Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/8J8Rgr8kNa9NmNUliRjcdTSUIRc.roa
File: 8J8Rgr8kNa9NmNUliRjcdTSUIRc.roa (raw, json)
Hash identifier: H65Y4x4r01G4l+NhbaQDKCeo/a4GTL6uWjQqOzcO744=
Subject key identifier: F0:9F:11:82:BF:24:35:AF:4D:98:D5:25:89:18:DC:75:34:94:21:17
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 01856C9CD2F89C053FB0ACCBD068963DA0F4
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/8J8Rgr8kNa9NmNUliRjcdTSUIRc.roa
Signing time: Sun 01 Jan 2023 09:14:55 +0000
ROA not before: Sun 01 Jan 2023 09:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200982
IP address blocks: 213.59.156.0/23 maxlen: 23
81.177.196.0/23 maxlen: 23
213.59.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:d2:f8:9c:05:3f:b0:ac:cb:d0:68:96:3d:a0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 09:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09f1182bf2435af4d98d5258918dc7534942117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:c0:a9:47:c7:18:2a:3d:d9:f8:a2:f5:81:
aa:f2:ba:09:d0:2f:94:fe:25:5e:f9:3a:eb:24:12:
4c:08:e3:f7:03:03:4a:9d:18:95:b3:25:10:7f:44:
5f:a8:bb:4c:be:ad:c1:d3:8a:54:6d:bb:f0:3b:65:
0c:43:b6:01:50:79:8e:24:bf:6f:ae:b6:1d:5e:23:
30:a2:27:92:a6:73:a8:c4:16:93:b7:13:f8:80:b2:
b4:36:d5:df:13:d1:58:9f:1b:cc:40:23:9a:db:6a:
ac:11:f1:61:15:84:ab:1c:60:a2:fd:35:de:c6:c4:
56:fd:00:69:7e:0b:e0:7b:8e:cb:4a:d6:7b:a9:a5:
66:8c:22:a6:69:c5:0d:ec:d1:e5:ae:6e:db:b5:ef:
21:df:1b:6d:db:e3:af:e3:83:5b:a4:b9:68:cd:91:
77:d8:55:94:f0:7d:9e:61:63:1b:9c:5b:df:72:b9:
12:b7:44:13:a5:3e:8b:42:0f:fc:bb:6b:97:96:4e:
2d:ec:23:5a:41:2c:d8:92:7b:4b:a7:f7:85:f5:76:
c0:36:6f:1b:cc:fa:99:60:9b:96:db:da:ef:f1:54:
60:59:6c:35:50:58:2d:23:94:5f:d2:10:2d:9d:3a:
aa:74:13:a9:ea:ef:4a:ff:e9:dd:08:fb:5c:be:bb:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:11:82:BF:24:35:AF:4D:98:D5:25:89:18:DC:75:34:94:21:17
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/8J8Rgr8kNa9NmNUliRjcdTSUIRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.196.0/23
213.59.136.0/22
213.59.156.0/23
Signature Algorithm: sha256WithRSAEncryption
21:c1:f3:34:23:95:59:bf:b9:b3:c2:aa:e9:7a:26:c0:1e:cd:
50:d5:28:d3:f8:61:39:7c:cc:0d:e8:5a:9f:79:93:91:a8:2f:
42:f1:fb:99:17:5f:13:c9:db:1d:3b:17:b1:93:ae:b7:6e:24:
ca:ba:98:5d:70:86:16:d6:84:32:9f:71:c4:75:52:8e:28:21:
3d:ee:b3:b5:35:0c:dd:01:10:b2:4c:19:29:23:eb:57:78:5e:
2a:b8:fb:ec:f8:0c:be:4c:0e:05:c1:21:fa:31:8c:d2:7b:f6:
5c:ae:3a:cb:8a:a6:14:9e:36:b2:98:cc:4c:3e:68:a5:67:18:
19:e3:7c:9f:2e:6e:be:bc:47:b7:de:a0:38:7e:60:eb:59:99:
da:3b:e0:01:7b:c0:89:a4:e4:16:a9:e8:80:c6:ed:47:4e:bf:
fd:d5:a8:58:50:93:f7:53:f1:47:c2:07:06:ae:10:46:d0:47:
08:73:18:a2:c7:1a:c1:72:1d:f3:19:c3:24:bf:b0:89:7f:64:
9f:94:49:75:dd:45:28:4e:8b:c2:2e:d1:3a:fe:59:57:a8:05:
32:02:34:f9:8c:3e:99:f6:5a:45:88:7c:5b:5f:c0:ff:e7:bd:
a5:f9:35:94:65:91:b5:30:5a:bb:e6:9c:53:d5:fa:06:a3:d0:
eb:1c:c4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org