Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/eclL3oAqp648PupkVNr6aPhN6l8.roa
File: eclL3oAqp648PupkVNr6aPhN6l8.roa (raw, json)
Hash identifier: 3pJmZm8HW2bk2n0VxkMpyPgaSDxT5g9W51ncnEuwBwo=
Subject key identifier: 79:C9:4B:DE:80:2A:A7:AE:3C:3E:EA:64:54:DA:FA:68:F8:4D:EA:5F
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 01856DF889A09D4CCE569B79BFFAF88D9D28
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/eclL3oAqp648PupkVNr6aPhN6l8.roa
Signing time: Sun 01 Jan 2023 15:34:42 +0000
ROA not before: Sun 01 Jan 2023 15:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 193.8.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f8:89:a0:9d:4c:ce:56:9b:79:bf:fa:f8:8d:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Jan 1 15:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79c94bde802aa7ae3c3eea6454dafa68f84dea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:a4:d6:9b:ce:6a:02:67:57:07:fb:2f:3d:
eb:a7:31:d2:a8:e7:1b:3a:76:4d:7a:2f:46:3a:a0:
65:d4:8f:f8:1f:83:2d:2e:46:be:36:f2:88:87:da:
c1:86:17:76:23:b6:09:0e:2a:d0:99:8f:af:e5:f6:
de:31:56:d6:fd:de:88:20:a5:0f:18:03:68:26:59:
4d:ea:77:68:fc:4f:75:8b:19:ed:2b:55:92:1d:77:
d4:a4:e0:3f:c0:95:f4:65:54:3a:92:71:3c:ae:e2:
7f:d8:3a:15:97:fd:30:8c:67:68:80:b6:13:b8:23:
43:92:73:8e:77:ce:d4:10:e2:a2:36:52:bb:7c:a0:
b4:f8:dc:b1:c1:a3:c0:25:f2:ad:ca:d4:b1:5c:f0:
48:f3:5f:fd:6a:26:04:5c:19:67:b7:e8:75:59:81:
83:77:95:38:f5:b0:cf:c8:80:3b:e6:e5:58:f1:56:
4e:8f:a0:f0:aa:96:5b:8d:3e:bb:d3:f8:17:63:ad:
7c:2b:d0:2d:6f:1a:7a:bb:4f:58:2b:5e:8f:c7:41:
8c:39:6f:78:3a:96:9d:37:9e:40:40:3f:23:e9:3c:
97:23:03:09:6a:ba:2a:01:b9:43:8f:c1:e6:be:40:
9e:31:99:79:46:e0:2d:df:ce:0c:ce:6c:01:13:45:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C9:4B:DE:80:2A:A7:AE:3C:3E:EA:64:54:DA:FA:68:F8:4D:EA:5F
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/eclL3oAqp648PupkVNr6aPhN6l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.230.0/24
Signature Algorithm: sha256WithRSAEncryption
13:89:2a:26:f0:3d:3d:06:74:3e:52:45:73:42:5b:cf:18:bc:
e5:f9:cc:57:8f:01:ac:14:6b:6d:4f:69:07:ff:b2:36:dc:52:
cc:15:c8:ba:75:89:38:f3:fb:9c:fd:1a:47:76:ab:58:ab:84:
24:16:0a:c1:f4:c9:55:e1:99:72:3b:6a:e0:45:41:2c:09:70:
f2:d3:65:30:89:25:3e:4a:19:14:13:1c:91:3d:66:2b:28:70:
7e:d3:e8:a1:98:16:14:e6:5c:bb:08:46:1f:2c:8b:9f:e1:80:
40:bb:5d:ed:63:ee:f3:54:53:32:88:ae:eb:4e:62:83:1c:c9:
6e:5e:b1:6d:d9:69:ce:87:55:a8:7b:92:bd:74:7c:84:4b:fd:
a0:35:eb:a5:08:3e:a0:d2:2b:87:b5:e0:0c:da:8d:52:2e:7b:
60:ae:33:52:6e:e9:96:22:49:6b:68:d7:fa:a2:37:43:d7:f0:
b8:22:9c:1b:87:f1:d7:eb:1b:7d:86:ec:53:7f:07:bc:1a:e0:
de:3b:2e:f6:47:d7:41:57:73:95:70:f7:a9:b6:d6:5b:46:51:
c3:2a:bc:ac:09:9a:48:ff:3e:3b:50:80:37:8a:c6:6b:5d:7c:
a1:ef:c7:f0:37:68:ae:99:bc:40:20:4d:0f:9c:7c:c4:33:0a:
93:c7:85:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:23 2024 by rpki-client on console-ams.rpki-client.org