7:7b:34:cf:3a:e7:6e:fc:59:c5:44:5a:d8:1f:
96:af:5e:c5:1c:9e:a9:fc:76:09:58:c9:ab:6e:5b:
10:65:a9:22:27:9c:d1:f0:a3:6f:82:3a:bd:03:ee:
c0:e1:08:5f:8c:90:f0:20:52:40:7d:c7:1c:0a:f2:
31:ef:be:4e:6d:a6:e5:ba:b6:73:2a:2b:39:02:93:
b8:f7:aa:f8:ea:5c:f2:76:3d:7d:69:3c:4f:26:f2:
e9:32:0a:1e:1a:0d:e4:8c:b8:5f:6c:38:c1:fd:2b:
90:68:19:28:b1:7d:16:17:43:fb:22:04:6a:f0:48:
e1:43:8f:4c:49:cd:aa:76:4d:ba:9f:31:b1:e7:7e:
43:20:66:c7:68:7f:63:71:18:15:9f:b1:46:77:eb:
aa:70:14:10:5f:91:6c:bb:e5:b1:71:18:81:20:7b:
7d:ff:07:c4:f4:33:d6:93:95:fc:aa:62:a0:94:74:
7a:b9:33:aa:01:29:8e:3c:d8:cf:27:5a:94:2c:ea:
08:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:D9:A7:43:D0:70:3C:68:83:9F:47:75:8F:E1:DB:23:3F:9F:98
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/8w7Zp0PQcDxog59HdY_h2yM_n5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.248.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5a:70:a0:f7:63:5b:00:4e:2f:03:e6:43:2e:49:fa:81:b3:
7a:88:4b:84:52:4a:78:ef:6c:96:d9:06:73:19:57:4c:ee:34:
5b:6c:4e:4e:17:9e:f2:19:cd:e9:12:e5:bb:fa:15:25:86:6f:
9b:8b:4f:76:8f:43:d6:95:f5:c7:63:00:b4:1e:90:f5:08:88:
7c:ca:de:97:64:5c:b1:5b:bd:6d:58:8b:a3:49:28:11:4f:b0:
d2:f4:98:8a:d9:6c:a8:b1:a0:ea:e9:76:35:19:81:7c:65:6c:
90:f4:c9:78:92:71:6c:d5:71:22:bf:68:e7:d8:ed:05:21:35:
2b:69:11:a1:e8:cd:63:5c:ba:67:86:a1:51:fb:d2:c7:ed:b5:
7e:3a:1d:96:5b:d3:45:9a:39:c4:80:3b:d3:cf:e2:ba:56:c6:
3d:07:45:ec:35:bc:40:e3:fa:b8:c6:65:d9:5a:6f:81:3b:58:
38:84:a0:68:d6:a4:3d:4f:41:07:f3:82:19:37:6b:f4:b3:50:
f1:5e:2f:b8:c6:40:d1:25:10:57:7b:c7:88:58:e6:0d:bf:fd:
48:8a:c5:f2:c1:f8:0e:6a:4d:ba:05:a6:b5:13:69:fd:9d:d4:
24:b5:6a:e7:a0:a0:55:b0:60:90:61:e7:68:25:54:a3:58:2d:
89:0e:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:23 2024 by rpki-client on console-fra.rpki-client.org