Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/jFNiOrMyeqpBbvJpVEnYbSEJI6g.roa
File: jFNiOrMyeqpBbvJpVEnYbSEJI6g.roa (raw, json)
Hash identifier: 6o/Oi04qrJBGDexO0lebacMHOIZKb4bZIPSGWmQr4R8=
Subject key identifier: 8C:53:62:3A:B3:32:7A:AA:41:6E:F2:69:54:49:D8:6D:21:09:23:A8
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA683865C0C04FC0FFF4578482A5E64
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/jFNiOrMyeqpBbvJpVEnYbSEJI6g.roa
Signing time: Sun 01 Jan 2023 18:44:44 +0000
ROA not before: Sun 01 Jan 2023 18:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.160.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 20:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:83:86:5c:0c:04:fc:0f:ff:45:78:48:2a:5e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c53623ab3327aaa416ef2695449d86d210923a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:88:cf:68:1c:0b:7d:04:c7:7f:cd:4d:0c:52:
c4:4f:7f:47:af:77:75:72:b2:e7:3c:0d:d3:bd:c7:
8f:e4:1b:b7:81:3b:85:e5:0c:bd:90:26:12:48:82:
84:82:4a:51:a5:ea:30:1b:69:8d:2e:17:17:57:4f:
e6:db:34:70:49:f4:20:5f:20:1d:ff:d7:3b:62:9a:
31:51:52:fc:db:0b:26:d0:2c:08:2a:0c:7c:0a:99:
e9:1d:81:59:3d:cc:05:8f:63:62:e2:3a:d2:3f:6f:
c5:99:a8:9b:6a:ca:ba:fa:66:b0:88:67:cb:11:03:
de:a6:e8:59:57:0d:0a:af:7b:1c:82:08:d0:82:00:
38:a2:a2:5f:45:8f:8a:e1:de:c0:36:7e:85:60:97:
56:ed:ea:8b:a7:54:21:48:76:81:45:1a:9b:f5:1a:
8f:d8:1b:d2:35:be:5b:73:bb:79:1c:ba:ac:ea:07:
8b:89:76:d1:7b:6e:ee:2f:c3:72:c7:a8:3f:f8:2f:
51:e3:69:45:5d:69:22:10:2a:a2:67:74:65:a2:a0:
9a:90:b3:14:98:bc:d8:a2:da:09:6d:cd:71:f7:29:
71:5b:11:99:1f:3a:85:3a:4f:9d:e7:ce:4c:b8:53:
70:8f:68:1f:d9:43:63:2e:4b:28:85:64:6a:77:ed:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:53:62:3A:B3:32:7A:AA:41:6E:F2:69:54:49:D8:6D:21:09:23:A8
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/jFNiOrMyeqpBbvJpVEnYbSEJI6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9b:b0:bc:32:67:09:75:56:50:39:f5:73:97:61:a3:97:96:
2d:35:62:57:e5:a1:e2:98:f7:18:73:ed:45:ee:6a:47:ca:60:
e2:fe:c4:96:24:1d:e0:77:4c:a4:62:bc:5a:85:68:cc:10:9c:
ec:62:95:bd:ea:9c:86:f8:02:e3:48:09:2d:8b:78:c3:3d:6b:
a7:a8:57:e2:a0:a6:7c:1e:07:56:81:b7:23:2d:b4:e1:c6:c4:
5c:5d:83:67:cd:92:42:f7:b5:a7:42:81:1e:df:0a:d9:a7:f4:
fa:77:d2:cd:a7:cd:da:c5:9f:05:fb:ad:80:7e:12:53:1f:0a:
6f:3d:d6:b9:ee:b9:78:80:08:08:2e:0d:d7:a5:16:70:40:01:
1e:7e:8d:f4:98:1d:05:38:23:4e:d5:fe:0c:a5:b9:25:61:c1:
c8:6d:8b:53:d6:6e:ca:df:cd:cd:c9:c0:f9:b7:6d:16:df:55:
cf:d9:1d:aa:f8:68:d9:fe:e3:0b:f1:aa:d8:7c:20:85:6f:f3:
c8:2e:50:ba:56:89:0d:18:e8:33:99:35:36:81:56:72:8d:dc:
14:ce:ab:18:95:83:04:32:55:a7:87:e2:99:10:d9:a9:95:ec:
36:bb:d5:31:1d:a8:f6:bc:2a:f9:17:15:09:b3:62:af:03:02:
eb:76:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org