Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/8o0Yv8E79ahozYPSepZoqfvWO6k.roa
File: 8o0Yv8E79ahozYPSepZoqfvWO6k.roa (raw, json)
Hash identifier: mAWUEojRIOJgidd7cKULZpibYhCTpXlNUwSZV5LPKKA=
Subject key identifier: F2:8D:18:BF:C1:3B:F5:A8:68:CD:83:D2:7A:96:68:A9:FB:D6:3B:A9
Certificate issuer: /CN=79df107d6bf1ccc818f66d8da8dd85ee924a0cea
Certificate serial: 01856F2FFC1B082181D5FCC45EEAE2FDD009
Authority key identifier: 79:DF:10:7D:6B:F1:CC:C8:18:F6:6D:8D:A8:DD:85:EE:92:4A:0C:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed8QfWvxzMgY9m2NqN2F7pJKDOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/8o0Yv8E79ahozYPSepZoqfvWO6k.roa
Signing time: Sun 01 Jan 2023 21:14:53 +0000
ROA not before: Sun 01 Jan 2023 21:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198024
IP address blocks: 193.142.176.0/21 maxlen: 21
193.142.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:fc:1b:08:21:81:d5:fc:c4:5e:ea:e2:fd:d0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df107d6bf1ccc818f66d8da8dd85ee924a0cea
Validity
Not Before: Jan 1 21:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f28d18bfc13bf5a868cd83d27a9668a9fbd63ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:9b:8b:26:9f:f8:d3:54:aa:06:d9:6e:71:
a6:1c:e3:1c:71:d4:bd:d7:7f:e7:64:f5:2c:9e:c2:
8b:db:03:1e:a9:db:dc:dc:10:b8:39:9d:dd:af:dc:
e5:bc:26:22:83:02:ff:f8:27:2e:27:c1:7f:53:86:
a7:df:f9:6c:4d:f1:b2:f0:cf:e6:94:a7:05:b0:7b:
85:6f:bc:e1:cf:03:10:24:ee:4a:ee:9e:aa:26:c1:
1f:d7:84:7e:87:c0:1b:ce:8b:eb:29:1f:5c:9f:e9:
0c:2a:e6:05:e7:a3:7c:83:2d:6d:7c:6b:57:7c:38:
24:69:46:09:d3:f7:fb:a4:c9:02:d3:7b:5e:d3:28:
f0:c6:79:05:49:3e:c4:08:d7:6a:31:19:02:ea:de:
41:23:1e:e7:63:b1:70:ec:cc:1e:f6:fd:3c:d0:f8:
02:44:9b:9d:57:01:78:d8:8a:fc:58:39:64:59:d8:
13:2a:5f:bf:85:4d:a8:e0:8f:8a:6b:19:46:1c:14:
34:37:01:d9:08:03:90:57:9d:e6:82:32:ca:2b:df:
31:f1:45:4c:cd:5b:5f:70:67:ce:06:59:65:11:02:
3a:06:6a:5d:f1:29:db:26:b9:56:8e:54:e5:5d:f9:
19:0e:af:97:c4:65:c9:c4:8b:24:7f:a6:78:d9:45:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:18:BF:C1:3B:F5:A8:68:CD:83:D2:7A:96:68:A9:FB:D6:3B:A9
X509v3 Authority Key Identifier:
keyid:79:DF:10:7D:6B:F1:CC:C8:18:F6:6D:8D:A8:DD:85:EE:92:4A:0C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8QfWvxzMgY9m2NqN2F7pJKDOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/8o0Yv8E79ahozYPSepZoqfvWO6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.176.0-193.142.187.255
Signature Algorithm: sha256WithRSAEncryption
26:f3:b0:a6:4e:90:5f:4c:b7:a5:93:9b:13:19:4b:ac:33:b0:
5d:7d:1f:93:6f:ae:2c:1e:ab:a2:c4:60:4b:5f:fe:22:ab:6c:
b9:f7:01:45:56:a4:f6:ea:cc:89:a8:04:0b:2f:00:b9:b6:de:
73:aa:18:f0:35:a4:2b:97:19:da:6e:c0:63:67:4f:82:a3:c7:
5d:c7:1f:5b:97:ee:bb:9d:6b:26:1e:0f:60:36:8c:9d:cf:44:
aa:16:2f:60:c5:d3:8c:e4:fa:d0:98:86:67:b2:f0:09:23:22:
3d:d2:aa:32:2c:ac:03:d2:c2:0b:ff:71:1a:79:bc:2b:1d:b5:
64:a0:a5:c0:b3:8f:ad:5c:a8:b9:eb:a9:87:29:06:42:89:ff:
ca:24:1a:c3:c5:b4:e3:d7:72:9b:bd:a9:c1:2f:4a:7c:9d:4f:
03:66:ab:90:bd:8f:f6:4f:b2:15:50:2f:fa:cd:b6:0b:f2:ee:
8b:d4:b3:e2:fa:bb:9f:ed:9b:b9:7d:fa:d6:d6:43:22:c0:9a:
9a:f0:0b:86:9e:24:22:bd:90:9b:21:d3:5f:4a:1d:91:73:f8:
4d:8a:2e:21:d0:19:6b:41:1d:3a:36:49:44:6a:ba:a4:5b:82:
11:9e:e1:56:4f:41:12:ae:ea:4e:65:82:d3:1c:74:b6:b5:e7:
fa:e4:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:18 2024 by rpki-client on console-fra.rpki-client.org