Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/8fPwBGNUDkwp5__7Jl7xQ-iDkf8.roa
File: 8fPwBGNUDkwp5__7Jl7xQ-iDkf8.roa (raw, json)
Hash identifier: LV8mJFOLN4JGwvXFsHXNFcVWmP+eG4PqmWesEnoJQbA=
Subject key identifier: F1:F3:F0:04:63:54:0E:4C:29:E7:FF:FB:26:5E:F1:43:E8:83:91:FF
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 01856F2FF003DEBC1694AC24C77ACE06AA0F
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/8fPwBGNUDkwp5__7Jl7xQ-iDkf8.roa
Signing time: Sun 01 Jan 2023 21:14:50 +0000
ROA not before: Sun 01 Jan 2023 21:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58153
IP address blocks: 188.213.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f0:03:de:bc:16:94:ac:24:c7:7a:ce:06:aa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jan 1 21:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1f3f00463540e4c29e7fffb265ef143e88391ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:be:e5:f0:2d:10:7f:6e:2f:d5:5d:5f:06:
8b:1b:be:44:22:68:2c:1d:96:d8:ba:fc:b4:33:e7:
c2:2f:b3:99:94:5c:aa:90:ba:d0:92:dd:ba:38:98:
85:49:f2:00:9b:83:52:d2:b5:32:2a:a0:88:5f:19:
74:9e:b5:ef:e5:55:23:31:34:ff:e3:90:55:f7:80:
46:f5:59:43:75:89:fc:ea:bb:3d:5b:73:ba:f3:76:
5d:ea:9d:f0:ee:89:21:bc:b5:f8:bc:ed:aa:5d:cf:
80:83:5c:c2:98:5f:cb:8c:c5:07:71:d2:83:0e:ce:
d5:34:8d:1a:0e:b3:11:5e:1b:4c:6d:77:4d:57:4f:
18:9b:9e:78:e7:c1:97:9d:8a:ef:8f:2d:bd:ef:55:
79:1f:bf:d2:8d:7f:a8:b1:53:1d:91:c3:99:12:f2:
fd:73:52:6b:fe:95:c5:ff:5b:72:34:ef:f5:39:87:
a7:41:a1:13:6a:bb:77:72:01:9d:7e:39:d6:be:d7:
ca:99:3e:74:d4:4f:d3:3f:33:76:2e:53:c1:95:dc:
f0:b7:df:28:33:6f:d5:6a:32:49:e0:61:ca:90:0b:
78:6b:75:87:b3:d2:4f:e1:b0:91:63:47:75:3c:9b:
c6:1e:06:e5:cb:c9:ae:83:26:e8:4a:7e:d1:3e:16:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:F0:04:63:54:0E:4C:29:E7:FF:FB:26:5E:F1:43:E8:83:91:FF
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/8fPwBGNUDkwp5__7Jl7xQ-iDkf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.17.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fc:8e:53:4d:9c:c6:df:52:21:d7:11:7c:e6:f3:b3:83:08:
a2:76:82:13:2c:e3:96:03:82:69:42:31:88:27:48:d5:a5:04:
c3:89:88:cf:92:0c:0d:8a:a3:f5:58:35:83:93:bf:ec:ae:4f:
03:15:27:1d:75:a1:91:bf:ee:40:0e:83:2a:3a:a4:c2:2e:d0:
2c:4a:20:a9:b2:f3:5d:60:25:8f:2e:22:3b:5c:c3:7e:62:1a:
82:3b:37:ad:e0:b2:f6:0b:27:98:2e:8c:c9:eb:bc:fe:02:c7:
3f:5c:e9:eb:e4:0b:44:8e:aa:76:b2:52:6b:32:f8:b7:66:0c:
08:1a:13:a8:86:f2:b4:34:34:99:91:5f:33:d4:af:c1:87:c6:
58:55:a9:9a:a6:1b:5f:38:3f:2a:ba:6e:2b:80:00:3f:09:e8:
ca:d5:3c:5a:67:24:5e:78:6e:8a:77:86:77:06:99:56:2d:32:
76:c6:40:af:ff:3f:7b:53:25:3f:d4:c7:96:11:06:61:26:26:
a7:3f:9d:92:60:42:5d:fc:6c:f8:e4:8c:79:9b:ab:4f:fe:d5:
da:4b:20:4b:c4:1a:7b:0e:59:1c:36:04:4b:19:f7:29:48:76:
32:a1:40:3c:2c:37:40:f2:23:e9:40:90:23:87:7f:e9:9a:85:
69:cf:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:03 2024 by rpki-client on console-ams.rpki-client.org