Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/8-qFQyvrlRIe-6alCvXirF0JiIk.roa
File: 8-qFQyvrlRIe-6alCvXirF0JiIk.roa (raw, json)
Hash identifier: d0k6lLl/tOw2pM8S9OKHBpC7LRec6YnOIUX59Y+oyhg=
Subject key identifier: F3:EA:85:43:2B:EB:95:12:1E:FB:A6:A5:0A:F5:E2:AC:5D:09:88:89
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018CC6B935B7D9695375255690E00ED44714
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/8-qFQyvrlRIe-6alCvXirF0JiIk.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 45.157.72.0/23 maxlen: 23
92.119.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:35:b7:d9:69:53:75:25:56:90:e0:0e:d4:47:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3ea85432beb95121efba6a50af5e2ac5d098889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:9c:a4:58:b0:23:59:4b:ea:ec:64:ca:ec:
93:03:89:e7:51:71:e8:02:8b:0c:b6:af:30:8f:0f:
62:c1:e6:fd:f4:b1:a2:a2:3f:4c:43:f0:21:2f:73:
f1:a7:e1:05:cd:63:6b:ae:cb:78:5a:19:48:40:c7:
4d:d3:15:68:33:d7:d5:3f:28:9d:95:80:15:ff:fb:
dc:41:81:aa:51:26:53:73:1a:4d:bc:f9:b5:59:79:
b2:44:51:2e:72:e6:27:b7:6b:40:11:e8:51:4b:b8:
e9:99:43:10:e9:36:fa:81:a4:0e:18:89:e1:18:3c:
e8:23:4e:f7:dc:7f:0c:4b:c1:ab:c8:7c:56:b8:35:
81:1d:cd:0f:a2:54:31:5a:d3:b0:d0:c4:ea:b4:03:
b2:c0:98:af:ac:76:a0:2d:56:63:39:ec:f3:7d:7c:
8f:5d:99:f8:db:cb:60:b5:0c:78:bf:97:ae:9e:b0:
69:c4:40:b1:cd:18:79:11:c9:d6:30:76:f8:6c:23:
c9:2c:a1:f1:6d:59:87:ee:2d:a8:4f:14:76:b0:f0:
75:8d:c9:40:41:e3:ca:10:aa:ce:16:df:84:d6:ec:
bf:bc:f9:42:04:25:98:98:a8:e9:97:82:92:14:0a:
4c:4c:81:28:b6:09:8a:2e:b0:4b:2d:49:18:f4:39:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EA:85:43:2B:EB:95:12:1E:FB:A6:A5:0A:F5:E2:AC:5D:09:88:89
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/8-qFQyvrlRIe-6alCvXirF0JiIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.72.0/23
92.119.183.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f3:69:f0:72:1f:06:e8:38:61:4c:a9:7b:c7:c6:f9:a1:f6:
69:81:57:77:d8:32:70:56:fe:06:12:74:93:b2:f7:04:78:30:
b0:e9:b7:ed:7f:fc:85:f6:26:50:bc:72:b0:31:60:6d:5c:2e:
84:d0:16:85:d4:a0:27:c7:e9:db:60:12:30:ed:dc:b4:08:88:
47:1c:02:01:94:83:c7:55:83:72:a7:4e:dc:f5:fa:5f:3c:85:
66:fa:f8:9f:aa:7b:78:07:1c:d5:15:7b:29:a2:45:13:5a:53:
a9:5f:32:0a:b6:43:95:78:41:32:7e:27:11:4f:6a:26:8c:c7:
21:5f:59:79:4f:54:63:0d:ea:72:29:a4:7d:25:98:08:0b:91:
b6:78:75:d9:1f:a5:bf:1b:d5:b2:4b:0e:4f:60:5c:8c:ca:76:
86:7a:6a:e4:4b:d6:bb:38:c2:9a:a5:6a:dd:c8:c0:ec:dd:52:
48:7a:ca:41:9e:c5:25:25:c9:5f:31:59:96:69:08:42:f4:a5:
a5:62:96:b7:5c:aa:f7:e1:30:f0:db:b4:44:e6:af:ed:78:61:
a7:d8:a3:3f:73:d7:ec:90:86:34:f7:f2:4e:5e:44:24:d6:a2:
3c:ee:9d:3e:0f:48:4e:ab:12:57:bb:a3:20:40:d5:7f:20:0a:
d5:93:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 15:26:10 2024 by rpki-client on console-ams.rpki-client.org