Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/8Bjc2oFLU3Omvz0_Wfajx2iAVOA.roa
File: 8Bjc2oFLU3Omvz0_Wfajx2iAVOA.roa (raw, json)
Hash identifier: 0c2Y+YgnF1QZXiWYOUepJSBt363ASo/rm8OZ4fk2Ns0=
Subject key identifier: F0:18:DC:DA:81:4B:53:73:A6:BF:3D:3F:59:F6:A3:C7:68:80:54:E0
Certificate issuer: /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial: 018570429F7F83D5836DBAC0C203A82B677C
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/8Bjc2oFLU3Omvz0_Wfajx2iAVOA.roa
Signing time: Mon 02 Jan 2023 02:14:52 +0000
ROA not before: Mon 02 Jan 2023 02:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 194.13.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:9f:7f:83:d5:83:6d:ba:c0:c2:03:a8:2b:67:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
Validity
Not Before: Jan 2 02:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f018dcda814b5373a6bf3d3f59f6a3c7688054e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:b2:9c:99:f7:4a:04:30:46:b1:e4:31:48:
c3:3e:30:45:e0:11:4d:71:ad:b0:a2:b1:06:c2:80:
1d:be:c3:63:c3:b7:a7:9b:c0:ed:26:ff:19:6b:0d:
c8:ed:c8:e1:3b:76:51:34:6c:6d:6e:ea:de:6d:82:
26:6e:b5:69:16:49:81:d8:d6:8f:1d:e7:54:fd:b9:
40:6d:2d:c8:bf:91:12:65:23:c0:12:05:30:8b:b0:
d2:36:ca:e9:bd:5a:27:5f:16:ad:47:82:54:f7:a0:
07:9c:f7:15:1a:4d:84:66:34:80:9c:6b:4e:e4:ff:
08:b5:9d:a1:88:c2:f8:79:83:65:32:63:0f:95:25:
5e:ae:79:81:40:15:b5:aa:42:9e:cd:3a:03:7b:fb:
1d:cf:79:56:ef:c8:fb:ab:02:8a:2e:cb:f4:95:b4:
4c:a6:72:16:68:ab:81:a3:6e:d9:64:f5:55:4e:d9:
5f:b9:4d:f6:f5:7d:54:c2:87:5f:cd:02:41:2d:e0:
15:c6:8a:03:45:29:0d:37:0b:f3:08:f7:02:b9:79:
38:48:c0:eb:a4:35:9c:23:63:17:d0:33:80:6d:f7:
31:c2:ef:ba:48:87:f7:39:32:bf:01:f1:49:d6:d0:
99:0b:bc:93:32:9b:12:bc:50:98:50:b4:66:eb:f2:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:18:DC:DA:81:4B:53:73:A6:BF:3D:3F:59:F6:A3:C7:68:80:54:E0
X509v3 Authority Key Identifier:
keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/8Bjc2oFLU3Omvz0_Wfajx2iAVOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:ec:73:4d:02:ed:23:a4:e1:14:8e:0e:4f:80:93:e4:01:0e:
45:e2:fa:be:44:6a:5e:b6:f8:98:41:59:cd:33:d9:0f:4d:10:
67:50:11:64:ca:b3:cc:0c:3e:a2:3e:ca:8e:48:6f:88:d3:81:
50:cc:ed:7c:41:6f:0e:53:b6:e1:7f:bd:24:36:64:0f:c3:37:
56:dd:20:4c:b0:06:5d:cd:ab:d9:99:24:a2:40:5a:e1:5d:90:
d3:13:ee:1f:e6:ed:d8:c7:6d:54:4a:a3:8d:a1:ec:92:5a:55:
2e:9c:3c:c7:cc:9b:bc:93:1b:01:00:4f:56:5f:75:78:12:b6:
65:b9:d3:05:0b:39:63:03:04:fd:ae:09:24:e7:f1:48:45:eb:
9e:9e:e8:74:79:7e:0a:c5:42:64:73:6f:5e:f6:5e:8e:d4:b6:
63:69:6b:dd:99:e0:46:a8:15:9e:96:fe:8b:f0:cd:f5:44:2c:
a5:a2:45:ff:78:ce:74:c6:39:17:9f:09:70:13:63:e7:cb:d4:
bb:aa:08:3e:38:90:e6:ad:03:5c:5f:ba:28:23:73:af:f3:ea:
e9:5e:bc:a3:58:09:17:2c:09:89:34:62:67:1d:9d:ad:9a:f5:
cd:72:10:29:12:1f:b9:61:85:e6:e7:42:b1:81:77:57:e7:88:
c4:1d:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:20 2024 by rpki-client on console-ams.rpki-client.org