Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/8VY4E54m6WwRtk7VfygZne4hvj0.roa
File: 8VY4E54m6WwRtk7VfygZne4hvj0.roa (raw, json)
Hash identifier: CRCQRJfikuuzxcFbdAab9QSBLdJgjXE9Lr558EoSMS0=
Subject key identifier: F1:56:38:13:9E:26:E9:6C:11:B6:4E:D5:7F:28:19:9D:EE:21:BE:3D
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 0185707967C13C13637B8D222E1D6792CB03
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/8VY4E54m6WwRtk7VfygZne4hvj0.roa
Signing time: Mon 02 Jan 2023 03:14:42 +0000
ROA not before: Mon 02 Jan 2023 03:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62313
IP address blocks: 193.22.141.0/24 maxlen: 24
91.209.240.0/24 maxlen: 24
212.46.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:67:c1:3c:13:63:7b:8d:22:2e:1d:67:92:cb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Jan 2 03:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f15638139e26e96c11b64ed57f28199dee21be3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3a:1e:6d:c8:05:02:48:94:44:e5:8b:ce:28:
db:fa:63:38:e0:99:82:f9:73:48:36:37:28:98:12:
fe:b7:09:a2:e8:b4:fb:a9:9b:35:9b:46:d7:ee:82:
a5:83:c8:3c:4d:90:a5:21:d1:a3:3f:27:80:85:88:
76:38:3b:0f:21:a7:ff:7b:50:20:24:3c:13:e9:37:
7b:05:85:44:48:e6:ca:00:b1:34:27:8a:d3:8c:50:
cb:27:39:8f:2e:61:6f:76:2d:68:d6:a2:1e:97:b6:
60:ad:4f:68:a3:bb:9c:66:52:6d:6f:71:74:0e:21:
18:97:58:5f:7e:4b:d6:d3:5f:3a:6d:b2:cd:d4:43:
60:3e:62:f3:1f:8a:a2:a6:29:86:cf:9e:ca:37:36:
52:14:d7:03:fc:02:cb:05:bd:32:7a:5c:44:9c:16:
ad:ef:a3:af:ac:fd:96:54:13:84:4a:fe:72:30:3a:
6a:97:c4:38:94:6c:04:d7:fb:b4:12:4e:69:3f:5f:
ff:fc:c2:8d:28:2c:35:b1:5f:a6:1c:1f:f3:b0:fc:
80:bf:df:2c:70:18:ce:a0:98:b1:d4:b4:09:3c:73:
37:c0:71:45:c8:f0:9b:8c:90:0a:ee:99:53:93:8e:
c6:e2:25:93:2b:c5:b6:05:8f:58:9e:1b:ab:37:2b:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:38:13:9E:26:E9:6C:11:B6:4E:D5:7F:28:19:9D:EE:21:BE:3D
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/8VY4E54m6WwRtk7VfygZne4hvj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.240.0/24
193.22.141.0/24
212.46.51.0/24
Signature Algorithm: sha256WithRSAEncryption
38:46:1e:9f:76:8e:b8:46:0e:7c:ac:dd:ac:72:e3:78:2f:d0:
3d:40:76:2e:ef:e5:06:7a:0a:48:6b:9c:60:d5:40:27:83:84:
72:ed:a6:1e:76:02:45:b9:1b:c1:93:83:4a:b9:e3:d4:f6:f0:
06:b4:b2:0e:8e:e1:42:f3:97:6f:75:37:0e:f6:95:1d:ad:a4:
53:c7:77:90:62:0a:a1:c9:e6:8a:80:69:23:da:1d:4e:12:3b:
fd:d5:ce:cc:18:42:0b:72:6c:13:f4:a3:da:a0:61:9a:54:6c:
a1:33:dc:22:8a:d2:03:ea:62:a2:4d:74:85:ce:14:8a:e9:fa:
33:c1:e2:0b:b2:da:ee:ed:69:14:80:57:8a:f3:3d:4d:27:dc:
d0:a4:62:d4:9a:af:d1:59:bf:28:54:8f:f2:73:ee:59:d2:4a:
d6:08:36:70:ab:0b:75:76:b0:43:0c:e8:fb:a7:aa:f7:f6:07:
e5:ed:cf:89:66:6f:6d:c0:2e:08:e9:37:8b:f5:c2:48:50:32:
c1:dd:9d:d7:f0:73:55:23:98:f1:53:de:8a:a1:f0:f6:be:7c:
2e:33:9d:f9:c6:82:79:56:bc:f0:21:fe:bf:b8:b7:90:e2:77:
af:e2:c2:cf:b0:12:32:3b:e0:0b:ac:61:57:c7:af:35:2e:92:
df:a8:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:44 2024 by rpki-client on console-ams.rpki-client.org